Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CF554666863D11F08BD39411C4F9AE02.roa
File:                     CF554666863D11F08BD39411C4F9AE02.roa (raw, json)
Hash identifier:          ViBAfZN4LiVLC+KVZsA7wOjPz6zBLhpLOCuCREPCPgs=
Subject key identifier:   FA:1E:9F:7C:45:D8:2A:C5:BC:65:3E:10:28:83:CC:E6:44:BA:12:84
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3B74
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CF554666863D11F08BD39411C4F9AE02.roa
Signing time:             Wed 22 Apr 2026 15:10:59 +0000
ROA not before:           Wed 22 Apr 2026 15:10:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     18053
IP address blocks:        115.186.48.0/22 maxlen: 24
                          203.81.236.0/24 maxlen: 24
                          203.81.237.0/24 maxlen: 24
                          203.81.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 13:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15220 (0x3b74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Apr 22 15:10:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e8e503-49aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:d4:80:8f:9f:47:de:e3:0e:1a:89:1e:28:
                    d3:d5:14:bf:86:10:96:c7:a2:07:a2:20:69:e2:db:
                    35:2c:8e:ab:6d:25:dd:da:e6:2d:22:fc:61:14:1f:
                    fb:69:94:84:56:dc:b3:2d:bd:1a:01:9a:0a:c7:4c:
                    dc:f6:6e:37:15:ee:e9:bc:a4:91:1c:00:b5:84:0a:
                    c9:74:c4:c7:0f:c1:62:4a:2b:23:16:a0:f4:64:f6:
                    d8:bb:4d:19:1f:ad:da:63:b2:b5:56:48:83:83:4a:
                    21:7c:cc:f2:e3:8b:65:a6:02:a2:32:23:d6:94:fe:
                    f7:47:52:ee:e8:5a:1a:14:36:95:8e:69:43:e7:7f:
                    00:71:f8:24:15:96:6a:5e:03:bf:ef:a1:5e:26:34:
                    e1:23:b3:a5:c2:e9:05:87:7b:85:73:a7:3c:98:52:
                    2a:8b:2e:d4:8e:33:68:91:cd:20:e5:ef:c9:2e:bc:
                    b8:aa:47:19:7a:be:af:da:08:af:7b:6d:84:7a:59:
                    d2:bb:95:de:ba:92:68:00:50:03:00:7c:75:e0:4a:
                    8e:7d:20:5e:44:63:1a:a4:cc:78:fb:92:a1:ef:6d:
                    d1:0f:8b:e1:17:a9:b5:d8:b0:37:6d:75:12:cb:97:
                    ef:34:ac:28:d8:4e:fc:7a:64:d3:62:b0:71:f0:5f:
                    b5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1E:9F:7C:45:D8:2A:C5:BC:65:3E:10:28:83:CC:E6:44:BA:12:84
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CF554666863D11F08BD39411C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.186.48.0/22
                  203.81.236.0-203.81.238.255

    Signature Algorithm: sha256WithRSAEncryption
         96:e4:27:67:68:82:15:60:01:9a:d7:b4:fd:9f:9f:64:5c:f0:
         79:87:d6:5b:dd:c9:5e:de:9e:62:a8:b4:e8:f7:3e:1b:22:4a:
         80:50:ce:0c:94:9c:7e:2a:7f:6a:d8:bb:81:b0:ec:81:fc:94:
         7c:38:df:17:2a:6f:cb:06:ac:ba:d9:3e:71:79:7d:dc:7d:60:
         71:12:89:f4:46:54:d2:17:d2:e6:69:de:f2:2c:ad:d5:71:cd:
         7d:45:a1:c0:d1:91:86:33:25:28:25:4d:f6:8c:79:b0:ef:c5:
         da:56:33:c0:9a:c3:2b:42:d9:a7:4d:30:c2:c0:eb:94:a7:7f:
         12:ee:1a:cf:93:7c:7c:30:ed:61:2e:e7:f8:6f:67:41:2c:bc:
         67:cc:25:8a:31:cb:cd:b0:c0:66:3e:3f:e7:cf:23:11:53:a2:
         64:f4:68:89:73:48:cd:67:bc:36:e0:0e:7d:c6:1b:c2:06:38:
         cd:ea:29:b4:57:a4:8a:8d:96:86:a5:88:4a:01:76:4e:a6:c2:
         e4:f1:10:5b:99:0b:8b:1a:65:00:c4:32:c6:49:29:6a:ba:a6:
         26:fd:a4:dd:99:3f:03:e0:78:19:6b:d8:11:39:48:f9:be:aa:
         11:d1:67:33:49:3e:b0:3e:fe:be:5b:fb:ac:64:fa:1e:a6:25:
         8f:02:94:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:23:33 2026 by rpki-client