Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/49FEE4EA83CC11F09BE0565EC4F9AE02.roa
File:                     49FEE4EA83CC11F09BE0565EC4F9AE02.roa (raw, json)
Hash identifier:          eQqXfw7KpOOBP+Td93jgjIhVJNu+VT2VfIFdrctBg/A=
Subject key identifier:   DE:51:95:98:B7:21:11:D0:AA:E7:43:84:26:71:C4:2A:3E:1C:19:A6
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       3603
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/49FEE4EA83CC11F09BE0565EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:56:21 +0000
ROA not before:           Mon 02 Feb 2026 15:11:32 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     24042
IP address blocks:        203.130.136.0/24 maxlen: 24
                          203.156.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13827 (0x3603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Feb  2 15:11:32 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48bd5-c7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:ce:ea:9e:a0:d0:30:ca:a2:f1:78:67:3d:
                    44:be:08:90:57:b8:b4:3d:d0:da:12:de:c1:f9:1a:
                    bb:d8:79:77:a7:ec:e1:80:6d:ab:3a:da:c1:7c:88:
                    9c:ef:3f:5e:91:79:65:70:83:05:d8:2a:b2:7c:62:
                    0a:99:11:2f:7b:81:c5:23:76:14:70:42:a5:c3:11:
                    7e:0a:77:29:2f:ee:1f:b0:8b:ee:f7:51:a6:d7:35:
                    d7:96:00:c6:5e:67:72:17:0e:67:b7:89:55:c3:9f:
                    fd:7e:1e:82:db:12:90:e1:25:99:c9:01:5c:c5:e0:
                    06:45:e8:36:04:cb:e5:f7:cb:19:e3:06:47:fc:3b:
                    4c:34:5e:4f:c8:32:ae:30:50:e7:48:be:b9:32:c7:
                    af:10:94:09:4c:14:4d:45:d1:41:8e:f8:cb:f8:b2:
                    46:45:17:8a:bb:2c:24:b9:ab:16:2a:ab:e4:6a:19:
                    05:e9:31:17:fd:f8:95:3f:74:43:d8:b2:19:b0:c0:
                    90:59:d8:1a:3f:1e:f5:b7:f0:42:f9:3c:0b:20:1d:
                    32:6a:6f:30:89:ed:62:a7:17:9d:cb:76:f6:95:1e:
                    69:de:e7:3e:75:8e:ac:1b:ed:fa:e4:09:a4:5e:13:
                    c9:0d:5f:ea:e0:67:14:39:62:0f:e9:62:da:93:08:
                    d0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:51:95:98:B7:21:11:D0:AA:E7:43:84:26:71:C4:2A:3E:1C:19:A6
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/49FEE4EA83CC11F09BE0565EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.130.136.0/24
                  203.156.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:6d:d3:ca:ce:70:74:32:6d:e0:27:1c:b1:8f:3f:45:7a:09:
         1e:c9:cd:8c:2f:9d:41:72:f7:b5:df:5a:3c:b0:2d:08:a5:ef:
         1d:24:9b:fd:09:c9:eb:6b:7f:90:fe:1f:04:d9:bc:27:b8:40:
         93:c3:a9:f2:55:80:2d:5c:e6:c3:ab:f6:4f:4f:44:de:da:86:
         f2:52:a5:fc:a2:c7:56:78:2a:d1:74:48:31:69:e3:84:ea:1d:
         d2:a0:b6:24:9e:41:a3:a5:f0:ac:4f:1c:dc:fb:0f:b4:8a:4d:
         4a:73:cc:9d:cc:17:87:a7:f1:b7:7d:ec:52:70:7a:3a:f6:fe:
         ca:b5:92:89:30:98:df:5d:d8:3a:e8:18:9c:4e:25:2a:09:36:
         cd:c3:29:d0:73:d2:57:92:e3:7c:89:a3:ee:ec:08:30:48:24:
         10:0b:d4:c2:93:66:9a:87:5b:9e:ae:46:54:ec:9a:74:11:07:
         8e:f6:9f:fe:53:34:c5:f0:86:fe:c6:b4:ac:09:99:e4:48:a0:
         71:6d:f5:7c:47:51:a3:56:4e:57:a6:bb:83:85:d4:41:73:de:
         a8:86:70:10:80:49:f1:74:df:df:42:c5:8d:ef:a5:07:e8:4a:
         e1:bd:32:b8:f7:0b:fd:da:7a:02:7c:22:f5:fa:e2:2e:43:9b:
         76:ab:b3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:09 2026 by rpki-client