Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/69055896794A11F1A904CD4C78A30FBC.roa
File:                     69055896794A11F1A904CD4C78A30FBC.roa (raw, json)
Hash identifier:          bWXgWix3kh5/9XJOBjaufZojq+wyCZBq+UEF65Xm7VE=
Subject key identifier:   04:7A:E8:D4:72:D0:19:63:BC:F5:79:C7:0B:1B:8C:08:89:69:A4:03
Certificate issuer:       /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial:       02C2
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/69055896794A11F1A904CD4C78A30FBC.roa
Signing time:             Mon 06 Jul 2026 20:12:48 +0000
ROA not before:           Mon 06 Jul 2026 20:12:48 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        43.225.52.0/22 maxlen: 24
                          103.21.58.0/23 maxlen: 24
                          137.59.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
                          rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Jul 2026 01:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706 (0x2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
        Validity
            Not Before: Jul  6 20:12:48 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a4c0c3f-53f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:96:97:c2:c0:10:b1:0d:c8:48:e1:ee:05:
                    c2:68:3b:d6:f5:4a:f9:94:8c:b3:8d:70:92:e8:b2:
                    be:f4:67:81:34:b3:74:0f:20:71:bb:b8:29:2c:44:
                    cf:ea:da:8c:24:9c:88:26:53:42:c0:7f:58:be:fa:
                    cf:c3:9a:82:ff:6f:e6:7b:d5:54:2e:77:99:2a:8f:
                    b4:ed:d7:0b:00:28:b5:ab:10:82:af:b5:46:a4:7e:
                    54:aa:f7:fb:b8:db:7b:c2:ec:45:85:d6:cf:bb:56:
                    61:1e:10:f3:93:0d:5b:63:a1:b4:6d:64:20:98:c1:
                    47:6b:35:d7:00:d1:10:d6:b9:c0:7c:c1:c3:6a:15:
                    27:15:c6:3e:71:b1:22:0c:84:cf:fc:74:22:c6:1c:
                    69:16:64:d9:2d:50:38:c3:e9:b0:cb:78:3a:3e:de:
                    f1:75:2b:c7:d1:ec:d3:c7:38:db:a8:d4:b0:ec:f7:
                    0c:17:5e:9f:c3:f2:26:13:b5:7c:02:a1:2c:5f:bd:
                    ba:0e:a3:60:19:e9:64:03:19:e0:c9:b1:14:f7:4c:
                    d4:14:b0:32:f6:30:d4:aa:6c:17:72:41:7a:f2:00:
                    a9:58:3f:31:e5:bd:41:93:46:8f:a0:1f:d9:4d:95:
                    ac:73:7d:d4:29:54:b6:a1:12:89:47:f9:56:f2:34:
                    5a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7A:E8:D4:72:D0:19:63:BC:F5:79:C7:0B:1B:8C:08:89:69:A4:03
            X509v3 Authority Key Identifier:
                keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/69055896794A11F1A904CD4C78A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.52.0/22
                  103.21.58.0/23
                  137.59.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:62:55:30:36:da:fb:b2:d9:9d:10:c2:5c:05:74:7e:fa:b7:
         32:c5:b5:d9:d0:6c:cf:4a:67:c3:ec:9b:0b:e9:e6:cc:18:cd:
         c4:09:88:6f:20:b0:9c:6a:11:9d:df:18:90:f0:1e:89:de:e6:
         bc:3b:f6:bb:9a:34:13:cf:b0:7a:e1:92:4e:e4:e1:6c:fd:64:
         ab:06:71:3f:09:75:2a:a7:a9:c0:19:1c:10:f4:f0:bf:e2:23:
         15:66:97:5b:da:92:48:34:29:7a:ff:e6:ba:80:4a:d2:82:e8:
         4d:21:ca:ea:af:e6:9d:ca:f4:11:d0:65:8a:bf:a3:7c:9d:db:
         ad:d4:e4:fc:4f:cf:c7:d3:ef:bc:e3:2a:e0:ad:c5:76:0f:34:
         eb:9a:d6:e2:27:aa:8c:1e:f6:ca:02:d3:d9:ff:ac:88:86:d4:
         be:2d:cb:29:e3:5f:29:35:73:ca:31:37:c2:8d:5d:71:9c:b5:
         80:a0:bc:63:a8:3a:20:14:c0:15:95:d5:95:3c:4f:cd:34:39:
         dc:de:7d:f6:90:95:c4:85:a4:e5:81:ce:3b:83:59:f1:1d:5c:
         b7:2f:1c:68:b3:46:15:bc:6e:5b:d0:bb:e1:15:8c:5d:2c:4c:
         a2:2e:18:1b:11:9a:34:48:8a:26:07:69:05:5d:d6:38:8c:7a:
         da:5d:b7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:48:45 2026 by rpki-client