Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D24316B48D6D11EB9DB49A32C4F9AE02.roa
File:                     D24316B48D6D11EB9DB49A32C4F9AE02.roa (raw, json)
Hash identifier:          o0I6O5Xq4rEg5rfJCmY1FFzWSbqTGhgq6OD4AMsnRGA=
Subject key identifier:   5F:9A:E7:D7:9A:75:84:15:4D:99:4D:EC:8B:CB:55:33:D9:64:BB:8A
Certificate issuer:       /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
Certificate serial:       075D
Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D24316B48D6D11EB9DB49A32C4F9AE02.roa
Signing time:             Sat 20 Jun 2026 22:26:22 +0000
ROA not before:           Sat 20 Jun 2026 22:26:22 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139862
IP address blocks:        203.5.33.0/24 maxlen: 24
                          203.5.34.0/24 maxlen: 24
                          203.5.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl
                          rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 22:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1885 (0x75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB
        Validity
            Not Before: Jun 20 22:26:22 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a37138d-11be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:31:34:25:e9:6c:b6:9c:d5:4b:ae:ac:95:
                    3d:91:28:5c:8d:3a:ca:b9:20:eb:3f:20:b6:14:87:
                    c9:ca:ac:a7:c6:bf:8f:17:81:38:0f:ea:a4:53:05:
                    a3:41:9b:78:36:2f:96:04:a6:0c:3c:b4:c2:70:a2:
                    5d:da:ef:d4:ba:1c:fb:cb:34:14:0f:04:6b:fb:a7:
                    e4:e4:44:ce:fb:12:74:3a:e0:50:a1:a3:28:d6:d4:
                    b9:2b:a7:16:44:f7:08:42:be:6b:e6:ce:36:0a:c2:
                    0b:85:6a:dc:73:7e:34:8f:15:a1:26:67:b1:10:00:
                    f1:4a:3b:70:9d:8e:c3:ee:ad:f4:e0:4b:d7:a1:64:
                    93:9e:ab:81:bd:56:6c:15:03:07:d2:ed:db:0b:a0:
                    8a:21:ad:fc:33:07:c4:aa:45:2e:b2:9e:b8:48:05:
                    fc:3b:06:42:90:c8:41:27:b3:3e:87:29:d7:9b:fc:
                    40:0b:ec:b2:0f:31:76:d5:c0:52:3b:b7:01:d0:e7:
                    c3:92:0d:5c:3e:55:9b:f3:80:91:04:11:f3:2b:b4:
                    bb:e9:e0:86:28:7e:96:24:3b:f8:bb:3b:4a:71:e7:
                    79:fc:16:e4:76:69:f2:42:fa:f7:76:9a:31:4f:40:
                    8b:41:6f:68:fd:4a:d1:b2:be:b9:ae:af:ae:85:b5:
                    20:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9A:E7:D7:9A:75:84:15:4D:99:4D:EC:8B:CB:55:33:D9:64:BB:8A
            X509v3 Authority Key Identifier:
                keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D24316B48D6D11EB9DB49A32C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.5.33.0-203.5.35.255

    Signature Algorithm: sha256WithRSAEncryption
         d1:27:eb:93:3d:a3:70:cd:82:5c:d1:bc:5e:19:5d:be:aa:b0:
         54:10:0b:d5:b7:26:2b:04:aa:24:e7:dc:9c:3b:71:0d:b8:98:
         36:7b:58:67:c4:59:eb:62:8b:f6:19:49:7c:d3:90:75:4d:50:
         9e:26:cb:45:33:2c:ff:8f:0c:7f:68:23:74:e8:e3:52:7c:b1:
         32:2e:d5:24:6f:6e:b6:78:17:d5:e2:6f:a5:0d:c6:c4:26:c2:
         c4:d3:de:4b:e5:30:5b:07:1e:70:c0:3e:be:8d:b8:1c:0e:a3:
         1a:80:d2:60:6d:17:23:71:38:14:62:c4:50:da:53:0d:e2:fb:
         8c:be:bc:bd:35:17:0d:b1:45:c1:9e:12:9f:90:2f:5b:2d:85:
         98:c3:f1:be:27:ea:12:52:a2:9a:70:14:59:52:7e:01:01:e1:
         6b:2c:db:60:d8:20:54:88:f6:9e:97:88:b6:36:e5:9b:38:06:
         69:8c:a5:9a:bc:e9:f4:be:4b:c8:28:c9:55:58:08:70:36:31:
         09:33:a3:e9:c5:6e:cc:2e:63:fd:b4:9d:e3:67:b6:19:b4:0d:
         1d:6a:a2:4b:95:bb:e3:9a:75:6d:f5:10:68:49:be:6d:cd:5d:
         e8:a8:37:10:f7:54:7e:c2:e1:c8:bc:88:5a:47:7e:3a:f3:81:
         67:47:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:51:30 2026 by rpki-client