Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/460770DE8F0411F1812E6F496D11F970.roa
File:                     460770DE8F0411F1812E6F496D11F970.roa (raw, json)
Hash identifier:          MPHZ4gZ7BUbaXJ4GyjND7xBqAuLWN8we1t6I6nFoW+E=
Subject key identifier:   B6:95:3C:07:4D:64:61:D3:9C:95:DC:04:29:08:AA:C2:08:4F:7E:A3
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       03C4
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/460770DE8F0411F1812E6F496D11F970.roa
Signing time:             Tue 04 Aug 2026 05:06:40 +0000
ROA not before:           Tue 04 Aug 2026 05:06:40 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        202.155.80.0/21 maxlen: 24
                          202.155.104.0/21 maxlen: 24
                          202.155.112.0/22 maxlen: 24
                          202.155.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Aug 2026 00:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964 (0x3c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Aug  4 05:06:40 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a717360-c83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:62:d5:10:e6:d6:b4:fb:63:49:06:de:03:e5:
                    a5:41:c3:85:f0:3f:11:c0:00:7e:92:25:93:7f:cd:
                    74:58:7e:29:c2:33:20:6d:95:53:93:c0:4a:5b:c5:
                    07:01:93:bf:25:11:af:b0:8a:43:38:f4:b0:55:35:
                    55:08:ae:ac:6a:10:13:af:af:d4:2f:ee:ec:de:4d:
                    e4:79:ff:41:90:21:22:9e:43:06:f9:f0:94:00:6d:
                    43:f7:8c:f9:7d:b1:53:84:a9:7d:ff:58:3c:4f:17:
                    65:80:84:dd:db:28:f4:54:2f:0f:42:fd:30:f2:74:
                    2b:de:8e:d8:ff:1b:96:1a:4c:c7:8f:e2:35:2d:14:
                    42:b3:b8:29:b3:d9:3d:6d:d5:0e:1a:cf:a7:6e:d9:
                    a8:c6:2c:85:86:45:ed:0c:1a:1d:07:3c:24:f3:d8:
                    b1:b9:87:bb:8d:d5:28:61:b4:64:3c:90:e4:3d:c5:
                    5d:42:41:00:8e:95:47:95:f7:94:99:fb:ee:19:bf:
                    bf:8f:8f:85:16:42:18:d2:d0:4a:91:e3:c8:77:c4:
                    27:08:68:19:f2:34:77:ee:2d:2b:32:e9:f7:68:6b:
                    c5:81:bb:f0:8b:2e:db:06:b4:52:38:11:53:e8:f2:
                    6e:99:0c:2e:57:ae:42:b6:b6:53:c8:f3:95:f5:59:
                    b8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:95:3C:07:4D:64:61:D3:9C:95:DC:04:29:08:AA:C2:08:4F:7E:A3
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/460770DE8F0411F1812E6F496D11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.80.0/21
                  202.155.104.0-202.155.115.255
                  202.155.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:99:ce:74:79:34:84:01:67:87:32:fb:88:40:75:0a:70:3c:
         82:11:c2:ea:24:c2:85:1a:5d:6c:54:03:88:1d:13:22:25:73:
         5c:f7:7b:22:6b:a7:92:73:f7:35:7d:04:b5:31:85:ed:70:f6:
         9f:ec:44:bb:7f:b9:10:62:81:43:3e:f4:cc:f2:14:18:f0:76:
         b2:ea:6a:14:04:04:8a:dc:ba:fc:49:38:04:27:3b:1c:e7:43:
         73:6d:5f:d7:ae:ef:6d:cc:40:b6:c1:70:a4:50:a6:fd:cc:5e:
         cd:28:bc:3f:00:78:c4:6e:ea:17:5c:73:6b:6f:35:da:f0:cc:
         65:c5:37:f4:34:e7:6a:bc:89:34:11:0a:43:ff:fb:62:bc:24:
         20:23:ad:7a:d4:2e:87:d1:67:0c:61:54:99:2a:a8:66:48:0f:
         ea:b2:cf:4e:5e:7f:75:4f:b5:e2:17:f2:30:d3:7a:94:67:5d:
         b4:0d:2b:f3:d1:01:e0:fc:b1:6c:fa:4a:7c:f1:95:24:c2:6d:
         c3:de:28:64:7d:63:b6:79:e3:79:6f:3a:0f:cd:fe:dc:4b:88:
         25:fa:52:31:b9:84:39:9a:02:9f:b2:9f:47:d6:a4:63:b9:c7:
         70:0a:a2:b7:96:71:9e:9a:c4:28:f4:b9:5a:b6:7e:8f:cd:55:
         0a:7f:c1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:03 2026 by rpki-client