Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/52850542A60811EF91FB1113C4F9AE02.roa
File:                     52850542A60811EF91FB1113C4F9AE02.roa (raw, json)
Hash identifier:          7ZACF84BticmqYcy0cTQt7odfs1cGVq62PyCzOJA14k=
Subject key identifier:   88:A2:73:10:94:08:80:A3:05:39:B7:51:2F:6A:1A:A4:1A:C4:05:E3
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3CF8
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/52850542A60811EF91FB1113C4F9AE02.roa
Signing time:             Fri 29 May 2026 00:25:50 +0000
ROA not before:           Fri 29 May 2026 00:25:50 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     20200
IP address blocks:        45.250.221.0/24 maxlen: 24
                          45.250.222.0/24 maxlen: 24
                          45.250.223.0/24 maxlen: 24
                          61.251.182.0/24 maxlen: 24
                          101.53.75.0/24 maxlen: 24
                          115.71.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15608 (0x3cf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: May 29 00:25:50 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a18dd0d-b9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:93:66:c0:10:3f:af:0d:c7:a0:5b:4f:bf:
                    01:54:82:8e:fa:6a:f0:ed:90:a4:a3:dc:39:75:3b:
                    03:cc:80:ee:df:16:f2:f8:56:ae:de:66:c1:76:f2:
                    ba:bb:8f:c6:75:e3:62:80:14:55:ed:ad:e7:a9:f2:
                    40:9e:85:e8:da:61:6c:21:df:1b:2f:3e:67:50:26:
                    f0:11:55:fb:72:b2:73:c3:96:74:9c:66:13:da:2c:
                    5f:42:4d:99:e5:3c:3d:82:4b:66:2e:02:0a:23:24:
                    2f:cd:a2:7f:96:df:e2:02:7a:a5:c2:a3:3d:64:9a:
                    bb:4e:29:7e:4d:be:3e:a1:d6:1a:f0:16:7c:94:65:
                    4f:70:9e:76:ca:65:02:53:64:40:d4:b4:c3:b9:50:
                    e8:06:ff:29:ff:a9:01:a5:ac:0b:91:74:b9:67:19:
                    39:16:c6:8a:22:ac:fb:58:16:50:a3:b9:12:66:53:
                    17:ea:c7:69:de:20:0f:11:81:a4:95:10:f4:b5:91:
                    da:0b:e6:37:15:aa:7b:ff:30:47:5c:b0:a4:52:42:
                    55:d0:1f:11:b4:13:a2:75:27:c1:cd:5a:c7:42:ca:
                    38:fa:90:7f:ad:d0:4c:87:98:61:ba:6f:18:a2:8a:
                    9f:52:a7:40:b9:14:23:02:ff:ac:54:31:8a:9f:66:
                    83:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A2:73:10:94:08:80:A3:05:39:B7:51:2F:6A:1A:A4:1A:C4:05:E3
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/52850542A60811EF91FB1113C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.221.0-45.250.223.255
                  61.251.182.0/24
                  101.53.75.0/24
                  115.71.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:3b:dc:34:2e:60:7e:60:96:c7:80:50:6d:b1:86:ec:89:32:
         c4:6e:19:d1:c1:45:ba:1e:7f:d1:a3:9b:ed:19:70:e7:48:73:
         cf:ce:22:a7:4c:74:fd:43:fa:61:a5:b9:67:46:20:18:05:7c:
         1f:10:03:66:35:27:74:48:07:43:d8:df:1a:2e:20:6d:ec:26:
         89:c3:1d:9b:fe:22:74:bd:cf:56:28:bd:9f:9d:88:b1:2e:63:
         bc:d4:69:75:34:fe:4b:a9:96:4b:34:c4:2d:89:37:85:af:f1:
         8e:e6:08:f2:7c:6f:03:e8:6e:ee:51:fe:62:66:36:ce:dc:6e:
         36:70:4d:d3:19:ce:ce:62:c1:45:9f:d2:16:a0:7d:a4:f7:cb:
         cf:e4:8e:63:e3:a9:04:aa:85:e0:57:25:f5:f2:7c:05:79:96:
         75:61:7d:72:17:a4:12:3c:72:87:bb:36:9f:6b:46:b6:2d:4c:
         93:30:d8:bc:37:79:7d:a9:4d:c8:29:f6:9e:b3:56:18:53:05:
         d1:d6:5b:d7:8b:87:d5:11:bb:25:b7:67:1d:d5:1c:5f:52:6d:
         e0:70:28:e3:b1:5d:e0:42:f2:6f:33:35:ff:8d:ec:a7:c6:b9:
         3b:d6:b7:d7:25:e7:35:3a:e5:71:5e:07:56:00:26:c8:19:3d:
         02:ef:0b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:43:58 2026 by rpki-client