Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/2A8233E263E611F189F5BA418947A888.roa
File:                     2A8233E263E611F189F5BA418947A888.roa (raw, json)
Hash identifier:          azSrx6uMgRU5WHByqSOBhufThnSRIw5W/2jqteEi26M=
Subject key identifier:   A6:F2:68:40:A8:46:30:23:F2:E8:28:80:D0:38:E8:52:D2:8A:B1:5F
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       A9
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/2A8233E263E611F189F5BA418947A888.roa
Signing time:             Tue 09 Jun 2026 09:32:43 +0000
ROA not before:           Tue 09 Jun 2026 09:32:43 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     3491
IP address blocks:        187.54.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: Jun  9 09:32:43 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a27ddbb-e3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2f:33:a8:25:15:d6:77:2d:71:b4:39:7c:77:
                    77:cc:cc:b9:8a:26:50:0c:8f:7d:c7:c9:ca:7a:62:
                    ab:c3:4e:3d:9b:f0:f5:68:2a:35:ce:89:81:b2:79:
                    34:e6:dd:cf:8b:66:47:48:f0:79:69:f8:97:57:03:
                    4b:ac:a9:b1:38:bc:01:1f:7b:98:6f:bf:ba:15:e0:
                    2e:a4:48:e6:45:65:01:f1:25:67:25:a2:da:b6:a1:
                    67:a9:ec:dd:cd:bc:fc:f0:91:3d:1a:d6:33:a8:c8:
                    9e:f1:70:60:03:cb:30:7b:7e:0f:3f:ce:0b:c9:db:
                    b7:65:3f:63:d0:0a:14:b7:07:8e:d9:a6:90:2e:95:
                    68:1c:31:9a:2a:2d:a3:3c:78:37:db:c2:48:92:a4:
                    cf:5d:68:08:a8:b0:36:fb:3f:5f:ce:d1:ae:69:9e:
                    66:32:3b:9d:5c:de:c1:58:c3:3c:22:7d:d3:4f:61:
                    ad:e1:dd:73:0b:cb:17:08:8f:b1:b7:44:1d:5e:fd:
                    35:08:f2:d0:13:df:d6:31:13:24:24:a5:6a:7d:74:
                    42:d3:c5:c8:65:5f:0a:9a:3c:98:0e:27:6f:7e:57:
                    12:1f:9b:44:73:e4:4a:b6:54:9d:28:00:72:94:ee:
                    d9:ea:5e:50:cb:1d:c2:bc:5c:50:7d:ef:d6:2d:52:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F2:68:40:A8:46:30:23:F2:E8:28:80:D0:38:E8:52:D2:8A:B1:5F
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/2A8233E263E611F189F5BA418947A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.54.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:dc:d9:0c:c5:a7:08:a7:10:ba:13:45:c0:da:87:79:93:b7:
         a9:91:29:c4:65:bf:79:88:3d:36:1a:f3:1d:70:09:ed:ab:03:
         60:5b:84:88:82:bd:fe:32:e6:af:da:80:6e:05:e6:3e:58:16:
         b7:eb:61:42:34:36:2e:a1:a5:a7:35:32:15:c7:2d:f3:89:e8:
         89:37:ed:03:82:ed:54:dc:c6:8a:52:bf:bb:58:f9:ab:64:2e:
         7b:c9:fc:ae:b9:eb:65:30:65:4a:8a:6f:d9:ed:63:6c:c4:52:
         66:10:43:fd:eb:0e:ac:e2:44:f1:6c:7c:34:c4:e0:cb:30:62:
         4d:fb:70:c5:69:ac:9e:f2:4e:0d:6c:2a:69:89:48:67:42:9b:
         c9:d5:ff:47:1d:02:bf:2c:c9:d0:69:2b:21:d0:6b:96:f7:ae:
         33:34:72:41:d5:43:55:2a:f7:2c:f8:6a:3d:4e:1b:7c:eb:55:
         e4:bc:c8:d9:88:b4:1f:3b:79:84:42:d0:da:7b:bf:62:5b:cb:
         28:63:07:80:0d:bd:ad:73:ae:04:88:96:6a:e1:a3:a0:6e:8f:
         6d:6d:5d:21:d9:b4:eb:e3:52:ff:e9:95:0b:f2:9b:f6:e4:f6:
         d7:8d:1b:23:a6:fa:0a:a9:8c:5d:ee:a2:62:ac:c8:af:30:81:
         8f:8b:c8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:27:10 2026 by rpki-client