Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/11DDFF8E54DF11EDB7409267C4F9AE02.roa
File:                     11DDFF8E54DF11EDB7409267C4F9AE02.roa (raw, json)
Hash identifier:          SV+bZOpveaF6gRb1xTwAjvC4Ahc21Acwt2F034JPZjM=
Subject key identifier:   F4:C7:FE:EF:87:7B:B2:84:69:09:2D:C6:E1:7F:78:B7:94:A7:8F:16
Certificate issuer:       /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
Certificate serial:       0280
Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/11DDFF8E54DF11EDB7409267C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:14:11 +0000
ROA not before:           Tue 27 May 2025 03:00:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56182
IP address blocks:        202.0.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl
                          rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
        Validity
            Not Before: May 27 03:00:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3f553-5d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:3d:9c:04:f6:1c:d6:d9:5d:b4:2c:0e:78:
                    39:cc:fd:f3:62:dd:07:3e:3c:a6:b2:91:8f:d3:eb:
                    a5:66:90:46:6a:b1:be:83:9f:83:dd:4e:6d:5f:72:
                    89:9e:c7:c8:c2:36:74:5b:b4:0f:4c:7f:0a:8b:b1:
                    64:4c:c0:8c:88:e5:39:4c:3a:4e:51:c1:47:d0:70:
                    6c:c7:02:93:56:62:46:da:4d:43:a2:d9:11:89:ac:
                    14:64:2d:bb:88:94:2b:ac:6e:ae:ac:06:4f:3c:05:
                    5b:80:a1:34:99:7f:c2:f3:ec:0a:c8:dc:67:78:0c:
                    4b:ca:de:55:e4:81:ab:93:47:60:0e:8a:b4:75:54:
                    f9:f2:35:58:7b:d8:0c:84:88:ff:e0:31:28:4c:b9:
                    67:d6:91:5a:5c:58:42:70:f3:f3:14:b4:ce:dc:10:
                    9e:f4:f6:37:39:89:f2:da:f5:af:61:29:a9:a2:ca:
                    00:6f:98:a7:0e:99:bd:ed:d5:d0:80:ec:e6:6d:c2:
                    4b:03:16:3e:c0:e9:46:ee:09:9c:d0:d6:b0:b5:ce:
                    9f:41:8d:c6:9d:3a:d3:6b:55:31:c3:4a:14:78:f0:
                    ae:4c:95:79:83:e7:48:7f:e1:87:f3:f3:e4:d3:c5:
                    aa:dc:77:cd:29:ff:ab:04:63:de:c8:c6:27:de:91:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C7:FE:EF:87:7B:B2:84:69:09:2D:C6:E1:7F:78:B7:94:A7:8F:16
            X509v3 Authority Key Identifier:
                keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/11DDFF8E54DF11EDB7409267C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:52:a4:da:25:00:49:07:ea:47:4b:07:22:37:34:c5:b3:d1:
         b9:32:58:9f:e3:27:ff:a1:72:2d:2a:6b:c2:b8:46:36:ad:c6:
         d5:b7:18:8b:6d:86:1b:ff:d0:af:ea:06:09:b8:00:e2:3f:15:
         09:aa:9e:05:0a:49:1e:89:4c:8c:ca:3b:8d:7f:e4:3a:55:bb:
         06:5d:48:a4:54:87:34:6d:58:55:72:c0:a2:71:3f:80:73:07:
         fc:11:c0:10:a2:a0:e6:3f:8b:44:4e:74:74:ef:e0:30:7c:eb:
         b2:20:72:f6:83:3f:1c:57:00:b6:70:14:fc:cb:8a:5d:45:72:
         b7:74:2d:ce:ce:33:4c:66:44:0d:92:0d:a2:df:3c:e1:a7:e4:
         01:b3:17:65:72:3c:0e:ce:65:ea:70:1e:22:c9:68:90:67:b6:
         d6:0b:b6:f7:00:36:f9:5f:33:a1:1a:88:e7:9c:9f:fd:aa:6b:
         c7:c1:38:36:dc:b0:f2:36:4c:02:c5:71:5d:b9:93:f8:0a:02:
         55:e0:9d:ef:42:b0:d2:00:b5:77:d2:9f:f5:0c:0f:eb:fd:f1:
         b8:c8:f1:a3:d7:a3:7f:91:ec:31:4f:31:1a:ed:25:cc:45:78:
         9f:d7:d6:3b:f5:e1:92:f1:1e:28:91:34:d1:39:7f:f3:0d:23:
         af:70:eb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:36 2026 by rpki-client