Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/D0227C4675E111F1AB3948A26FA30FBC.roa
File:                     D0227C4675E111F1AB3948A26FA30FBC.roa (raw, json)
Hash identifier:          NBJ/2fFBDFircpVggVH+QhRnV905PwAGTQ3vrgME5mU=
Subject key identifier:   6E:5F:1A:1D:FF:58:13:81:D5:22:4A:2D:C0:A0:50:34:84:F6:C0:52
Certificate issuer:       /CN=A913089B/serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Certificate serial:       D5
Authority key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/D0227C4675E111F1AB3948A26FA30FBC.roa
Signing time:             Thu 02 Jul 2026 06:54:15 +0000
ROA not before:           Thu 02 Jul 2026 06:54:15 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        191.219.160.0/20 maxlen: 24
                          191.223.240.0/20 maxlen: 24
                          200.102.224.0/20 maxlen: 24
                          200.103.160.0/20 maxlen: 24
                          200.219.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
                          rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
        Validity
            Not Before: Jul  2 06:54:15 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a460b17-ec7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:03:f1:6f:bf:e3:c6:6b:17:81:07:7b:c6:
                    01:d1:1e:90:98:9f:3a:56:65:0f:67:05:ff:6b:86:
                    b3:03:c3:94:18:b0:6d:ce:da:b3:5d:2a:84:84:a5:
                    bc:b8:4a:0c:99:d2:b7:e8:be:69:87:b1:8c:39:9a:
                    d5:62:cf:ea:60:0f:26:8c:b2:63:67:86:e4:3e:a6:
                    2c:7d:d6:30:ef:6d:65:64:82:89:c4:1f:83:1a:0d:
                    ce:a7:3c:ae:18:59:b4:4f:f6:c4:57:a1:07:c2:f3:
                    f4:57:e1:4c:28:d0:ad:f0:62:71:ca:5b:86:c1:52:
                    85:26:f4:ce:cb:ef:a8:f2:ec:42:62:47:7d:c1:4c:
                    dd:65:89:05:f6:bb:3d:a8:de:39:a9:a0:69:90:05:
                    27:33:4c:f2:e7:ac:71:6d:4c:ed:fe:fb:8b:65:bd:
                    b9:cf:37:36:3c:3a:41:c4:3d:d0:62:b1:53:6f:1e:
                    76:83:6e:d1:e2:20:13:93:90:eb:35:c2:2b:79:36:
                    ac:10:70:31:89:8c:f3:a6:20:3e:6e:c4:28:42:29:
                    fd:3c:7c:c2:e9:fe:4e:95:94:c2:e8:e7:50:d7:dc:
                    95:5b:2b:dd:d3:d6:51:f4:e3:fd:00:78:2f:c8:f6:
                    a5:fa:81:30:41:d0:bb:b2:1c:92:dc:13:ec:3d:aa:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5F:1A:1D:FF:58:13:81:D5:22:4A:2D:C0:A0:50:34:84:F6:C0:52
            X509v3 Authority Key Identifier:
                keyid:9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/D0227C4675E111F1AB3948A26FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.219.160.0/20
                  191.223.240.0/20
                  200.102.224.0/20
                  200.103.160.0/20
                  200.219.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:67:c3:79:2a:5a:f4:84:e7:a3:2c:98:13:ed:c7:c1:9a:5b:
         08:ef:f2:78:7d:08:c1:b4:7e:83:83:b1:1c:d2:5c:53:56:7a:
         b5:0f:12:b0:b1:85:39:0b:38:81:43:95:e0:f4:82:34:38:2a:
         cc:89:5a:7c:0e:a3:25:38:d1:b0:e5:3f:47:d0:60:4d:08:98:
         7b:13:23:86:ab:3f:94:9f:61:aa:f9:27:d9:13:ea:74:62:5b:
         78:e1:bd:c5:83:ef:ed:4f:77:4e:41:f7:ea:03:57:66:1a:db:
         09:ab:bc:67:31:c6:09:50:5b:bf:35:74:97:6c:4e:eb:1b:19:
         cd:a6:34:b9:d3:09:f4:ab:c5:48:e2:25:44:c0:ff:8b:52:63:
         23:7e:f5:7b:4a:5b:5f:4d:a3:59:79:42:5b:ff:d6:82:6b:95:
         ae:3d:e5:33:88:fb:73:6a:4e:8c:95:ef:50:10:ba:64:7f:ca:
         ff:64:43:04:5c:c1:31:d2:e4:47:41:8c:90:d2:6d:0b:eb:d1:
         21:cc:88:9a:7f:c4:30:80:6b:64:a0:7f:a2:37:a7:6d:94:0b:
         46:68:53:c8:46:a7:bc:1d:b5:13:df:74:81:dc:9e:3f:c8:a1:
         ba:36:69:66:c8:15:5a:4a:98:77:95:d8:c1:27:f6:a2:7b:79:
         6a:69:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:50 2026 by rpki-client