Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/5BAEE25E5C1511F1A463B2F993833773.roa
File:                     5BAEE25E5C1511F1A463B2F993833773.roa (raw, json)
Hash identifier:          QAjB04e8BhjTa56xp5s1mLUlyQZMay4mhoLGvM2MXNo=
Subject key identifier:   04:26:FF:E8:B1:CF:2D:AD:79:BA:6E:BB:CF:98:DE:29:FC:36:CD:09
Certificate issuer:       /CN=A9148355/serialNumber=6601C17D120E40E99CE5F81D42D7557439633F52
Certificate serial:       0B
Authority key identifier: 66:01:C1:7D:12:0E:40:E9:9C:E5:F8:1D:42:D7:55:74:39:63:3F:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgHBfRIOQOmc5fgdQtdVdDljP1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/5BAEE25E5C1511F1A463B2F993833773.roa
Signing time:             Sat 30 May 2026 10:51:12 +0000
ROA not before:           Sat 30 May 2026 10:51:12 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     42
IP address blocks:        203.119.112.0/24 maxlen: 24
                          2001:dd8:1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.crl
                          rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgHBfRIOQOmc5fgdQtdVdDljP1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:31:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148355, serialNumber=6601C17D120E40E99CE5F81D42D7557439633F52
        Validity
            Not Before: May 30 10:51:12 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a1ac120-1f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:84:6b:16:1b:fb:61:1f:c2:fd:60:39:42:
                    b4:73:44:ee:97:13:b9:7b:10:e8:52:43:5e:00:1e:
                    59:47:4a:f7:d9:93:2e:ac:b4:53:15:7f:fa:f1:27:
                    e6:4d:74:5f:73:66:89:82:d7:c9:cd:83:ad:41:d2:
                    39:cc:b1:1d:d2:9e:da:7b:51:62:18:a1:97:f8:53:
                    f6:51:1f:bb:96:10:fe:3f:3c:5b:aa:4a:62:90:3e:
                    7f:8f:4c:30:2d:2e:70:af:72:42:7e:9a:b3:16:f2:
                    ef:78:33:65:d8:dc:e2:05:23:0d:8d:d2:c7:d5:71:
                    b8:10:1b:90:c2:87:93:db:f1:51:7d:b7:0e:a8:05:
                    cf:d7:68:12:e3:1e:9d:54:86:a5:e8:4d:5b:c3:fc:
                    57:d0:ec:24:6f:b4:7b:c9:a2:07:4d:df:9b:27:0c:
                    53:85:d5:d5:cb:5c:30:1c:d6:95:f8:70:c1:fa:13:
                    cc:3c:ee:30:75:c0:45:51:15:58:52:85:8b:ea:98:
                    58:92:5b:cc:e3:b6:a5:69:36:03:49:30:13:a5:7e:
                    17:ac:a5:0c:57:8a:6a:02:26:a6:6c:ca:ba:9e:ad:
                    31:d6:a6:f0:e2:d5:71:56:e9:4b:3e:50:1d:b7:1c:
                    90:e0:af:33:4b:ab:2b:a9:ed:b2:c6:17:1d:43:20:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:26:FF:E8:B1:CF:2D:AD:79:BA:6E:BB:CF:98:DE:29:FC:36:CD:09
            X509v3 Authority Key Identifier:
                keyid:66:01:C1:7D:12:0E:40:E9:9C:E5:F8:1D:42:D7:55:74:39:63:3F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/ZgHBfRIOQOmc5fgdQtdVdDljP1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgHBfRIOQOmc5fgdQtdVdDljP1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148355/CB5328945C1111F1BAF9DFC992833773/5BAEE25E5C1511F1A463B2F993833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.112.0/24
                IPv6:
                  2001:dd8:1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:67:c9:b6:43:b4:de:5c:ed:6d:22:fc:3e:c3:e3:fb:c7:43:
         d1:c0:19:44:e6:c0:01:11:51:06:d4:dc:31:eb:08:14:f0:9f:
         e4:fd:f5:93:ea:fd:b6:6a:c4:f5:aa:d7:66:56:b6:02:c4:4d:
         1c:58:00:84:db:3e:9a:92:e1:ef:c5:02:31:07:b1:f7:f3:6d:
         41:43:67:98:94:f3:ba:6a:a6:86:63:cd:1a:05:1d:a2:c8:bb:
         5c:d2:62:14:8a:cf:b0:5b:96:78:9b:c8:4e:7f:21:99:b0:d1:
         f3:18:33:39:16:76:ac:43:5b:9b:f6:9c:a0:6c:96:36:a5:c7:
         a6:64:0a:53:fd:36:58:1c:cc:8f:0e:77:09:f4:87:e4:94:6c:
         0c:9a:48:43:8e:3c:b5:05:34:5e:72:ad:fd:5d:ce:16:75:92:
         01:0f:79:2b:7d:ef:b4:3a:5b:66:0a:bf:2c:27:0f:d6:bf:af:
         17:66:42:e7:2d:c5:26:32:56:75:b3:e0:23:cf:9f:f0:f3:fc:
         2e:bd:26:60:c7:7e:0f:fc:5a:9f:cb:1f:e3:c0:8c:fc:3d:e2:
         c8:f6:4e:97:8e:e5:75:8c:9c:4f:6c:8a:c8:6a:e1:62:cb:5f:
         a4:c5:90:d8:91:6a:f7:23:08:b9:03:f5:23:72:55:aa:81:8e:
         3d:20:fc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:50:11 2026 by rpki-client