Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/248A4FFE478F11EEABD3353BC4F9AE02.roa
File:                     248A4FFE478F11EEABD3353BC4F9AE02.roa (raw, json)
Hash identifier:          CMpAtUweVr+EqAuGahhTVQ09EFxzxXQiaIMB3NuVn84=
Subject key identifier:   0E:97:2D:E8:97:EA:4A:EA:A2:FB:B1:A0:2E:47:7A:DC:CF:DF:65:B1
Certificate issuer:       /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
Certificate serial:       01DD
Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/248A4FFE478F11EEABD3353BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:37:23 +0000
ROA not before:           Sun 29 Jun 2025 03:31:55 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     17721
IP address blocks:        202.123.48.0/20 maxlen: 20
                          2404:9800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl
                          rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
        Validity
            Not Before: Jun 29 03:31:55 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3ecb2-1f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cc:22:72:8a:ba:16:da:82:e5:1d:be:be:94:
                    9d:0a:2f:fa:fa:c5:d8:3b:02:14:e6:76:1a:53:71:
                    36:84:d0:eb:3b:65:53:ff:96:75:fc:fc:39:84:0a:
                    76:49:aa:3b:11:a6:5f:c4:93:60:b5:4d:e7:84:12:
                    53:f5:83:a7:4c:68:ae:28:70:76:05:b3:58:a4:7a:
                    31:97:44:de:17:f3:39:8a:b3:77:36:c5:8d:45:86:
                    36:5f:05:ed:4e:98:f3:49:33:9b:8b:fb:21:01:66:
                    88:78:c7:51:c0:2f:88:4a:e6:d9:80:8d:f7:6c:57:
                    23:61:3b:f2:03:80:12:55:fc:33:6b:62:ad:7c:f2:
                    2e:56:67:e5:c5:f1:4e:47:b0:00:dc:c1:a9:cf:c2:
                    6f:48:96:07:7a:d2:2e:9b:7f:5f:95:2d:28:36:7e:
                    fe:78:66:72:4b:09:93:b9:1d:61:28:41:7c:17:b1:
                    61:aa:d9:7c:68:36:c7:20:85:0e:ae:eb:6b:69:8b:
                    5e:ec:c0:b0:d4:39:35:57:f9:9f:04:f4:5e:49:fe:
                    41:ef:8e:3e:00:5e:17:6b:b5:df:81:90:62:91:0f:
                    8a:4c:fd:0a:55:e3:a7:fc:f8:e4:7f:4c:e2:0a:0c:
                    4b:80:20:c5:81:b6:cb:74:57:e7:95:55:2d:36:af:
                    54:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:97:2D:E8:97:EA:4A:EA:A2:FB:B1:A0:2E:47:7A:DC:CF:DF:65:B1
            X509v3 Authority Key Identifier:
                keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/248A4FFE478F11EEABD3353BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.123.48.0/20
                IPv6:
                  2404:9800::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:59:b9:63:13:d1:a3:5d:b4:ce:b9:68:36:49:f7:de:e4:d8:
         c8:ba:7b:0b:66:e8:ac:9a:e8:96:9b:7c:a5:f1:15:c3:bd:dd:
         f3:cf:0f:9d:51:72:5a:64:e4:93:d6:51:69:63:f3:28:51:fa:
         58:e6:a6:60:da:49:25:b1:45:7e:c5:71:5d:25:d4:4e:9d:f0:
         72:19:7e:e1:75:cb:bc:d7:4e:28:bf:69:86:92:fe:c1:ce:65:
         cb:ab:d8:50:13:ba:e2:69:1a:fd:68:73:0c:0e:70:5a:d1:72:
         19:45:8d:11:f3:72:cb:5a:ce:eb:94:17:62:5d:47:72:d3:42:
         3e:90:29:bd:7d:1e:b4:f5:ef:ff:4b:71:42:1b:5d:97:bf:3b:
         79:78:a6:16:59:7c:f8:8c:ff:01:ed:b3:a4:d0:55:48:d7:95:
         49:b4:d8:28:c8:fe:9c:a5:51:0f:9d:58:e8:b7:74:52:63:be:
         e0:24:e5:8b:4f:eb:7c:f8:ec:bc:7d:61:f8:86:0c:22:1d:54:
         0b:c4:e5:b0:df:83:01:03:92:70:32:9d:9f:5a:e3:ba:d4:df:
         1a:82:ca:8a:d0:13:0f:93:2d:45:33:9f:3e:fe:d0:dd:0b:80:
         5a:23:ef:41:01:80:f0:ac:ce:b5:24:89:ee:c2:e5:15:86:8f:
         55:e9:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:54 2026 by rpki-client