Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/26CCB614E0D011E9B0E8C36FC4F9AE02.roa
File:                     26CCB614E0D011E9B0E8C36FC4F9AE02.roa (raw, json)
Hash identifier:          sEtBFQaAIz6x4FaJSabRZ32JNzwDh3UGhWhKFimk35g=
Subject key identifier:   A5:2F:D8:B5:C0:12:51:80:53:9B:BA:83:58:E4:D6:30:76:45:9D:6C
Certificate issuer:       /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Certificate serial:       3676
Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/26CCB614E0D011E9B0E8C36FC4F9AE02.roa
Signing time:             Wed 24 Jun 2026 15:12:47 +0000
ROA not before:           Wed 24 Jun 2026 15:12:47 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     38299
IP address blocks:        163.7.133.0/24 maxlen: 24
                          210.7.40.0/24 maxlen: 24
                          210.7.41.0/24 maxlen: 24
                          210.7.42.0/24 maxlen: 24
                          210.7.46.0/24 maxlen: 24
                          210.7.47.0/24 maxlen: 24
                          2404:138:40::/48 maxlen: 48
                          2404:138:41::/48 maxlen: 48
                          2404:138:46::/48 maxlen: 48
                          2404:138:47::/48 maxlen: 48
                          2404:138:133::/48 maxlen: 48
                          2404:138:4200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 14:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13942 (0x3676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
        Validity
            Not Before: Jun 24 15:12:47 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a3bf3ef-d10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:60:af:ad:42:f6:f4:eb:de:bf:6c:b7:35:56:
                    67:73:16:0b:94:b0:16:97:3e:84:5a:af:e4:5c:a4:
                    18:ed:31:66:60:b7:a3:59:02:b2:33:cf:b0:1c:2c:
                    fc:50:72:80:5a:24:c0:60:fc:97:35:fc:64:4f:43:
                    8d:a1:ea:4d:b8:41:0e:a4:e8:92:94:11:5c:bb:25:
                    a1:51:23:33:ef:ba:e0:1a:6c:53:31:7e:2b:5f:ac:
                    4b:e2:dc:a2:d9:9d:2a:11:80:df:65:80:f7:de:44:
                    aa:39:ec:e8:c5:a8:88:75:8e:45:2d:6f:5c:f2:c9:
                    36:b7:ce:6c:7d:46:12:7f:63:39:dc:b7:48:6d:f4:
                    c1:85:51:b9:12:0a:45:8f:91:70:7c:3b:1b:52:59:
                    77:fe:35:f0:74:01:ea:fe:3e:88:fd:38:4d:23:1a:
                    94:93:09:b4:d9:8d:2f:ad:be:be:45:ad:c0:4b:df:
                    7e:25:5e:aa:0a:33:3d:55:8d:e8:b5:a5:83:0e:40:
                    09:b2:c8:18:13:a4:e1:de:9b:1f:1c:0c:98:7d:e2:
                    0f:eb:18:b4:fa:56:99:17:50:19:a8:51:93:0a:be:
                    1e:ca:f2:46:02:99:fb:27:36:74:86:b8:5a:2c:a9:
                    d2:73:51:4a:a7:4c:0f:6b:e0:27:d5:94:f3:f3:ad:
                    e3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2F:D8:B5:C0:12:51:80:53:9B:BA:83:58:E4:D6:30:76:45:9D:6C
            X509v3 Authority Key Identifier:
                keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/26CCB614E0D011E9B0E8C36FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.7.133.0/24
                  210.7.40.0-210.7.42.255
                  210.7.46.0/23
                IPv6:
                  2404:138:40::/47
                  2404:138:46::/47
                  2404:138:133::/48
                  2404:138:4200::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:7c:13:bd:28:ff:2b:ac:cb:4e:cc:3a:b3:c6:84:a6:84:a6:
         00:20:a2:27:87:b8:59:97:38:e3:24:8e:94:6c:47:56:55:22:
         53:49:2c:5c:c3:dc:51:3f:b8:7d:66:cf:7b:d7:75:57:31:1e:
         66:b7:8f:88:df:e9:16:bc:43:76:03:e6:0a:2b:27:eb:c7:11:
         81:36:c1:d8:15:1f:71:a3:54:e1:6d:ef:45:0b:bf:22:8c:0c:
         d1:18:f7:e4:23:82:5e:cd:48:36:dc:5d:b6:e4:99:09:e3:4d:
         fa:1f:a4:99:26:42:d8:5c:83:28:06:65:dd:ec:f3:86:9d:d7:
         61:3d:f9:99:c9:fe:28:64:41:24:c4:1e:68:18:8c:a2:0d:38:
         4c:d0:58:40:e5:eb:05:66:fc:3a:e8:38:77:0d:00:6e:6f:53:
         f9:f1:b4:9f:56:6a:2f:5b:9d:6d:96:65:f1:63:11:a4:3e:c6:
         eb:bd:b2:6e:0f:dd:17:dd:27:fd:2d:ff:91:d4:11:f6:f7:c4:
         29:b1:17:ce:53:0d:60:08:d2:f4:00:c1:b3:77:ff:e3:f9:36:
         f4:93:6e:3c:c8:53:e7:71:13:99:c0:84:93:92:d5:0a:10:08:
         3b:d5:d8:9e:92:ba:75:48:c2:24:33:51:57:4a:b5:b9:e4:2b:
         69:72:f1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:16:32 2026 by rpki-client