Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/BE8AD5FE4F3111F1B77F8F88B3833773.roa
File:                     BE8AD5FE4F3111F1B77F8F88B3833773.roa (raw, json)
Hash identifier:          i1nbnWsRyWA3C+HvpQ2HqooMFJRx6jA4xtRr9reViF4=
Subject key identifier:   A5:BE:B4:C2:B8:B4:E4:18:39:A2:7C:95:C8:31:EC:1C:49:31:B9:F2
Certificate issuer:       /CN=A913BB38/serialNumber=D2F7938CE94A0EAE9639E6C9798B645FA90CC1FD
Certificate serial:       12
Authority key identifier: D2:F7:93:8C:E9:4A:0E:AE:96:39:E6:C9:79:8B:64:5F:A9:0C:C1:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0veTjOlKDq6WOebJeYtkX6kMwf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/BE8AD5FE4F3111F1B77F8F88B3833773.roa
Signing time:             Fri 05 Jun 2026 09:40:50 +0000
ROA not before:           Fri 05 Jun 2026 09:40:50 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     24463
IP address blocks:        203.21.156.0/22 maxlen: 24
                          203.21.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.crl
                          rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0veTjOlKDq6WOebJeYtkX6kMwf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BB38, serialNumber=D2F7938CE94A0EAE9639E6C9798B645FA90CC1FD
        Validity
            Not Before: Jun  5 09:40:50 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a2299a2-efd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:4b:d0:a7:85:78:57:a9:2c:89:57:04:d0:
                    62:67:c2:64:d0:a0:f6:93:b1:35:1c:7c:30:96:8d:
                    1e:cc:fe:c7:81:78:1e:51:8a:1e:0e:5c:1b:f5:c8:
                    eb:b5:2c:3d:a9:9e:86:00:f1:24:a7:10:c9:5c:1a:
                    c5:d4:e2:45:39:f2:fb:19:76:bc:01:1c:2b:b9:04:
                    9f:5e:f2:a8:60:f3:de:3e:96:8e:a0:b2:e6:ab:87:
                    21:f1:c4:d8:9b:65:44:e6:7f:72:46:63:39:9c:7c:
                    5a:7c:bf:93:46:8d:91:3d:01:55:34:59:28:7e:78:
                    82:f1:65:9b:66:12:4e:26:df:44:58:b0:86:e9:1a:
                    5e:ca:eb:5a:10:36:fb:d6:0b:07:17:15:cd:c0:ff:
                    00:e7:2a:dc:a2:04:1b:f5:76:fe:57:80:50:f4:0e:
                    b4:7a:bf:20:51:85:f0:3c:78:8c:ca:ad:e2:64:fc:
                    da:4d:a8:7a:45:ad:a3:c0:ff:92:d7:07:bd:1f:0c:
                    d8:7a:66:16:59:87:c5:31:c5:df:fb:61:c6:77:d7:
                    1e:af:16:b3:e1:8e:93:9c:61:af:d6:cc:fc:c7:5c:
                    6b:a1:cb:2d:d9:ed:74:36:d7:52:83:40:43:2a:0a:
                    e5:ea:40:e4:5b:c4:c7:f4:b8:2c:f4:1a:4c:e0:b9:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BE:B4:C2:B8:B4:E4:18:39:A2:7C:95:C8:31:EC:1C:49:31:B9:F2
            X509v3 Authority Key Identifier:
                keyid:D2:F7:93:8C:E9:4A:0E:AE:96:39:E6:C9:79:8B:64:5F:A9:0C:C1:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0veTjOlKDq6WOebJeYtkX6kMwf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/BE8AD5FE4F3111F1B77F8F88B3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.21.156.0/22
                  203.21.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:45:de:c4:bc:31:59:6b:57:80:d8:3a:36:33:32:11:22:5e:
         7c:85:20:15:5f:94:15:9e:2b:fc:f4:0a:6c:5d:38:f6:9e:6d:
         08:34:64:ed:41:bf:7f:53:aa:03:a5:56:5d:13:77:89:9d:4a:
         2d:12:2f:65:ee:c5:00:3c:e5:6d:26:1d:b8:b0:08:97:9b:60:
         7e:e0:c4:65:c5:7d:5d:db:db:d7:c2:8f:5b:95:e4:6b:b6:cd:
         8a:80:70:79:3c:6e:5c:af:25:14:90:f0:42:60:b8:ee:64:33:
         00:e6:ac:b6:4c:96:6d:70:2c:7e:06:a7:41:e8:39:2b:d0:47:
         b2:57:a6:65:a5:a0:ad:d5:36:5d:20:47:c3:ce:f8:15:ea:24:
         99:44:a2:a6:ca:5f:d1:b3:d1:9f:4c:53:b1:63:94:2f:8b:50:
         01:ea:57:d9:2a:f7:a9:15:48:c0:d5:b1:36:b1:c6:99:f9:92:
         1b:c3:e2:53:dc:93:6d:47:57:da:55:76:af:50:ef:82:08:61:
         20:60:51:57:2b:ea:e3:3c:76:b6:13:4b:62:30:1a:be:08:76:
         2c:3a:a9:87:e5:82:12:d1:41:7d:b7:8d:6e:fb:54:6a:71:e4:
         d7:05:ab:eb:b4:d5:29:f5:3c:8d:7a:22:da:b7:5b:d6:81:21:
         4e:6a:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:46 2026 by rpki-client