Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/1AB7C58C57E411EEB143C80EC4F9AE02.roa
File:                     1AB7C58C57E411EEB143C80EC4F9AE02.roa (raw, json)
Hash identifier:          BqC7pGOxO/szZnK2WNXYhwBGYw4rUQUrMZEPUUYyFIQ=
Subject key identifier:   8E:26:22:D5:A2:B8:2F:C6:3D:0D:57:2E:32:7B:48:09:05:91:41:56
Certificate issuer:       /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial:       0267
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/1AB7C58C57E411EEB143C80EC4F9AE02.roa
Signing time:             Thu 29 Oct 2026 03:51:34 +0000
ROA not before:           Thu 29 Oct 2026 03:51:34 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     1239
IP address blocks:        43.239.250.0/24 maxlen: 24
                          114.31.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
                          rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 03:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
        Validity
            Not Before: Oct 29 03:51:34 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ae2c2c6-0c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:48:4f:5c:92:48:9a:85:fb:26:b0:8e:13:
                    34:7b:c0:d5:50:b6:c5:2f:26:cb:57:35:21:c2:6c:
                    84:41:c3:f8:f0:2a:f4:8a:ae:da:90:7a:e5:6f:97:
                    47:c0:24:38:d7:7d:7d:d9:72:96:7b:91:40:5a:cc:
                    a9:a2:53:d7:b9:56:17:d1:ca:77:9c:58:2b:00:74:
                    56:ae:de:b9:c8:03:9b:6e:13:49:d9:4b:a4:55:8a:
                    14:20:72:09:e9:dc:a8:63:cb:d8:1a:ae:68:c2:8e:
                    c3:5e:94:b1:12:8f:1f:7d:18:e1:66:54:62:82:74:
                    c9:ad:9c:7e:c2:9a:9d:06:1f:f0:fc:cc:0b:0c:04:
                    2b:74:53:75:2d:ae:98:37:ba:6b:96:c0:1d:ce:bb:
                    de:6a:07:36:12:4d:53:8e:88:64:ab:64:7b:a6:11:
                    49:7a:52:7a:93:b9:10:9e:ef:e4:58:fd:f1:58:d6:
                    28:25:fd:08:8b:84:87:c3:b2:61:d6:5c:64:a1:29:
                    eb:d2:59:62:d2:d6:74:8f:63:f4:d2:ac:3f:b9:1c:
                    31:00:5a:d5:31:48:20:ef:a2:f9:06:04:03:3d:1b:
                    33:4a:24:17:9e:5f:47:6a:ff:8e:c9:76:ea:c5:c6:
                    0e:60:2b:77:a0:f7:82:e5:26:77:af:61:6f:8c:e5:
                    9f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:26:22:D5:A2:B8:2F:C6:3D:0D:57:2E:32:7B:48:09:05:91:41:56
            X509v3 Authority Key Identifier:
                keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/1AB7C58C57E411EEB143C80EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.250.0/24
                  114.31.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:54:bc:2c:c6:f9:24:80:ca:1b:7e:23:ba:5e:a1:b9:34:e1:
         ab:14:5a:0c:29:71:f7:b6:4e:b3:e7:01:c9:e0:e4:11:25:81:
         09:1b:1c:f6:5a:00:11:6f:89:b0:4d:c6:e3:e3:ff:00:58:1b:
         3b:bd:42:e1:f2:7a:2f:ef:bb:a7:bc:f8:e9:fa:4d:56:8d:6b:
         4c:11:dd:0f:81:da:5c:f8:de:d5:ec:0f:96:e3:9d:0d:13:26:
         50:25:de:a4:ba:fe:72:8e:e5:cb:12:4f:b0:52:dc:08:87:04:
         42:94:f8:3d:d8:27:ea:b3:0c:c7:e1:b0:25:46:a5:dd:40:e5:
         b4:09:bb:20:5b:7e:eb:db:be:e9:a0:de:16:dc:89:61:fb:b4:
         f3:1b:4c:17:dd:55:ec:ce:d8:d4:65:94:86:89:20:9d:51:ec:
         e3:17:1b:29:f6:ea:25:32:fe:19:f5:c5:1d:f8:40:3c:6d:41:
         a9:10:a1:ae:27:f7:7a:09:18:19:51:78:b0:a2:05:ad:87:1a:
         26:34:31:a1:67:7d:a5:63:29:48:61:6d:40:5c:bb:57:9c:39:
         1d:34:da:10:36:02:ec:12:d5:5b:06:c9:2a:c4:ba:87:2d:05:
         15:9f:77:ee:51:d1:6a:67:b3:51:67:cc:5a:ab:e9:78:63:ab:
         e6:39:1a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:13:17 2026 by rpki-client