Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/BE8AD5FE4F3111F1B77F8F88B3833773.roa
File:                     BE8AD5FE4F3111F1B77F8F88B3833773.roa (raw, json)
Hash identifier:          30rSdjIYoitZZuUx2pOAYGftlzSJ4OLhZQm7N5hbEcE=
Subject key identifier:   40:06:A7:65:AF:B2:FC:A4:BB:A7:9E:AA:49:15:3D:E5:84:C1:C7:13
Certificate issuer:       /CN=A913BB38/serialNumber=D2F7938CE94A0EAE9639E6C9798B645FA90CC1FD
Certificate serial:       07
Authority key identifier: D2:F7:93:8C:E9:4A:0E:AE:96:39:E6:C9:79:8B:64:5F:A9:0C:C1:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0veTjOlKDq6WOebJeYtkX6kMwf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/BE8AD5FE4F3111F1B77F8F88B3833773.roa
Signing time:             Thu 21 May 2026 01:05:03 +0000
ROA not before:           Thu 21 May 2026 01:05:03 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     24463
IP address blocks:        203.21.156.0/22 maxlen: 24
                          203.21.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.crl
                          rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0veTjOlKDq6WOebJeYtkX6kMwf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BB38, serialNumber=D2F7938CE94A0EAE9639E6C9798B645FA90CC1FD
        Validity
            Not Before: May 21 01:05:03 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a0e5a3f-b3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:00:b4:4d:75:51:23:66:61:8c:8f:da:aa:55:
                    29:43:bf:f6:9b:01:6a:fd:d6:b7:00:59:cf:d3:0f:
                    c6:10:14:c7:5b:09:a4:ac:52:c4:dc:9a:ab:bd:ca:
                    74:46:21:96:fe:09:43:3c:79:61:c5:d5:b8:69:ce:
                    11:11:57:19:73:07:17:57:7a:07:d4:20:35:b6:ea:
                    66:f1:e2:d8:d8:04:84:22:14:6a:0d:d7:5c:43:7e:
                    65:96:56:0e:08:2b:75:02:46:26:2e:bb:a3:8c:5b:
                    f2:cb:64:04:f3:43:31:f0:ed:78:b6:63:d4:75:65:
                    55:9f:97:ac:bb:7b:3d:fb:a4:b6:ce:6f:4f:32:41:
                    15:87:45:ed:31:7c:49:40:5f:67:34:5f:3b:48:06:
                    69:10:d9:6c:5f:76:50:3a:29:01:43:e3:5f:9c:44:
                    cc:44:c2:fe:27:02:32:e8:ae:e9:bb:eb:f4:de:41:
                    49:a0:94:22:d9:a3:40:78:f7:57:9a:65:de:6f:c9:
                    90:13:83:b1:00:e1:28:7b:f5:d3:c4:6f:f0:0e:f7:
                    29:54:4b:88:14:4b:e5:96:54:11:8f:02:97:24:cd:
                    af:42:b0:7e:a9:f6:1c:0c:12:f3:09:db:51:d6:b6:
                    4e:b2:20:9a:2e:4b:24:a3:55:7d:0e:d3:3b:93:6a:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:06:A7:65:AF:B2:FC:A4:BB:A7:9E:AA:49:15:3D:E5:84:C1:C7:13
            X509v3 Authority Key Identifier:
                keyid:D2:F7:93:8C:E9:4A:0E:AE:96:39:E6:C9:79:8B:64:5F:A9:0C:C1:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/0veTjOlKDq6WOebJeYtkX6kMwf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0veTjOlKDq6WOebJeYtkX6kMwf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB38/2601B1404F3111F1B4382CBBB2833773/BE8AD5FE4F3111F1B77F8F88B3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.21.156.0/22
                  203.21.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:3e:54:de:1b:dc:e4:5d:58:6b:36:80:de:71:2e:6f:90:cb:
         22:55:37:bb:9f:0d:e0:23:d1:bb:8b:99:97:20:fd:b9:dc:67:
         ed:5f:cd:c2:48:17:4a:88:39:23:bc:42:99:fc:64:38:d1:fe:
         5d:a3:e6:01:90:ea:0b:ab:f4:f9:af:bb:00:0b:f2:d2:1d:c0:
         a2:10:10:ae:83:d9:ef:34:43:44:22:5b:aa:c5:30:f3:a2:33:
         34:31:cb:19:a9:b5:22:4e:7e:a5:e2:e4:32:b6:d3:bf:9c:76:
         22:e6:a7:41:06:08:4d:4d:8d:a9:c7:db:4c:9b:dd:32:9f:e8:
         4c:b4:72:55:f5:94:68:54:ab:31:9b:0f:fd:df:b2:63:aa:85:
         dc:61:a9:0b:75:98:50:09:11:f9:94:c4:97:34:60:ad:4f:53:
         9c:32:a3:66:3a:0e:f9:47:ca:90:cf:3c:27:75:cb:23:cf:2d:
         6a:35:50:ab:97:a8:33:c6:be:e2:b6:e2:d4:ce:cd:55:9f:a4:
         b6:ea:db:cc:a4:75:6e:c4:b0:9e:a3:ab:d0:e5:95:96:f0:63:
         e4:9f:14:91:2d:5b:dc:60:da:04:c3:44:7e:25:ea:33:57:68:
         97:87:33:25:9c:bf:76:19:ba:d6:4b:17:85:d0:84:83:93:d8:
         b4:14:13:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:24:57 2026 by rpki-client