Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/689E513E2A4311EBBD69BE46C4F9AE02.roa
File:                     689E513E2A4311EBBD69BE46C4F9AE02.roa (raw, json)
Hash identifier:          afi+PbQC8SpdxQTIi3P8pzh5EKmbxIOg8U6Ac6zzfwY=
Subject key identifier:   04:78:04:21:A9:AA:D0:A5:A1:BB:7F:6F:DC:C5:D8:CA:DF:2D:FB:DD
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       09B5
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/689E513E2A4311EBBD69BE46C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:13:40 +0000
ROA not before:           Tue 20 May 2025 21:51:01 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     56018
IP address blocks:        203.150.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2485 (0x9b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: May 20 21:51:01 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48fe4-37c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:22:d5:39:d2:8b:e4:ec:0b:0d:05:84:d7:db:
                    68:c5:5c:78:fc:89:49:24:9b:7c:25:01:2b:cb:08:
                    ec:4e:7e:bf:17:df:d9:be:c8:38:60:7b:17:33:97:
                    d1:9d:ea:0c:53:53:c3:1d:29:ed:b3:53:b3:3b:a0:
                    6d:83:82:08:41:1a:23:da:65:8e:04:8f:32:14:da:
                    98:ae:1f:d5:26:8a:7c:66:62:ef:ee:7a:df:9d:4e:
                    fc:5a:b1:5a:98:4d:a9:96:0f:7a:a3:30:b8:0d:4b:
                    8d:22:7b:9b:a2:dc:1f:9e:18:20:bc:b6:3a:51:1c:
                    0d:e1:9b:c9:ba:12:96:77:4d:e9:d2:d7:f2:87:cb:
                    81:b6:9d:2a:78:fb:ad:70:65:2c:2c:bb:26:7d:ec:
                    91:a0:d8:44:72:a9:77:4e:89:e2:35:96:9d:05:dc:
                    92:e9:30:a1:b3:53:40:4c:46:4b:f5:7b:a4:26:a2:
                    20:22:e9:94:5c:8a:6a:99:4c:11:b4:df:56:28:3f:
                    eb:8a:b3:84:6b:3a:da:35:44:bf:36:72:2c:01:ff:
                    6c:4c:6f:78:7f:dd:06:fc:86:32:d0:21:c2:dc:c7:
                    8e:15:76:74:db:52:aa:73:c0:2f:1b:6b:34:f0:12:
                    6e:4f:64:4a:bb:ef:4f:18:16:82:96:c7:7e:67:c3:
                    52:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:78:04:21:A9:AA:D0:A5:A1:BB:7F:6F:DC:C5:D8:CA:DF:2D:FB:DD
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/689E513E2A4311EBBD69BE46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.150.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:54:ab:af:99:53:c0:5c:f1:07:05:84:62:57:46:84:38:7d:
         70:d6:dd:ec:bb:21:09:5b:17:45:18:9d:88:53:62:f7:cd:00:
         4b:41:f8:7a:3c:b7:9b:91:cb:cb:28:ca:1e:fb:b0:57:46:57:
         00:69:40:8c:eb:c9:e2:f8:99:85:7c:4d:ca:fc:7e:45:f6:14:
         ea:36:16:34:cb:08:1f:53:c5:b9:15:5d:92:db:94:05:e4:a6:
         b8:92:63:cb:92:6b:03:fb:6d:b3:a0:42:cf:26:98:85:7c:37:
         ce:72:77:66:b3:75:61:93:0b:9d:dc:84:4f:81:9e:c7:9e:5d:
         1d:97:3e:d7:0c:26:da:e8:b5:f7:d5:1b:12:07:3e:36:88:36:
         45:14:26:d5:fb:25:1f:af:1a:c4:88:5c:d3:b4:6c:a7:00:68:
         ef:75:6d:25:3a:f9:6c:a4:dc:2d:5b:94:ec:7a:c7:e5:e6:d0:
         5f:70:ed:a5:f4:fa:8a:50:8e:04:17:69:37:d0:ef:e8:a0:7e:
         bb:fc:e8:2c:23:58:a4:ee:b5:35:b4:6b:5c:6a:8c:76:df:07:
         02:eb:24:44:15:c9:41:2d:a5:ee:18:db:19:52:6f:c1:e0:c0:
         04:ef:04:a8:9b:56:84:c9:28:c9:10:be:c6:4b:f3:18:8f:ef:
         f8:1d:99:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:59 2026 by rpki-client