Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/B7AA552680DB11F1BD8F0E495DA30FBC.roa
File:                     B7AA552680DB11F1BD8F0E495DA30FBC.roa (raw, json)
Hash identifier:          NOVDQib+lECSnHFC4JVtukqfdz+DMQULILHyPpuxnlA=
Subject key identifier:   27:58:63:9C:DB:CD:55:FD:B8:60:48:82:62:D9:09:51:93:6C:45:20
Certificate issuer:       /CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
Certificate serial:       0173
Authority key identifier: 42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/B7AA552680DB11F1BD8F0E495DA30FBC.roa
Signing time:             Thu 16 Jul 2026 06:01:00 +0000
ROA not before:           Thu 16 Jul 2026 06:01:00 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     2764
IP address blocks:        14.202.90.0/24 maxlen: 24
                          27.33.254.0/24 maxlen: 24
                          60.242.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl
                          rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 06:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172506, serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
        Validity
            Not Before: Jul 16 06:01:00 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a58739b-3448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bb:c9:55:0b:11:7d:5f:db:83:d8:41:0f:4b:
                    59:9a:89:cd:18:85:d6:81:4f:b8:25:61:4d:e3:7c:
                    40:d3:aa:06:6e:a0:ef:23:5e:54:aa:46:dd:46:bf:
                    8a:38:a3:26:b2:c3:75:d4:62:ea:6a:b0:98:d2:93:
                    dc:07:90:ac:cd:51:ea:17:a0:11:bb:58:19:a9:e6:
                    c5:f7:77:67:55:2a:b5:24:82:22:65:f4:16:df:ed:
                    ae:10:ba:14:9b:ba:a3:89:31:51:6b:b3:03:6d:d4:
                    38:a4:e1:1d:c1:5a:b1:c2:26:dd:d8:0f:48:52:ad:
                    f2:bc:04:1d:27:20:13:43:94:46:f9:d2:cd:b4:8c:
                    52:f0:1c:c6:17:bf:a6:1c:68:2d:56:f2:b9:b5:41:
                    11:a5:8e:41:39:7f:a8:10:52:28:72:79:67:14:6b:
                    5d:79:a8:5e:2d:cb:00:6d:60:87:65:b1:4a:08:4b:
                    ae:d5:6c:60:75:b4:ac:d1:81:cb:65:f7:b6:ab:14:
                    cd:62:f3:79:ac:8c:10:f6:06:30:65:34:cd:7c:a4:
                    a6:08:01:ab:a7:02:3c:8a:aa:c2:40:7c:94:00:a4:
                    cd:88:85:85:35:f5:b2:dc:ce:2d:23:ae:6f:00:4f:
                    dc:ed:1a:39:24:0e:1a:0b:a1:d2:05:74:a6:11:a4:
                    4c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:58:63:9C:DB:CD:55:FD:B8:60:48:82:62:D9:09:51:93:6C:45:20
            X509v3 Authority Key Identifier:
                keyid:42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/B7AA552680DB11F1BD8F0E495DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.202.90.0/24
                  27.33.254.0/24
                  60.242.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:18:fa:a1:b5:a5:91:60:6e:ea:46:31:d1:86:ed:14:bf:92:
         d8:09:f9:a9:9f:ea:ad:8a:86:5e:a5:b9:92:29:c1:25:96:56:
         6c:56:a8:f0:59:5b:08:db:40:a8:c9:dc:78:0f:90:f8:45:39:
         3f:24:ee:dd:fa:0b:57:a1:6d:33:5e:48:78:52:45:f0:bf:a3:
         56:e6:85:47:34:4c:88:3f:e2:5f:9c:10:68:98:67:40:49:d1:
         ea:72:d4:32:fc:20:bb:4e:88:7d:a5:79:c3:b8:76:90:ab:a2:
         48:a0:47:a2:f8:71:e8:4e:b6:78:fb:c4:a0:91:0d:47:5d:90:
         a2:01:92:61:f9:5d:1d:a6:95:02:2d:f4:6b:66:ba:f7:16:72:
         28:1b:02:fb:f5:07:88:43:ca:d9:7b:0b:d1:0c:70:a7:ef:01:
         e2:a6:6c:a9:e5:c4:2c:0b:69:f4:83:97:a2:8a:1a:8d:ea:ea:
         06:4a:fb:8e:ff:a9:40:5b:21:f6:d0:53:09:de:50:67:b0:39:
         ce:a1:67:55:85:3c:5c:65:94:8c:9c:47:df:9d:d2:ea:6f:7d:
         62:85:dd:a3:6c:0c:c7:5b:22:fd:18:e1:5e:09:86:fb:72:ad:
         ea:b2:84:2f:e6:28:8f:64:b3:53:0e:a7:d2:f8:11:83:e0:47:
         d5:8c:a1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 05:04:16 2026 by rpki-client