Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/ABE74AD463B111F0B7B37637C4F9AE02.roa
File:                     ABE74AD463B111F0B7B37637C4F9AE02.roa (raw, json)
Hash identifier:          QhAtb7RZdyqizEHTl7ia1E+ChVek7Dqp9PT6kKKvmME=
Subject key identifier:   EA:8B:F6:77:AD:AE:BC:27:88:77:02:C8:C5:69:1A:43:80:BF:32:5C
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       3600
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/ABE74AD463B111F0B7B37637C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:56:19 +0000
ROA not before:           Mon 02 Feb 2026 15:11:28 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     142299
IP address blocks:        203.147.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13824 (0x3600)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Feb  2 15:11:28 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48bd3-efee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:11:93:23:f2:73:fb:52:11:7c:41:2f:8b:8e:
                    5e:78:cf:c2:9f:f9:18:bc:0b:ef:1f:1d:6c:a9:33:
                    4f:bc:36:07:ec:43:47:f8:9a:95:c3:74:16:91:2a:
                    05:27:ad:ad:34:90:25:f8:4a:b8:4e:d4:33:25:c4:
                    52:e6:ff:f9:e5:4e:73:d5:2e:15:8c:72:8e:c7:44:
                    85:b9:36:dc:95:29:43:5e:91:27:96:e7:9d:63:a5:
                    87:76:c9:9d:08:28:60:b5:d7:92:cc:12:34:2f:d2:
                    15:51:cc:4c:e1:51:01:1d:fb:cf:a9:04:fb:28:dc:
                    8a:81:83:e9:bd:5d:84:8a:75:59:2d:bd:7e:0e:9e:
                    33:a1:6b:3a:d4:0e:47:71:55:7c:3e:e6:fe:2e:d1:
                    e5:32:ad:35:2a:77:86:c4:0a:f7:70:c2:39:4e:7e:
                    68:d6:02:80:56:00:1a:23:7b:f1:34:c8:eb:05:c0:
                    4e:b9:45:62:dd:bd:36:07:0c:f2:bb:16:90:2a:99:
                    20:b5:a0:81:50:c2:6e:7d:05:67:38:f1:27:6f:4c:
                    d3:f0:8c:bd:43:a5:42:fc:0c:83:a7:0c:2d:35:27:
                    7f:e6:11:e7:ba:a6:89:87:ce:fc:ee:2b:57:18:d1:
                    16:9f:16:7e:0d:75:bd:e3:5e:f9:f7:d7:27:ec:43:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8B:F6:77:AD:AE:BC:27:88:77:02:C8:C5:69:1A:43:80:BF:32:5C
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/ABE74AD463B111F0B7B37637C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.147.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:fe:2d:1b:a4:35:9d:64:19:0a:9f:5f:1f:35:17:25:aa:db:
         0b:a4:ee:e1:4b:f8:1d:43:02:77:54:2f:38:39:63:72:2d:67:
         a7:64:8a:96:1d:a5:62:43:27:4f:d1:11:cc:6c:7f:03:9b:37:
         ac:25:0e:91:3c:de:f4:ff:61:1f:21:2b:d3:e7:99:55:b7:8a:
         eb:e0:a8:48:9a:7c:a7:9f:3d:19:30:32:01:9a:fe:b4:aa:a8:
         da:96:72:ae:c0:17:06:df:72:7f:01:8e:be:96:de:1c:a5:62:
         dd:7e:1d:d3:d5:2f:d5:18:1a:65:af:20:99:9e:8e:16:73:73:
         a9:42:92:bf:df:26:fd:f6:7d:84:8e:22:ef:f6:02:99:da:23:
         f6:fc:6a:80:9d:a4:b7:06:84:21:26:44:91:a3:55:be:b6:04:
         2b:a5:82:0a:68:21:3e:3f:eb:0d:8e:cc:1c:0f:b1:36:f4:37:
         a4:24:17:51:6f:4d:87:1d:4f:83:63:be:1b:f7:c0:30:aa:79:
         30:98:fd:dc:71:82:91:92:eb:7f:d8:bf:2e:9a:ca:b2:a5:f1:
         4c:49:09:af:23:79:54:3d:61:16:c7:1a:7a:87:41:e4:67:a8:
         55:e9:23:d2:b4:77:56:fe:b9:89:f9:ef:3f:e0:07:fd:8d:63:
         f1:37:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:29 2026 by rpki-client