Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F3A41ADEC0E411EFA19F644CC4F9AE02.roa
File:                     F3A41ADEC0E411EFA19F644CC4F9AE02.roa (raw, json)
Hash identifier:          vhVJuPrt2WMbeuT1nfT4sHOscgQloynHYGoOSaZ4llM=
Subject key identifier:   6B:E6:F2:28:0E:6E:A9:21:C9:F4:CB:D8:FF:CE:70:0D:D7:AC:D5:30
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       3700
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F3A41ADEC0E411EFA19F644CC4F9AE02.roa
Signing time:             Thu 30 Jul 2026 15:11:19 +0000
ROA not before:           Thu 30 Jul 2026 15:11:19 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45800
IP address blocks:        58.181.147.0/24 maxlen: 24
                          203.155.54.0/24 maxlen: 24
                          203.209.82.0/24 maxlen: 24
                          203.209.99.0/24 maxlen: 24
                          2405:a000:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 14:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14080 (0x3700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 30 15:11:19 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6b6997-131a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:22:f5:93:ae:f6:e2:f2:04:da:0e:9a:ec:
                    98:3b:25:4d:ec:11:5b:cd:37:d5:ca:b4:6a:99:97:
                    0a:06:b8:07:f8:8e:7f:67:61:6a:db:61:e4:6d:ef:
                    5d:69:4e:88:a8:57:69:5b:9a:88:87:9c:34:cc:7e:
                    a0:f9:f4:a8:34:bb:bf:51:f5:8d:ef:15:bb:f0:5c:
                    ee:8f:52:16:a8:d6:32:f8:1d:b0:1b:7a:90:69:8a:
                    71:d4:22:09:2d:2d:ea:e1:b3:c5:de:5d:1c:33:70:
                    30:de:26:69:5a:5c:21:1c:a9:cf:8f:fe:9d:be:35:
                    13:37:61:1c:2f:c2:3e:08:9c:77:ef:2d:27:59:29:
                    0b:15:91:20:06:6e:37:d7:f3:22:d4:7b:34:9c:60:
                    95:1b:c0:ea:30:80:66:82:7c:57:11:ce:ce:9e:05:
                    61:63:8c:0c:a5:f0:5a:85:0a:0c:0f:b3:f9:85:c0:
                    cb:e0:0d:bf:d9:9d:e6:c3:2a:e7:dc:bb:0d:23:95:
                    8e:ad:b9:6e:01:05:07:cf:e3:15:20:db:3f:eb:c9:
                    4a:99:4d:fe:c8:9c:cd:53:ed:ba:f0:a3:23:f7:f1:
                    46:df:98:a5:2b:c1:49:2e:85:b8:4a:ef:fe:3d:f2:
                    f3:2c:9c:d9:14:ad:10:8e:02:d3:5c:29:9f:fd:a3:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E6:F2:28:0E:6E:A9:21:C9:F4:CB:D8:FF:CE:70:0D:D7:AC:D5:30
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F3A41ADEC0E411EFA19F644CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.181.147.0/24
                  203.155.54.0/24
                  203.209.82.0/24
                  203.209.99.0/24
                IPv6:
                  2405:a000:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:8b:53:c3:7b:8a:47:f1:f9:a5:8d:86:a2:6f:ff:84:5e:2c:
         62:47:c0:a8:94:80:ad:04:af:05:65:fc:a0:14:33:c3:a3:ac:
         64:e0:6c:7a:78:16:70:5f:b8:a8:08:16:d3:7c:3a:ca:4a:84:
         ff:bc:eb:0f:c2:36:cc:cf:76:1c:35:8c:ca:12:3e:e6:c3:4a:
         59:a0:ca:73:b6:68:ce:37:d2:ea:3b:18:b7:98:b0:fb:40:eb:
         c0:d9:ff:31:8b:13:59:bf:bb:f3:c8:9e:50:1e:ed:3c:aa:3d:
         a1:c9:bc:c7:4b:4e:92:f4:29:8a:02:83:56:7a:53:4d:54:22:
         75:06:29:df:bb:a1:c9:60:fd:5b:88:19:ae:e8:25:f3:91:7b:
         3c:c9:4e:27:8f:a8:3e:f9:71:33:ee:da:15:3b:92:30:83:35:
         71:7a:ea:b1:c3:cb:cc:a8:12:78:b1:73:51:b8:40:63:91:2a:
         01:8a:a9:8e:5c:71:e7:40:e2:6d:61:9e:c6:e6:b3:e0:8d:c1:
         bf:41:88:57:65:4b:34:57:f8:c0:42:99:ed:50:5d:a2:e6:d7:
         d6:50:9e:fd:61:9c:66:79:d0:c1:19:3d:6a:42:ca:63:f6:ce:
         32:c0:bc:2a:d0:89:d6:33:10:c7:3c:89:8b:b0:82:60:62:f3:
         39:c2:96:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 17:34:15 2026 by rpki-client