Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/EBDB1D16FD7A11EF9979942FC4F9AE02.roa
File:                     EBDB1D16FD7A11EF9979942FC4F9AE02.roa (raw, json)
Hash identifier:          PEzlowCNbhSBca+/F5UeSTEd1tPnYkzmYYMT934JTjY=
Subject key identifier:   BB:A8:7C:EC:D4:0F:E9:DE:B7:7A:A6:2E:5E:60:34:B1:52:6F:6C:B6
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       09B2
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/EBDB1D16FD7A11EF9979942FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:13:38 +0000
ROA not before:           Tue 20 May 2025 21:50:56 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45752
IP address blocks:        203.150.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2482 (0x9b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: May 20 21:50:56 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48fe2-d755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b3:3d:27:c8:aa:10:bf:d2:dc:d2:3d:ae:4c:
                    cf:43:e8:88:c2:ad:0c:6e:2c:c1:b8:ff:ef:f8:ef:
                    21:ef:11:a8:71:ce:8d:3e:fd:c2:6a:ec:5f:f7:a1:
                    3f:2a:35:95:9c:a0:fd:1d:37:fd:a2:17:4b:26:df:
                    b9:df:db:ad:eb:a6:84:b2:03:26:69:c6:34:30:2d:
                    d3:6f:5d:7e:4f:81:15:ae:88:e9:98:ea:b4:f0:b5:
                    b8:73:72:cf:7d:4b:fa:a7:53:3e:73:70:f0:d3:b1:
                    fd:9d:9f:f0:60:f6:ad:b7:e3:4b:f7:2b:f9:06:9d:
                    0b:44:8d:fc:8a:c3:0f:2c:64:32:61:df:9d:82:09:
                    a5:48:7f:ba:fb:a7:d4:be:77:b5:58:7c:f1:13:82:
                    86:22:99:ac:32:a2:a7:a5:12:51:95:d6:93:b9:05:
                    f9:4c:19:79:b7:2c:27:d5:45:57:00:62:c7:44:3f:
                    80:ac:17:98:2d:db:64:a1:c2:f3:1c:90:4a:54:45:
                    cf:f6:0c:85:28:54:a7:e5:5c:40:58:0a:4b:8c:71:
                    af:6b:bc:3a:59:d8:54:9e:55:70:3c:33:55:e3:a1:
                    01:5c:b7:11:d9:35:71:a1:94:f4:8a:98:d0:59:ad:
                    18:6b:67:be:b6:31:cc:ad:d3:2e:76:c7:2b:6c:76:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A8:7C:EC:D4:0F:E9:DE:B7:7A:A6:2E:5E:60:34:B1:52:6F:6C:B6
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/EBDB1D16FD7A11EF9979942FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.150.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:d9:c6:72:9c:87:1d:61:cd:74:0d:4f:f5:85:20:79:6d:34:
         03:84:33:4b:c8:47:72:18:7f:01:f5:57:53:72:26:fb:17:31:
         e1:f6:4b:48:c9:46:f2:42:16:a8:ad:9e:9e:69:12:5a:b5:69:
         ea:af:20:b1:08:fe:e5:dd:f7:8f:db:e1:3c:fa:c6:39:5a:69:
         f3:52:19:c5:84:06:81:05:06:d1:cb:04:68:35:d7:2d:14:04:
         88:63:5c:90:ad:aa:49:aa:f9:c5:79:1e:dc:52:fe:46:54:95:
         25:23:9b:30:44:2a:b8:f8:1c:92:43:d0:e2:55:fc:43:f5:6b:
         6c:8a:b1:5c:11:5c:6d:96:0d:a8:63:5a:d6:1d:e4:fd:77:3b:
         ff:e7:c7:6e:9a:57:2a:f9:36:8d:86:3a:0d:a8:02:f3:0d:f7:
         22:ab:11:81:5b:bf:ec:9a:05:a6:f8:10:11:41:c9:b3:b5:bd:
         22:a1:23:70:78:94:87:89:fa:5e:35:71:a7:c3:5c:69:52:b6:
         d4:18:62:00:5c:89:15:f0:a5:32:6a:f1:72:2f:b0:e8:34:c1:
         30:6a:47:67:56:71:8c:75:8e:7a:88:12:c2:71:4d:c4:76:dc:
         13:99:d1:63:1d:6a:1b:b8:e2:91:89:40:ea:18:de:b1:6f:35:
         2d:49:a0:e8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz
M0Y4NDY5MjgwHhcNMjUwNTIwMjE1MDU2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGZlMi1kNzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj7M9J8iqEL/S3NI9rkzPQ+iIwq0MbizBuP/v+O8h7xGocc6NPv3Cauxf96E/
KjWVnKD9HTf9ohdLJt+539ut66aEsgMmacY0MC3Tb11+T4EVrojpmOq08LW4c3LP
fUv6p1M+c3Dw07H9nZ/wYPatt+NL9yv5Bp0LRI38isMPLGQyYd+dggmlSH+6+6fU
vne1WHzxE4KGIpmsMqKnpRJRldaTuQX5TBl5tywn1UVXAGLHRD+ArBeYLdtkocLz
HJBKVEXP9gyFKFSn5VxAWApLjHGva7w6WdhUnlVwPDNV46EBXLcR2TVxoZT0ipjQ
Wa0Ya2e+tjHMrdMudscrbHZ0uwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLuofOzU
D+net3qmLl5gNLFSb2y2MB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB
MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NERDNUQvMzlFNzE0NkMyQTMzMTFFQjkyOURDMDdDQzRGOUFFMDIvRUJEQjFEMTZG
RDdBMTFFRjk5Nzk5NDJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy5aGMA0GCSqGSIb3DQEBCwUAA4IBAQCg2cZynIcdYc10DU/1hSB5
bTQDhDNLyEdyGH8B9VdTcib7FzHh9ktIyUbyQhaorZ6eaRJatWnqryCxCP7l3feP
2+E8+sY5WmnzUhnFhAaBBQbRywRoNdctFASIY1yQrapJqvnFeR7cUv5GVJUlI5sw
RCq4+BySQ9DiVfxD9WtsirFcEVxtlg2oY1rWHeT9dzv/58dumlcq+TaNhjoNqALz
DfciqxGBW7/smgWm+BARQcmztb0ioSNweJSHifpeNXGnw1xpUrbUGGIAXIkV8KUy
avFyL7DoNMEwakdnVnGMdY56iBLCcU3EdtwTmdFjHWobuOKRiUDqGN6xbzUtSaDo
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:48:14 2026 by rpki-client