Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/A5C01D6ED15511EA904EF30BC4F9AE02.roa
File:                     A5C01D6ED15511EA904EF30BC4F9AE02.roa (raw, json)
Hash identifier:          k52zzNPlnYvuAvYWIlxb4hsiHOOq9dzm/h/OPeTzfmw=
Subject key identifier:   1C:9F:92:53:4F:05:09:70:22:33:AB:DF:BC:F7:AF:13:C6:F5:71:C7
Certificate issuer:       /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
Certificate serial:       3542
Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/A5C01D6ED15511EA904EF30BC4F9AE02.roa
Signing time:             Wed 06 May 2026 15:13:16 +0000
ROA not before:           Wed 06 May 2026 15:13:16 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     23731
IP address blocks:        203.175.120.0/24 maxlen: 24
                          203.175.121.0/24 maxlen: 24
                          203.175.122.0/24 maxlen: 24
                          203.175.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl
                          rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13634 (0x3542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
        Validity
            Not Before: May  6 15:13:16 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fb5a8c-45ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:ea:bb:ed:d7:e9:3c:d0:57:92:8b:2f:1a:
                    83:09:58:7f:71:64:f7:22:a0:03:cc:5e:64:38:29:
                    23:ae:7c:1b:d6:fd:ba:7c:35:81:8b:d3:47:96:fc:
                    c4:b8:81:2f:78:0c:34:ce:80:75:de:f4:29:ee:0e:
                    db:cb:ec:9a:1d:a8:cd:15:32:08:a1:2c:8d:c3:da:
                    3b:ff:33:13:49:2b:38:57:d8:99:1f:a7:ca:dd:78:
                    bf:eb:88:90:56:bf:3b:b1:33:dc:e2:f5:0a:fa:b0:
                    56:1b:96:f8:de:e9:7d:38:3e:9a:9c:21:52:c4:22:
                    0b:76:45:98:f6:9f:6e:5d:33:3f:cc:87:e3:f8:a2:
                    72:ed:79:b6:e1:b9:da:6b:5f:8e:68:ff:44:fd:4d:
                    34:9e:40:64:c1:31:dd:84:b0:f3:7e:eb:65:3d:90:
                    b2:4e:c0:b1:bd:85:5c:3a:99:86:ef:e9:66:bc:ad:
                    d5:63:18:3f:04:d1:fc:c2:3f:ef:58:9e:5d:9c:d0:
                    fb:4e:b0:bd:c8:69:4f:e1:46:11:f9:a0:48:9d:ce:
                    bf:06:e2:21:bc:d2:3d:4c:3e:eb:48:c6:62:76:cd:
                    bb:0f:6e:5c:85:a9:21:ba:f9:7d:5a:48:cb:79:92:
                    90:60:fb:7e:fc:59:c5:8e:b4:2b:fb:68:06:46:7a:
                    90:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9F:92:53:4F:05:09:70:22:33:AB:DF:BC:F7:AF:13:C6:F5:71:C7
            X509v3 Authority Key Identifier:
                keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/A5C01D6ED15511EA904EF30BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:f7:c8:e4:e3:7d:9c:43:b5:8e:1f:15:f4:de:b6:20:ad:0e:
         33:15:0d:bd:30:27:60:be:3f:bf:ba:7e:42:f4:cd:f2:28:42:
         f2:00:fc:19:be:17:fc:db:4e:72:38:22:af:34:55:80:23:7a:
         54:19:72:34:01:08:2a:d7:5c:2f:35:6a:32:8c:2c:6e:ed:ac:
         76:81:24:c4:0e:dd:4f:b0:93:32:d9:b8:5c:f3:57:3f:aa:85:
         be:13:97:61:66:6f:91:8e:af:57:f3:ca:54:55:d5:d0:4a:b0:
         05:59:a5:a8:c9:0a:48:18:f8:6a:cc:b0:e3:61:d9:43:69:bd:
         4c:14:34:55:32:19:7d:65:d4:75:5c:74:21:1d:52:bd:56:3f:
         8a:88:ab:02:d2:c3:62:5a:e5:fe:87:0a:e5:68:44:dc:3e:3a:
         eb:79:d1:c2:28:10:7f:0f:99:cf:1e:b4:82:6f:e7:01:84:c1:
         c5:33:79:f1:88:f3:99:df:5b:32:43:4f:0d:fc:bf:79:d7:5a:
         3c:ae:b4:48:d1:35:d6:bb:b9:4e:0e:0c:1f:48:eb:ae:62:68:
         95:20:23:23:97:63:19:df:6b:6c:9a:c6:d6:9b:2d:42:8d:ea:
         db:33:e8:c4:9e:66:17:79:0b:34:51:c1:91:81:df:90:8e:28:
         99:11:11:22
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE0N0ExMTAvBgNVBAUTKEU1MkQ3RjdGQkFBQzFGNzVBRkZBNzYyRURCM0YyODE2
MEJDRkJEMjUwHhcNMjYwNTA2MTUxMzE2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZiNWE4Yy00NWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr6rqu+3X6TzQV5KLLxqDCVh/cWT3IqADzF5kOCkjrnwb1v26fDWBi9NHlvzE
uIEveAw0zoB13vQp7g7by+yaHajNFTIIoSyNw9o7/zMTSSs4V9iZH6fK3Xi/64iQ
Vr87sTPc4vUK+rBWG5b43ul9OD6anCFSxCILdkWY9p9uXTM/zIfj+KJy7Xm24bna
a1+OaP9E/U00nkBkwTHdhLDzfutlPZCyTsCxvYVcOpmG7+lmvK3VYxg/BNH8wj/v
WJ5dnND7TrC9yGlP4UYR+aBInc6/BuIhvNI9TD7rSMZids27D25chakhuvl9WkjL
eZKQYPt+/FnFjrQr+2gGRnqQ3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFByfklNP
BQlwIjOr37z3rxPG9XHHMB8GA1UdIwQYMBaAFOUtf3+6rB91r/p2Lts/KBYLz70l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ3QS80QUYyMjFEQTFE
OTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gzV3Ytbll1Mno4b0ZndlB2
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVTMV9mN3FzSDNXdi1uWXUyejhvRmd2UHZTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE0N0EvNEFGMjIxREExRDk4MTFFMkFEMkIzOTgyMDhCMDJDRDIvQTVDMDFENkVE
MTU1MTFFQTkwNEVGMzBCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCy694MA0GCSqGSIb3DQEBCwUAA4IBAQDG98jk432cQ7WOHxX03rYg
rQ4zFQ29MCdgvj+/un5C9M3yKELyAPwZvhf8205yOCKvNFWAI3pUGXI0AQgq11wv
NWoyjCxu7ax2gSTEDt1PsJMy2bhc81c/qoW+E5dhZm+Rjq9X88pUVdXQSrAFWaWo
yQpIGPhqzLDjYdlDab1MFDRVMhl9ZdR1XHQhHVK9Vj+KiKsC0sNiWuX+hwrlaETc
PjrredHCKBB/D5nPHrSCb+cBhMHFM3nxiPOZ31syQ08N/L9511o8rrRI0TXWu7lO
DgwfSOuuYmiVICMjl2MZ32tsmsbWmy1CjerbM+jEnmYXeQs0UcGRgd+QjiiZEREi
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:22:51 2026 by rpki-client