Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/14671BD890A311F19EA46D796F11F970.roa
File:                     14671BD890A311F19EA46D796F11F970.roa (raw, json)
Hash identifier:          LRK4uCWmqWpWw3Xm3dXQgxGRrJCrM0VZNsAVYzL7FS4=
Subject key identifier:   C6:CD:D4:67:B1:18:42:7E:E1:69:97:6A:A8:70:A1:AA:28:B9:6F:25
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       05C0
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/14671BD890A311F19EA46D796F11F970.roa
Signing time:             Wed 05 Aug 2026 07:55:53 +0000
ROA not before:           Wed 05 Aug 2026 07:55:53 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     134090
IP address blocks:        203.32.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Aug 2026 01:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1472 (0x5c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Aug  5 07:55:53 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a72ec89-c769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:2f:0f:7a:df:f8:f7:64:35:37:ec:03:c1:
                    45:15:03:68:cb:34:4c:2e:4d:7d:e6:33:5d:30:8b:
                    bb:c9:a6:78:ad:64:90:71:1c:39:36:dc:fd:b7:e4:
                    7d:76:21:ac:7f:9d:95:f8:26:1d:89:fc:df:23:c4:
                    d5:c9:62:ed:dd:7c:cc:41:d2:1b:8d:e5:7e:0b:c0:
                    92:d8:74:8f:8a:cd:5c:ce:37:4d:35:98:b3:8d:e3:
                    40:ff:b5:ff:2d:b4:50:c3:68:bb:6f:a1:e6:35:3b:
                    5a:31:89:6f:10:cf:7e:6b:26:83:c1:66:4f:1c:7f:
                    35:65:9a:8c:13:54:6a:2d:02:b8:2a:63:ae:36:9f:
                    83:de:e2:76:14:34:0d:7d:5d:b2:54:3c:e8:5a:2a:
                    ea:0a:f6:f7:bf:21:ad:d7:ad:d4:af:29:40:5c:d7:
                    cf:e8:c6:5d:d8:dd:e2:4d:cf:81:3d:bf:dd:63:4b:
                    71:46:28:32:4a:0d:6e:1f:cd:c6:11:bf:c6:d7:ae:
                    1f:e5:0c:04:dc:30:18:18:ec:36:02:44:6e:69:19:
                    b5:01:2d:37:ac:ba:fe:54:20:b9:f7:89:3c:03:6a:
                    71:60:80:79:a0:86:4c:b3:6b:b6:25:cb:24:17:14:
                    2a:92:6f:d8:fe:a1:64:a0:bc:1e:aa:81:45:31:05:
                    76:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CD:D4:67:B1:18:42:7E:E1:69:97:6A:A8:70:A1:AA:28:B9:6F:25
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/14671BD890A311F19EA46D796F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:7f:e5:e5:56:5e:e4:0f:58:0c:e3:db:65:fe:c1:a6:7d:98:
         53:17:0e:a3:1c:3d:05:45:20:c0:95:c5:55:18:43:1e:aa:2f:
         59:3a:e0:ac:0e:98:71:46:9f:63:bb:6c:c3:ae:8b:b5:50:62:
         eb:ab:fe:89:1e:55:f3:b8:3a:ee:35:99:24:97:02:cb:b6:9e:
         db:69:f1:e3:1d:2e:73:52:78:25:fc:e7:f8:83:23:b9:3d:4d:
         e2:72:36:73:e3:7d:19:30:92:2d:2d:46:dc:af:49:b2:d9:a2:
         48:59:d3:51:03:bd:38:fa:be:70:ff:d8:45:52:9f:a0:38:e9:
         6c:7f:02:f4:7a:33:44:e9:d5:86:c9:d9:f1:82:be:5f:7d:75:
         12:82:58:e5:c4:85:6d:0c:5c:da:85:74:03:f8:47:ed:da:0c:
         57:11:aa:71:8d:ee:07:3f:5f:c0:70:c1:5f:1c:97:d0:f9:4f:
         6d:b7:95:01:88:8a:5e:05:e5:3e:b8:59:89:04:16:70:b5:39:
         f3:2a:73:62:ef:4a:e8:60:91:7e:39:0b:a4:35:4c:91:3f:7e:
         48:71:c2:18:5b:8f:d4:2e:43:93:ce:7e:02:15:51:5a:7c:98:
         ed:15:d4:64:64:e0:be:fb:6e:3a:7a:4a:95:68:64:14:63:f3:
         30:ea:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:16:06 2026 by rpki-client