Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/E821F266B68411F18DFEAAE13C11F970.roa
File:                     E821F266B68411F18DFEAAE13C11F970.roa (raw, json)
Hash identifier:          3xucjeONyRZhZBoCVmTeWg8bAEUTlhhckWOpYl5wYT8=
Subject key identifier:   83:3D:C0:5F:49:32:F2:56:41:61:E3:10:85:5B:58:A7:1D:4B:65:FE
Certificate issuer:       /CN=A911CCA8/serialNumber=FDC74A2A269F0FA9FC2A73256FAC9DBF81383A97
Certificate serial:       0B
Authority key identifier: FD:C7:4A:2A:26:9F:0F:A9:FC:2A:73:25:6F:AC:9D:BF:81:38:3A:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cdKKiafD6n8KnMlb6ydv4E4Opc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/E821F266B68411F18DFEAAE13C11F970.roa
Signing time:             Tue 06 Oct 2026 07:17:21 +0000
ROA not before:           Tue 06 Oct 2026 07:17:21 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     139304
IP address blocks:        163.52.240.0/23 maxlen: 24
                          2001:df7:9340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.crl
                          rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cdKKiafD6n8KnMlb6ydv4E4Opc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 07:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CCA8, serialNumber=FDC74A2A269F0FA9FC2A73256FAC9DBF81383A97
        Validity
            Not Before: Oct  6 07:17:21 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac4a081-c4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:5f:92:b2:f1:c5:56:5d:c6:84:4d:2c:34:
                    43:55:47:f5:f8:9b:02:5e:3b:2c:2b:bf:23:5f:62:
                    46:f8:17:03:67:b5:ef:70:16:40:22:f5:7a:1c:99:
                    11:a9:7e:b6:46:92:9f:51:3e:0e:cc:c3:5d:64:23:
                    73:70:2e:2a:94:d3:06:47:39:4c:1a:9a:db:5c:3a:
                    0c:ba:b5:96:db:d6:2a:16:99:2b:e5:6f:d7:88:01:
                    2c:0d:9f:b9:5c:9f:91:8e:ee:04:3c:76:10:c7:50:
                    90:74:5f:03:05:66:0d:97:8a:68:2d:84:85:fe:8d:
                    d9:76:0d:56:d2:a9:a2:b9:34:1a:2c:6f:9d:07:f7:
                    d3:5e:1b:d0:01:fe:75:2a:f3:3e:97:5f:c9:a2:07:
                    98:3f:3d:de:37:01:68:0b:77:00:0d:c5:f8:fd:ee:
                    22:5c:1f:4d:17:6a:93:1d:78:b4:9f:44:37:67:60:
                    65:29:fe:73:63:2a:ce:86:56:b4:22:b9:b8:29:ed:
                    87:42:bd:f0:23:97:0c:bb:3c:f0:4b:a5:bf:a2:40:
                    7b:7f:ca:d0:47:bd:2c:2a:8f:ce:be:24:ec:61:95:
                    ec:17:c6:a0:80:0e:1d:7d:d0:80:57:a8:1a:b7:b8:
                    7f:88:c0:89:c4:e9:0a:9b:a7:f3:38:95:34:b6:8c:
                    06:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3D:C0:5F:49:32:F2:56:41:61:E3:10:85:5B:58:A7:1D:4B:65:FE
            X509v3 Authority Key Identifier:
                keyid:FD:C7:4A:2A:26:9F:0F:A9:FC:2A:73:25:6F:AC:9D:BF:81:38:3A:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cdKKiafD6n8KnMlb6ydv4E4Opc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/E821F266B68411F18DFEAAE13C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.240.0/23
                IPv6:
                  2001:df7:9340::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:9e:13:bc:67:79:ab:cb:c9:3c:6e:4e:eb:53:27:3d:dd:3c:
         5e:78:67:78:4d:ed:7f:89:2f:fe:f8:34:96:bc:75:26:b1:3b:
         35:9c:fe:c2:f3:74:0f:50:cb:0e:96:36:25:67:1f:63:25:be:
         86:d9:fd:54:db:a7:5b:a6:6d:b5:7b:53:6e:82:49:80:f0:f0:
         ba:7e:66:d1:0d:74:a7:50:22:e4:4c:24:e1:5d:60:2f:16:b8:
         bd:7f:47:25:3b:8c:af:61:b8:39:a8:64:8c:d0:34:e4:8e:4d:
         48:c4:b0:95:d4:7b:3f:23:08:09:a8:9e:57:a1:2f:6b:d3:88:
         78:a6:ea:de:47:8e:59:0a:73:55:59:e4:3d:ed:db:1b:0d:ed:
         bd:cf:34:d0:6e:72:4f:35:84:11:37:b3:fa:e2:36:a5:98:a2:
         14:0a:e0:0b:6d:dc:57:af:fc:fd:2e:50:25:bc:86:63:2c:e7:
         3e:d7:16:ac:f7:65:99:25:2f:8e:2b:a0:df:a1:0c:18:80:dc:
         40:b3:6c:c6:a3:3c:aa:43:96:d7:f8:99:c8:9c:61:ef:b3:4d:
         11:d6:08:94:6b:75:88:8d:79:ba:37:d9:39:fb:03:bb:f2:cb:
         a6:93:5b:2c:a5:2c:78:0b:84:d7:22:f9:40:31:70:59:1d:69:
         4b:9f:da:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:55:28 2026 by rpki-client