Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/D44C47FE91D311EBBE8C7D54C4F9AE02.roa
File:                     D44C47FE91D311EBBE8C7D54C4F9AE02.roa (raw, json)
Hash identifier:          hoTsa8dVgQ4vW+5S2YD2L/R9GnNm4cZof285Ws4nrg4=
Subject key identifier:   BF:32:4B:1D:B2:96:41:A4:18:1F:A0:EE:75:EB:5E:DC:C5:92:B5:54
Certificate issuer:       /CN=A912B635/serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
Certificate serial:       0702
Authority key identifier: 2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/D44C47FE91D311EBBE8C7D54C4F9AE02.roa
Signing time:             Thu 04 Jun 2026 22:27:28 +0000
ROA not before:           Thu 04 Jun 2026 22:27:27 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     58666
IP address blocks:        202.12.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl
                          rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1794 (0x702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B635, serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
        Validity
            Not Before: Jun  4 22:27:27 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a21fbcf-4d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:ab:0a:83:ec:27:b3:ba:95:41:11:d3:aa:
                    a9:34:1a:9a:e0:ff:4d:29:69:06:03:d5:51:20:3e:
                    71:f6:17:f1:8a:41:75:8b:4b:6e:3d:93:b7:82:82:
                    d5:4b:e1:d9:15:e3:db:b9:b7:94:01:47:7e:63:0e:
                    8a:7a:19:8e:1d:a2:cf:5d:58:2f:24:70:9f:c5:50:
                    58:03:e0:c6:de:40:52:f4:db:12:45:a9:83:8d:4e:
                    e4:67:b7:de:2a:1d:31:46:e7:e8:ac:1c:b9:a5:f9:
                    60:83:e0:30:34:c2:b7:af:6c:bd:e2:8d:43:c0:7e:
                    c7:2d:f5:b2:81:7e:d0:78:f4:3f:42:83:80:34:4b:
                    bf:ca:97:c4:e7:73:6f:95:a1:c1:c7:a6:33:23:62:
                    c0:fb:5d:07:a4:5d:c0:66:a0:cd:e4:fe:0a:11:0d:
                    40:b6:a3:47:fd:30:43:2a:d5:0d:60:18:3b:84:d2:
                    68:41:54:ac:d1:74:2d:63:42:07:30:d4:f0:95:a8:
                    bf:3f:98:f9:1e:48:df:f9:8b:b9:d4:d1:16:3d:cb:
                    f9:b0:ab:86:16:05:1f:9a:19:94:90:d9:80:cd:4d:
                    45:23:34:3f:bc:c5:7f:97:45:9a:a8:3e:71:10:e3:
                    b5:12:9a:6f:ab:18:3b:81:0f:99:a9:05:af:38:99:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:32:4B:1D:B2:96:41:A4:18:1F:A0:EE:75:EB:5E:DC:C5:92:B5:54
            X509v3 Authority Key Identifier:
                keyid:2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/D44C47FE91D311EBBE8C7D54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:a6:91:75:13:ed:f0:20:03:b9:28:a4:94:d0:bf:60:1b:
         93:de:2e:6b:3e:66:12:b2:27:aa:5a:b1:65:37:ef:0f:70:ef:
         65:52:59:f0:65:a1:cf:f6:1b:e0:d9:79:f3:e6:86:af:a2:1b:
         09:88:b4:06:e5:1d:53:b1:53:e9:35:0a:cd:d3:a3:b1:a2:97:
         9c:3c:48:ba:63:97:95:c0:29:01:1d:3f:ad:71:45:70:16:97:
         00:c8:0b:f5:73:56:4c:da:e3:23:22:99:6d:8e:23:08:86:dd:
         b0:eb:f7:3e:5a:02:e2:8e:0c:90:20:d4:ee:76:38:77:ae:0b:
         7a:d0:52:71:23:71:47:c6:d7:75:4a:95:cf:e6:f0:88:34:2a:
         17:0b:92:3a:ca:0c:fc:b9:9f:71:6d:9e:e3:b2:41:2a:53:34:
         14:3e:b2:bc:9a:2d:85:41:42:5a:43:1e:ea:ca:ba:c4:5d:2b:
         ce:7a:e6:b2:93:71:97:18:13:7a:4d:27:e9:c0:c6:15:85:c5:
         b5:ab:74:3f:f3:cc:d2:17:a9:d6:82:2b:b9:30:86:cc:45:37:
         c7:41:d6:fc:f5:93:4f:d1:82:57:79:29:58:63:d0:0b:da:1b:
         1d:48:6a:19:c4:1b:dd:2c:0b:77:65:d5:68:98:6a:82:78:7b:
         9e:66:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:09:33 2026 by rpki-client