Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/8D0D3948559B11F1BB94402596833773.roa
File:                     8D0D3948559B11F1BB94402596833773.roa (raw, json)
Hash identifier:          5Sk01y+FNKNqXXGbCIox7P2JuyJ+akX6I+2QatggVJo=
Subject key identifier:   C5:87:88:27:66:35:4E:0B:16:7F:E5:C0:2F:B2:30:33:61:CC:76:28
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       78
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/8D0D3948559B11F1BB94402596833773.roa
Signing time:             Fri 22 May 2026 05:03:20 +0000
ROA not before:           Fri 22 May 2026 05:03:20 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     206675
IP address blocks:        187.54.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: May 22 05:03:20 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a0fe398-b764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:39:de:c3:04:b4:5b:e5:94:f6:b0:10:23:
                    92:b5:2c:38:9d:7e:1d:2f:79:75:f5:e5:8e:08:ca:
                    57:47:4c:70:a9:05:57:48:28:c6:a5:dd:0f:47:75:
                    f8:0b:60:d9:35:d6:fb:08:79:3f:1d:ce:1c:8f:95:
                    ad:e7:7e:62:95:a8:41:7d:fc:12:3c:ca:a7:71:27:
                    a8:c8:34:e9:eb:84:8f:e0:23:56:c6:86:fb:6c:b1:
                    6f:a9:55:4c:a8:59:32:87:d6:0a:21:3b:88:57:9b:
                    9f:00:a6:b3:74:37:30:65:e0:0f:e9:62:29:80:d4:
                    b9:f0:51:58:0f:5c:99:82:89:bc:2b:08:d1:10:d3:
                    b2:fd:f2:34:ad:c7:f3:05:26:90:3d:0c:0c:f1:11:
                    e4:ab:3e:45:96:cb:96:04:f5:4a:e3:ba:c3:c5:da:
                    3a:33:e8:ae:bf:f3:40:9c:2e:0e:67:25:9c:93:67:
                    a1:dc:dd:83:73:9e:9c:52:be:5a:2e:19:82:11:86:
                    bb:cc:b1:6c:aa:c5:2a:a9:8b:80:36:2f:e2:97:2a:
                    f5:56:79:db:a2:46:36:6c:a4:29:8c:09:3b:97:9d:
                    d7:57:88:0a:9d:a4:f6:03:c0:f5:f8:fc:ee:ce:e7:
                    b8:9b:cb:90:13:f2:b9:12:c3:74:a9:b4:81:ff:d8:
                    e1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:87:88:27:66:35:4E:0B:16:7F:E5:C0:2F:B2:30:33:61:CC:76:28
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/8D0D3948559B11F1BB94402596833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.54.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:a2:07:ec:58:09:70:07:62:37:d0:50:93:5c:cb:b3:f2:d5:
         75:83:7c:8b:24:e5:59:06:82:44:79:24:c4:13:0b:da:dc:a2:
         e2:f5:fa:b0:d5:99:ba:34:e7:54:41:67:17:7d:89:e0:41:2e:
         cd:2d:b1:62:61:dc:31:c4:1b:5f:1e:31:cc:37:f8:f0:34:a1:
         7e:21:db:0e:91:c9:3f:b1:f0:d6:ad:0f:a9:c7:43:8f:41:69:
         c3:4a:88:58:bd:e6:27:b0:ee:44:00:0a:e0:b4:0a:45:20:4c:
         f5:b3:60:74:10:0f:13:ea:1e:cf:66:88:cb:89:7a:e7:5c:bd:
         fe:6c:78:3b:71:c8:b3:19:2f:d5:c0:7f:aa:ee:48:5b:e1:93:
         99:53:ce:b4:8d:f8:35:6f:d7:38:d9:8b:74:19:06:da:72:7b:
         40:27:c3:1a:79:8e:e4:31:57:8d:7d:7c:b6:47:0f:99:f3:ba:
         22:2f:14:f6:f3:f2:61:39:e2:c0:58:5b:ac:07:ff:c1:b2:61:
         9b:0b:77:f5:ef:bf:3d:2e:91:74:8d:f0:73:d7:66:b1:c2:db:
         3c:72:c0:93:f3:f3:c3:2d:93:67:be:e4:8b:43:6f:99:8e:e8:
         33:d8:86:37:77:8f:b0:46:65:2b:f6:c0:08:15:18:2f:09:2b:
         ff:c5:6a:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:35:25 2026 by rpki-client