Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/E652AA52C40911EBA930053BC4F9AE02.roa
File:                     E652AA52C40911EBA930053BC4F9AE02.roa (raw, json)
Hash identifier:          sEb1EJmWVcSgKGVkUz52jLxfQvAvzd6VdzWj6R//XeM=
Subject key identifier:   FA:59:1A:86:8E:45:A0:77:A1:65:09:8B:B9:19:6A:82:67:12:55:79
Certificate issuer:       /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Certificate serial:       3590
Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/E652AA52C40911EBA930053BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:25:58 +0000
ROA not before:           Fri 18 Jul 2025 14:50:51 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     141047
IP address blocks:        111.119.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
                          rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13712 (0x3590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
        Validity
            Not Before: Jul 18 14:50:51 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a476a6-e37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:b6:4a:3d:23:5c:ff:11:9c:89:b1:9a:9c:
                    d1:d0:29:66:11:43:72:35:bc:e1:89:3e:e7:73:8e:
                    60:04:81:d4:c2:ba:65:af:c6:76:d9:d7:0f:34:95:
                    f2:5b:8c:5e:5a:35:b6:75:ae:72:ac:b8:89:17:30:
                    02:f2:0f:1a:4b:f6:26:3a:ad:42:08:98:ad:f2:ec:
                    e3:08:e0:57:fc:d8:13:df:24:75:ac:27:8b:ae:b9:
                    19:5a:a1:1b:ca:12:c5:c1:63:f9:16:56:90:42:10:
                    14:e3:d3:b1:cf:53:54:a8:ec:35:dd:bc:77:5b:12:
                    2e:fc:41:24:4c:d9:b7:9d:58:92:9a:c9:fa:7b:18:
                    e3:2f:f1:d0:f8:a3:98:50:93:91:e8:02:8c:52:74:
                    67:b3:7c:6d:88:e6:d8:90:12:14:7e:91:0a:85:29:
                    3d:4b:34:1c:38:c5:ee:25:8e:fa:04:78:7f:90:72:
                    9e:a7:25:0f:97:bc:ba:fb:ac:65:4e:fc:70:f2:87:
                    10:6f:9c:b0:81:d5:91:a2:96:e4:12:7b:db:fc:33:
                    dd:4c:24:c5:cb:7a:24:24:3e:6f:bd:6b:48:a0:f4:
                    aa:9c:b1:4d:4b:39:79:3f:7b:3c:b1:3b:7f:21:8c:
                    85:52:b7:de:74:79:50:32:f2:56:d2:da:10:76:43:
                    ce:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:59:1A:86:8E:45:A0:77:A1:65:09:8B:B9:19:6A:82:67:12:55:79
            X509v3 Authority Key Identifier:
                keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/E652AA52C40911EBA930053BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.119.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:dd:16:67:56:cd:d6:5b:d7:50:64:6f:a5:97:c2:fb:54:66:
         d4:3f:be:15:c0:bb:da:91:51:7f:71:2c:df:89:eb:1a:60:21:
         a1:31:08:6a:c3:e0:c7:f2:dc:27:11:88:d6:2f:c2:13:e0:46:
         30:d2:7d:48:0b:ec:2e:11:a9:b4:25:11:27:8e:18:0a:90:9a:
         cd:8a:52:5d:38:46:d9:c0:3a:ef:74:29:c7:00:f2:f7:28:49:
         26:34:37:4d:5f:29:11:e8:47:74:d1:51:24:7b:97:7f:7a:b6:
         ac:b1:1a:c3:a4:e0:91:73:26:64:9d:56:3d:65:e5:39:45:ba:
         06:27:bc:df:63:e0:a1:e5:5c:47:30:bf:30:64:ef:e9:d8:bf:
         9a:b6:7e:3f:9b:ef:5d:a1:4c:fc:39:c4:28:5e:75:96:9c:b9:
         03:d5:e3:38:d5:79:92:c5:02:3f:3d:71:bc:95:fe:0c:a8:dc:
         51:b1:e4:8e:24:40:a9:e4:a5:23:a8:c5:0c:24:40:82:5f:b1:
         cb:3e:d2:db:d7:cb:47:46:04:ce:a6:6f:0f:80:2e:bf:34:c7:
         3d:6b:6b:7e:27:5e:4e:de:a5:38:e8:99:db:76:0f:78:77:c1:
         e5:ac:a6:c7:b7:20:7d:62:6b:23:b5:26:95:33:a0:a4:41:09:
         df:3f:be:f4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VEMzUxMTAvBgNVBAUTKDdFRTk0NUU5RTVFNTFDNEI0MUQ5OUM0MzMyOTUyRjlD
OTU4NzY2MDgwHhcNMjUwNzE4MTQ1MDUxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzZhNi1lMzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArl62Sj0jXP8RnImxmpzR0ClmEUNyNbzhiT7nc45gBIHUwrplr8Z22dcPNJXy
W4xeWjW2da5yrLiJFzAC8g8aS/YmOq1CCJit8uzjCOBX/NgT3yR1rCeLrrkZWqEb
yhLFwWP5FlaQQhAU49Oxz1NUqOw13bx3WxIu/EEkTNm3nViSmsn6exjjL/HQ+KOY
UJOR6AKMUnRns3xtiObYkBIUfpEKhSk9SzQcOMXuJY76BHh/kHKepyUPl7y6+6xl
Tvxw8ocQb5ywgdWRopbkEnvb/DPdTCTFy3okJD5vvWtIoPSqnLFNSzl5P3s8sTt/
IYyFUrfedHlQMvJW0toQdkPOWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPpZGoaO
RaB3oWUJi7kZaoJnElV5MB8GA1UdIwQYMBaAFH7pRenl5RxLQdmcQzKVL5yVh2YI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUQzNS9CNjNCQTdFRTFE
OTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhFdEIyWnhETXBVdm5KV0ha
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z1bEY2ZVhsSEV0QjJaeERNcFV2bkpXSFpnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0VEMzUvQjYzQkE3RUUxRDk0MTFFMjlEMUEyRUY5MDhCMDJDRDIvRTY1MkFBNTJD
NDA5MTFFQkE5MzAwNTNCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDb3coMA0GCSqGSIb3DQEBCwUAA4IBAQCg3RZnVs3WW9dQZG+ll8L7
VGbUP74VwLvakVF/cSzfiesaYCGhMQhqw+DH8twnEYjWL8IT4EYw0n1IC+wuEam0
JREnjhgKkJrNilJdOEbZwDrvdCnHAPL3KEkmNDdNXykR6Ed00VEke5d/erassRrD
pOCRcyZknVY9ZeU5RboGJ7zfY+Ch5VxHML8wZO/p2L+atn4/m+9doUz8OcQoXnWW
nLkD1eM41XmSxQI/PXG8lf4MqNxRseSOJECp5KUjqMUMJECCX7HLPtLb18tHRgTO
pm8PgC6/NMc9a2t+J15O3qU46Jnbdg94d8HlrKbHtyB9YmsjtSaVM6CkQQnfP770
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:01 2026 by rpki-client