Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/DFA7FACA54F711E7BFB4804BC4F9AE02.roa
File:                     DFA7FACA54F711E7BFB4804BC4F9AE02.roa (raw, json)
Hash identifier:          0hrvh4D9EDd6MqNbEXtgkqXuTp28uKtsLouLemWrWd4=
Subject key identifier:   D3:28:1B:28:A4:AC:14:D3:FF:B3:F2:49:0E:05:7C:D4:1B:BA:B6:95
Certificate issuer:       /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
Certificate serial:       25D2
Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/DFA7FACA54F711E7BFB4804BC4F9AE02.roa
Signing time:             Fri 24 Jul 2026 16:23:21 +0000
ROA not before:           Fri 24 Jul 2026 16:23:21 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     134431
IP address blocks:        36.255.106.0/23 maxlen: 23
                          36.255.106.0/24 maxlen: 24
                          103.62.30.0/23 maxlen: 29
                          103.82.46.0/23 maxlen: 23
                          185.146.208.0/22 maxlen: 22
                          185.146.210.0/23 maxlen: 23
                          2407:c540::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl
                          rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9682 (0x25d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4
        Validity
            Not Before: Jul 24 16:23:21 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a639179-d2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:e7:ee:82:29:f4:1e:27:b6:e7:ef:f1:e6:
                    cd:e2:61:d6:88:fc:ec:d3:2b:76:6c:22:53:c7:ec:
                    49:32:25:fe:1d:f8:49:2b:81:16:7d:b5:38:33:8e:
                    09:5d:a1:ad:b8:40:30:74:d9:49:88:bb:0a:4f:5c:
                    76:bb:b8:dc:2e:e8:1d:37:85:f4:c6:aa:9e:8d:44:
                    51:3c:41:87:a6:6d:37:d6:18:5e:ab:68:51:86:d2:
                    50:f6:b6:84:3b:ff:60:c4:65:1d:c7:bf:77:df:36:
                    26:48:d1:7a:0f:15:6a:fb:ad:31:57:f7:a5:bf:d9:
                    70:2e:77:67:a9:a9:e7:23:d4:b9:78:06:10:e0:bb:
                    aa:e8:db:21:ce:92:49:4a:31:2f:3f:ba:6f:90:cf:
                    6a:1b:eb:d8:95:20:e5:ce:79:17:00:c0:d6:95:7c:
                    18:1e:78:b5:52:d1:bc:fb:0b:50:c8:cb:49:62:c9:
                    19:2d:dc:72:8e:f7:81:a9:69:5e:e8:0b:5c:56:e4:
                    39:31:7a:c1:58:07:02:4a:ee:6d:76:71:eb:4e:89:
                    a0:08:c3:5c:a7:bc:de:9a:38:6d:a4:5c:07:b4:bf:
                    8a:db:87:1b:48:53:32:06:5a:73:c1:b0:64:78:71:
                    a0:c0:30:e1:a7:7e:75:07:07:6d:4d:95:7f:bd:66:
                    44:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:28:1B:28:A4:AC:14:D3:FF:B3:F2:49:0E:05:7C:D4:1B:BA:B6:95
            X509v3 Authority Key Identifier:
                keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/DFA7FACA54F711E7BFB4804BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.106.0/23
                  103.62.30.0/23
                  103.82.46.0/23
                  185.146.208.0/22
                IPv6:
                  2407:c540::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:85:51:76:48:f2:af:95:70:e3:58:6f:e4:7e:bb:9b:e4:8e:
         e8:4d:4c:9f:cc:d2:46:54:28:85:65:3f:9a:30:8d:1a:18:77:
         7a:db:4d:7d:47:08:a2:e8:a8:ca:80:6b:69:57:a0:06:23:20:
         df:76:93:c5:02:a1:ac:ab:8f:6e:f9:d4:6a:a4:2d:01:aa:21:
         2e:0f:34:4f:ea:cf:e1:5d:f0:0e:bd:eb:d6:43:b0:7b:cb:74:
         a0:91:82:03:d2:a6:b3:1d:b4:54:40:28:27:fe:51:43:19:27:
         57:3b:b0:5c:95:3e:1a:46:57:fa:bc:9f:30:80:91:43:66:fc:
         9a:a9:9a:d9:ba:fd:e7:58:30:66:9d:47:e5:d8:7c:22:16:47:
         fc:c0:af:64:2f:8c:76:dc:66:be:d2:e1:e5:dc:2d:27:19:b4:
         6b:65:66:fe:78:c6:be:b5:12:47:e8:33:6e:68:0a:85:38:40:
         f8:54:14:48:51:30:59:9c:39:c6:10:dd:79:b8:b3:c8:1b:c1:
         b4:be:f7:ee:42:d2:7b:c4:93:e6:d7:9f:cc:17:31:4e:fc:16:
         46:9c:1b:8c:94:0c:7c:76:da:ce:1d:f9:d7:75:c2:6e:91:81:
         86:65:b2:bd:96:9f:59:32:39:4c:c4:75:ed:ab:36:70:8a:d1:
         80:43:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:33 2026 by rpki-client