Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/113EFAA01CD311F183095B1A353D8C67.roa
File:                     113EFAA01CD311F183095B1A353D8C67.roa (raw, json)
Hash identifier:          hxloJgOcKOBqGBUZhYK1fL/Ei66jWkYPEeVHeMiMIeQ=
Subject key identifier:   CF:79:C8:DC:33:39:E4:F4:51:A4:03:72:CB:11:C3:9B:B4:29:94:31
Certificate issuer:       /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial:       08AF
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/113EFAA01CD311F183095B1A353D8C67.roa
Signing time:             Sat 06 Jun 2026 21:26:17 +0000
ROA not before:           Sat 06 Jun 2026 21:26:17 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     135325
IP address blocks:        45.114.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
                          rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223 (0x8af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
        Validity
            Not Before: Jun  6 21:26:17 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a249079-6fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b4:d9:f3:e3:26:0f:d9:0f:cf:6d:c9:5e:2f:
                    12:a5:86:18:8a:93:9a:70:64:c6:6b:62:4c:9e:0b:
                    88:de:db:18:2f:39:1c:1c:58:cd:00:80:ae:22:9e:
                    e5:38:43:78:bb:bc:0d:6b:8c:95:8f:e0:b4:12:5e:
                    74:93:17:f4:ad:b8:23:0f:a2:ea:d4:9b:d0:2b:c0:
                    4a:35:00:ac:5f:86:e9:5a:ec:b8:bc:37:9d:a8:1d:
                    c6:0a:c6:c7:28:86:8f:01:e7:d9:54:00:9f:66:1d:
                    9a:13:6c:07:c7:4b:c1:80:ca:e5:74:82:ae:b1:6c:
                    7a:6c:cf:27:f3:59:5a:20:d5:9f:8a:96:cd:fa:81:
                    e8:56:54:12:c2:70:5b:0c:f3:2f:8a:cb:e8:91:1b:
                    ef:74:9c:4d:67:88:7a:cd:53:49:61:f6:24:3e:b1:
                    33:14:8a:68:9e:2b:ed:cc:1a:9a:44:c7:da:5d:f7:
                    b8:fc:69:0f:1f:f7:f8:a3:62:48:e6:f1:e9:ed:e2:
                    6a:cc:63:70:6f:62:22:36:93:6a:fa:ac:06:f3:3d:
                    d5:99:49:61:c5:09:43:4b:cc:56:07:7c:b6:7f:01:
                    a3:bb:c5:c6:eb:9f:7d:e6:85:1a:be:fa:e2:54:23:
                    6e:b2:79:af:d0:dd:81:a8:6c:24:04:a5:e7:08:56:
                    8a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:79:C8:DC:33:39:E4:F4:51:A4:03:72:CB:11:C3:9B:B4:29:94:31
            X509v3 Authority Key Identifier:
                keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/113EFAA01CD311F183095B1A353D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:9d:2c:38:19:70:14:f9:ec:76:7c:99:f1:b3:87:98:7b:9c:
         97:2e:a4:2b:29:82:82:a2:9f:61:82:59:4d:a0:9b:bc:f9:da:
         a8:51:17:d8:ba:c0:42:4e:bd:05:ea:9c:f8:87:04:e1:eb:44:
         a3:5a:c7:89:d1:0d:89:a9:87:88:c5:aa:5c:67:64:c5:2d:55:
         84:0e:66:7d:04:79:3f:86:ca:c4:85:d2:a7:cc:b5:b6:c3:4e:
         5a:fe:dd:e7:6a:a1:d5:62:48:ec:d0:38:60:aa:48:cb:bf:1a:
         f5:0b:47:cc:84:b1:8b:bb:23:c3:e7:09:4b:62:05:59:19:3b:
         7b:02:40:f7:a5:29:2d:2a:7c:4a:bf:cb:cb:94:17:25:2e:dd:
         61:44:96:bd:90:dc:db:2c:70:dd:3a:ab:0f:f3:7b:b6:3a:28:
         bf:eb:6a:2f:22:ca:41:2f:6e:0e:ae:80:db:4c:74:d9:e1:82:
         8f:50:dd:80:1e:17:74:06:1b:aa:79:33:e5:7f:2d:a9:4e:21:
         72:19:99:6a:14:07:a9:83:8e:9a:a2:f3:71:ba:af:ec:c4:55:
         cf:68:70:19:e6:92:94:ab:08:aa:d0:79:70:07:a5:c2:02:2d:
         3b:a0:69:e8:1e:fa:30:4e:e2:35:31:73:f3:1c:62:88:de:cc:
         ce:c5:53:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:52:44 2026 by rpki-client