Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/546C4C7C4E1911EFA1FB9E57C4F9AE02.roa
File:                     546C4C7C4E1911EFA1FB9E57C4F9AE02.roa (raw, json)
Hash identifier:          WCgD3dhEyApsVw5qYSnPJOkwM02YDabYIDYsJcmbbzk=
Subject key identifier:   97:B2:A0:0B:BA:9E:02:E6:DE:0B:29:DA:9C:7F:EF:F7:D6:67:26:33
Certificate issuer:       /CN=A916E44B/serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
Certificate serial:       0147
Authority key identifier: 81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/546C4C7C4E1911EFA1FB9E57C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:46:03 +0000
ROA not before:           Fri 05 Dec 2025 03:13:26 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        122.252.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl
                          rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E44B, serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
        Validity
            Not Before: Dec  5 03:13:26 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a5949b-cc7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c0:44:2d:af:0a:63:93:cf:1b:1f:86:9d:54:
                    da:ff:0a:28:b6:e7:48:1a:f6:e9:9e:6f:10:03:52:
                    9d:18:30:e0:f5:9e:c6:bd:76:07:18:6f:99:c0:a6:
                    f3:6f:cc:d9:cd:82:5d:f1:6c:32:85:b6:6d:7f:12:
                    fd:eb:1f:fb:89:0c:42:fb:c0:75:01:77:73:bb:58:
                    5c:34:73:77:91:c3:bb:bf:71:7b:9f:9b:05:60:09:
                    94:09:74:84:de:80:5b:12:73:17:0f:f2:ce:7d:8e:
                    e8:16:7b:bb:f6:69:53:a1:e9:5d:5a:04:10:23:f6:
                    6f:67:2b:67:8d:06:1a:3c:ad:7e:68:58:eb:c4:36:
                    d6:ef:41:b9:90:e7:2a:30:70:4f:51:ee:ae:f0:1b:
                    10:5f:6b:5d:76:2c:fb:df:69:c1:1d:91:c8:6e:3c:
                    5d:b1:09:8f:91:02:95:24:24:a9:99:ff:35:0e:65:
                    f1:1b:52:f3:95:27:00:f0:ef:a8:2e:ef:68:49:f9:
                    74:98:ca:24:06:1c:be:55:0c:4c:35:db:93:05:da:
                    0c:7c:3d:0d:11:c4:b6:8d:2e:22:e1:1d:15:42:84:
                    2a:70:57:d2:82:00:b5:17:38:53:4e:12:61:4c:68:
                    f8:c0:3b:7a:ac:a8:2f:26:5a:4c:f4:a2:be:d1:a9:
                    fb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B2:A0:0B:BA:9E:02:E6:DE:0B:29:DA:9C:7F:EF:F7:D6:67:26:33
            X509v3 Authority Key Identifier:
                keyid:81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/546C4C7C4E1911EFA1FB9E57C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.252.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:f0:e6:49:cf:de:d7:41:86:db:c0:9d:7b:c2:14:b3:4d:fc:
         17:e3:ac:e2:9b:1d:b1:68:31:50:1b:7c:7e:95:91:3b:98:9d:
         4e:27:27:f9:3f:26:92:23:7a:d2:05:ac:ba:1e:a2:8b:88:43:
         49:58:91:e6:78:3b:eb:8f:a8:41:27:96:2f:5d:8f:a1:d7:36:
         1a:93:b2:4a:df:a7:84:f9:cc:e2:ca:f3:47:e4:ba:ef:cb:bf:
         b7:a4:9f:c8:c2:a3:9e:27:ea:2b:0a:73:1b:05:72:e1:c0:3a:
         98:f4:c8:e5:9c:ff:4b:3c:c7:5d:ea:a9:4f:22:1b:91:c0:25:
         a0:1d:11:92:03:66:ac:30:8b:79:84:01:0a:eb:66:76:fe:8e:
         93:28:e9:f9:81:85:38:82:8f:35:bd:52:35:57:59:1d:45:83:
         27:36:62:fc:28:77:bd:39:c6:64:a2:35:87:c5:0c:5d:25:cc:
         26:c6:fc:b6:e2:5e:17:2d:ca:ec:ab:e6:e7:48:b2:87:3b:70:
         08:d3:1a:63:ea:9d:aa:ff:e1:de:fb:dd:0d:7e:30:bf:bb:34:
         b0:fd:cb:3a:8f:02:06:71:23:cd:4e:4a:d2:40:bb:fc:36:bb:
         76:f1:8f:e1:9a:96:7e:31:4f:19:28:4a:06:76:21:77:d7:74:
         b2:c4:88:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:00 2026 by rpki-client