Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/F4ABC602F57411E9B18D9325C4F9AE02.roa
File:                     F4ABC602F57411E9B18D9325C4F9AE02.roa (raw, json)
Hash identifier:          nHmP3Uq0DseTCp3TbviM06SZ9bgQptrjk3hdxz+na1Y=
Subject key identifier:   31:75:EF:34:15:22:5C:67:48:4C:F0:B7:31:E0:13:A4:5F:B4:F2:7C
Certificate issuer:       /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial:       36AB
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/F4ABC602F57411E9B18D9325C4F9AE02.roa
Signing time:             Fri 12 Jun 2026 15:13:08 +0000
ROA not before:           Fri 12 Jun 2026 15:13:08 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     45532
IP address blocks:        114.130.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
                          rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13995 (0x36ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Validity
            Not Before: Jun 12 15:13:08 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2c2204-050a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:a2:6c:46:dd:e1:df:ef:1e:50:7d:e6:bb:
                    fc:9a:c5:aa:70:0d:e4:04:48:be:7c:26:61:e9:36:
                    39:a4:b1:e2:e7:97:6a:f2:b8:1e:d4:30:e2:ac:87:
                    2b:a2:62:34:98:14:2c:fb:43:b2:60:1e:4d:c6:9b:
                    db:ed:ff:e4:44:2d:a9:93:18:38:8c:05:20:3d:3b:
                    c8:17:8f:a4:81:23:80:98:80:20:52:21:c5:d2:82:
                    8f:cb:8b:d2:0e:5b:54:b7:4b:4f:a4:d8:bb:b1:52:
                    24:46:c9:27:7b:7b:d5:bb:f0:28:24:d2:d9:51:92:
                    ca:d1:30:c7:ff:30:42:32:df:9f:8e:bb:5d:60:60:
                    a0:28:6f:5a:1e:2d:eb:27:12:f5:e5:df:5d:e6:62:
                    fe:61:91:85:f6:e3:49:a2:18:37:ac:d4:3b:c7:53:
                    ab:0c:c6:88:23:ef:da:0f:cc:bf:e2:de:b8:f9:7f:
                    bb:7f:76:89:44:a3:c1:db:51:48:7d:9f:35:f8:59:
                    34:dc:45:51:a4:f2:bc:91:f4:ad:7e:19:09:b6:76:
                    b3:08:21:96:1c:75:c2:30:d1:78:27:19:05:63:d6:
                    a2:18:8e:35:11:cc:91:f8:3e:92:6e:b2:7f:46:a6:
                    2f:89:d8:04:5e:61:e3:03:4d:ea:eb:67:80:67:c1:
                    34:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:75:EF:34:15:22:5C:67:48:4C:F0:B7:31:E0:13:A4:5F:B4:F2:7C
            X509v3 Authority Key Identifier:
                keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/F4ABC602F57411E9B18D9325C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.130.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:b0:55:9d:b2:2d:1f:25:b9:28:53:a8:17:eb:83:41:a2:
         a9:46:cd:7f:db:c9:79:3c:d4:f1:09:55:b2:c4:9d:ef:42:7c:
         e9:cb:18:67:ea:eb:a1:dd:38:9c:da:18:64:10:89:4b:6b:0f:
         ee:59:9b:b2:1d:dd:67:43:11:ab:14:cb:e6:8e:18:25:20:47:
         d6:89:78:b6:25:c6:4d:f0:6e:79:1f:64:17:f7:aa:09:d6:a7:
         bb:0f:df:33:0a:e8:a9:da:2c:3b:c7:96:07:c8:21:ac:a1:ea:
         26:88:ed:f3:5d:47:8e:b0:fc:21:4b:5e:55:46:45:0f:05:53:
         e4:79:f5:36:d1:ab:2a:0c:c3:1f:7a:bf:6b:1f:4c:bf:1a:b5:
         0e:75:79:a0:03:4a:42:0d:06:3c:74:8b:d0:97:f8:22:20:f6:
         36:e7:66:e5:ea:4c:42:39:de:e3:c1:95:19:d0:d8:fb:18:bf:
         f2:49:05:80:69:3f:84:ae:e2:1a:0f:2a:e1:a6:33:71:8f:0f:
         d6:1c:0e:ef:5e:15:55:3a:69:b0:4f:41:7c:b4:20:ac:10:62:
         a9:23:c9:eb:0c:05:e6:8f:2c:df:c0:ac:60:6d:23:f9:e8:7c:
         f4:bb:68:d1:98:e6:a6:63:74:d7:ce:9d:05:04:be:3d:58:79:
         bb:e6:57:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 19:15:15 2026 by rpki-client