Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/486F81CE4B4B11E79F2FF37BC4F9AE02.roa
File:                     486F81CE4B4B11E79F2FF37BC4F9AE02.roa (raw, json)
Hash identifier:          Ac7X99DxUp0Dn7A2xvd+MVtZjf1AVoPEeK//7YEAY68=
Subject key identifier:   5C:92:B4:BE:BB:61:7D:A5:35:72:4C:75:F1:7D:A3:FA:BB:60:53:DD
Certificate issuer:       /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
Certificate serial:       1D12
Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/486F81CE4B4B11E79F2FF37BC4F9AE02.roa
Signing time:             Tue 18 Aug 2026 16:30:02 +0000
ROA not before:           Tue 18 Aug 2026 16:30:02 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134808
IP address blocks:        203.33.22.0/24 maxlen: 24
                          2001:df3:ba00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl
                          rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7442 (0x1d12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
        Validity
            Not Before: Aug 18 16:30:02 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a84888a-8699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d3:2a:a3:06:2f:d5:12:88:4a:08:cd:2c:6b:
                    2c:e4:d2:99:f7:98:aa:9c:33:37:d7:e1:f2:5b:c8:
                    7d:70:63:2c:7d:87:07:ed:00:18:45:42:0d:79:02:
                    55:e8:35:a3:4d:3b:4a:c9:55:78:e0:60:64:86:41:
                    f2:9b:95:8b:6c:1e:5f:cb:25:e5:74:8a:d7:7b:ab:
                    43:b5:f6:98:b4:9c:4b:01:9c:c8:db:ea:60:71:7a:
                    a9:0c:ee:bf:07:eb:7a:e1:d6:65:34:78:05:34:02:
                    ae:f9:9a:f0:54:2e:c0:10:fb:e8:17:5d:d8:49:af:
                    40:8a:34:42:36:81:d4:a3:88:eb:59:b3:18:5d:4b:
                    fd:c7:d9:2c:ff:af:a8:ac:3c:de:d6:6f:ce:51:1d:
                    67:e9:8c:bf:70:ba:5d:0e:52:32:8d:31:24:35:27:
                    55:ea:0c:d1:7b:9b:d0:73:49:68:8e:b8:df:55:f0:
                    e6:69:fe:4b:61:e0:31:7f:9f:cc:dd:0e:ef:d7:61:
                    f0:87:00:7a:02:84:74:21:2a:d6:c7:f7:73:e3:77:
                    9f:71:4e:14:03:c5:b8:e2:59:cf:e7:ed:a3:a6:29:
                    d4:f0:62:28:65:ef:8e:4d:ae:2c:ba:2b:c1:da:43:
                    88:35:0d:d9:2f:8a:56:e2:d8:46:7e:20:00:73:ca:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:92:B4:BE:BB:61:7D:A5:35:72:4C:75:F1:7D:A3:FA:BB:60:53:DD
            X509v3 Authority Key Identifier:
                keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/486F81CE4B4B11E79F2FF37BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.33.22.0/24
                IPv6:
                  2001:df3:ba00::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:44:da:93:92:04:67:b9:c5:1f:5b:1e:9f:e3:98:99:ca:05:
         fb:58:8f:a1:7d:42:9c:da:56:97:79:49:ee:ef:49:e1:e2:5b:
         79:e8:0f:e8:c9:dd:46:2f:2e:77:90:4c:79:90:a2:e7:30:63:
         6c:b3:9e:72:de:cf:1f:14:1a:50:ad:1d:fb:3a:ab:09:0f:74:
         53:af:5a:27:06:36:60:de:07:27:d9:3f:e2:72:7c:a1:d3:9d:
         08:1e:b9:c7:99:43:a8:8f:7f:00:3d:6b:be:10:8f:7d:9d:77:
         db:da:c0:1c:75:0a:89:f2:fa:ae:52:7e:b6:fb:00:fc:94:84:
         6a:a6:70:86:31:82:c4:b7:c6:b6:bd:c1:92:4f:3a:a0:71:38:
         70:c2:87:1d:3e:ff:56:98:0e:fe:97:f9:1b:1d:e4:92:53:8a:
         bf:e2:d8:1c:d8:a1:2a:f1:64:90:ff:45:ee:26:76:7a:89:da:
         cf:e4:9c:66:6b:8d:81:60:d8:00:4b:52:71:8a:da:60:f8:40:
         ec:07:0d:8f:82:a7:dd:70:21:cd:f0:f7:4f:24:c9:7b:af:62:
         34:83:d5:12:bf:4e:93:b1:d9:32:a5:34:5e:ff:b1:2a:da:c1:
         56:b9:e4:f8:4c:32:c9:a8:ba:c9:f2:10:1b:08:9f:04:c2:16:
         a2:73:6d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:18:48 2026 by rpki-client