Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/4A4C8CD0F67311EBA0F18818C4F9AE02.roa
File:                     4A4C8CD0F67311EBA0F18818C4F9AE02.roa (raw, json)
Hash identifier:          1kXvyMyTfQW1wNgNaYMaoQ9qTTwEo0KtJXbFw2dkbNQ=
Subject key identifier:   BE:A7:1E:F4:3A:9D:33:D6:2D:AE:DA:6A:4F:C6:45:22:81:9D:37:6C
Certificate issuer:       /CN=A913B714/serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF
Certificate serial:       05DD
Authority key identifier: 5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/4A4C8CD0F67311EBA0F18818C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:39:19 +0000
ROA not before:           Fri 26 Sep 2025 23:55:49 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     136423
IP address blocks:        203.25.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl
                          rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501 (0x5dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B714, serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF
        Validity
            Not Before: Sep 26 23:55:49 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a43377-1cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:07:04:0d:a6:38:b5:43:5e:4b:f9:49:12:bb:
                    18:0b:26:4a:e4:44:d5:b0:bb:72:09:ec:38:4a:37:
                    09:f4:00:f3:9c:9c:71:a7:6b:4f:14:1e:7f:3f:41:
                    cb:e3:34:86:c1:85:f1:8d:ef:5d:ef:cb:39:7f:d7:
                    81:e2:9a:c2:70:3e:c2:56:df:5e:0e:d0:9e:f2:ae:
                    50:d3:e7:2f:2c:13:54:c8:a8:9e:5b:bd:ad:6e:03:
                    99:c0:ce:fd:7c:e1:f9:4a:44:dd:bb:ec:50:01:f9:
                    d8:25:25:0a:27:bf:c9:61:a1:aa:54:d4:10:5a:b9:
                    b6:06:60:47:c2:b6:2e:b0:c8:f3:fa:fc:5b:d6:a7:
                    e2:ac:7f:ba:3e:3b:81:4c:8a:71:6a:3e:da:a5:a2:
                    b6:40:27:bb:ba:9d:1d:0f:17:8c:91:46:02:ed:a8:
                    6c:38:00:a6:fc:a9:53:c9:a1:ba:52:73:0e:74:6e:
                    c2:d9:64:05:29:e0:bf:6b:8f:3c:d2:e0:62:fc:00:
                    c6:1a:7a:99:41:c8:62:f4:56:77:52:4e:d1:15:bd:
                    eb:51:c6:42:c9:9d:42:9d:1b:ee:eb:3e:58:37:36:
                    56:20:d5:79:22:ef:c5:17:55:ff:02:7a:56:09:6a:
                    e2:25:3d:81:12:d1:b0:db:a1:c8:b9:0d:8a:53:c1:
                    dd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A7:1E:F4:3A:9D:33:D6:2D:AE:DA:6A:4F:C6:45:22:81:9D:37:6C
            X509v3 Authority Key Identifier:
                keyid:5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/4A4C8CD0F67311EBA0F18818C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.25.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:53:2f:c9:1f:12:be:31:ce:47:29:36:ba:a0:7a:2d:37:2f:
         d7:55:42:5d:dd:82:bf:e3:7d:ed:f7:0e:f4:a5:0d:4f:44:58:
         c3:8f:bc:a6:9d:17:a0:59:19:e7:5e:8b:7c:ce:7c:6c:2d:2e:
         47:f6:38:b6:40:07:18:60:f8:02:a6:d1:81:5c:55:b1:d5:18:
         9e:b0:9e:1b:14:c5:a2:f5:a5:37:a4:30:7c:b9:b5:83:4b:a0:
         51:b6:97:0a:fd:92:9d:d9:09:f4:ab:e2:e0:24:a9:58:e1:5a:
         d1:b9:a8:8d:56:e2:3b:cb:5c:95:f8:76:c3:a3:f7:26:e8:b5:
         f3:41:09:43:82:ab:56:fd:8b:b2:48:db:77:9f:59:92:fc:69:
         6a:92:ea:5b:80:4a:b9:14:82:63:cb:4d:57:1a:51:50:1c:97:
         8c:04:bd:8e:e7:dc:0b:e2:08:20:7a:3d:72:83:cd:67:3a:46:
         b0:81:2b:52:89:6e:17:b6:ee:f0:10:bb:16:12:5c:9e:83:51:
         30:a2:d1:40:68:c8:ef:5f:30:48:ec:de:3e:52:4f:4d:e2:3b:
         64:84:63:c8:64:10:fa:ad:5d:07:eb:14:f0:87:32:84:7e:4e:
         26:f4:92:dc:f4:e2:ea:4c:5f:ba:78:b7:42:9a:7f:fd:78:78:
         4f:be:2a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:10 2026 by rpki-client