Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/69977ED8794A11F1A904CD4C78A30FBC.roa
File:                     69977ED8794A11F1A904CD4C78A30FBC.roa (raw, json)
Hash identifier:          XEUfFlJthPA/3+z3KByckI/fVxpMUk7NP0qNDzE4q+M=
Subject key identifier:   05:CB:43:17:BF:23:B1:30:17:F9:16:DB:17:B8:8F:26:80:3D:12:84
Certificate issuer:       /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial:       02C3
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/69977ED8794A11F1A904CD4C78A30FBC.roa
Signing time:             Mon 06 Jul 2026 20:12:50 +0000
ROA not before:           Mon 06 Jul 2026 20:12:50 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     26337
IP address blocks:        43.225.52.0/22 maxlen: 24
                          103.21.58.0/23 maxlen: 24
                          137.59.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
                          rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Jul 2026 01:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 707 (0x2c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
        Validity
            Not Before: Jul  6 20:12:50 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a4c0c42-a6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:04:84:f8:57:c7:11:31:1d:f1:12:06:ac:
                    c8:fe:b8:9f:10:5a:0b:99:89:90:d3:51:d4:c6:0d:
                    10:5f:ed:a3:4b:9e:46:11:42:da:71:80:32:4c:c1:
                    a8:dc:b4:0b:e5:12:bd:8a:47:7c:28:8c:3a:f2:4b:
                    18:b1:4b:6c:29:d0:3b:f7:e1:dc:37:b6:2a:32:74:
                    59:c3:41:30:00:0a:9a:07:56:73:fa:25:dd:19:eb:
                    51:a9:08:d5:5b:7d:fc:eb:4a:15:54:cd:37:7f:5e:
                    b3:3d:28:14:41:21:39:27:e9:29:1c:1f:d3:6f:3d:
                    bb:bc:54:93:ac:f8:a5:26:12:02:67:15:bc:6a:41:
                    08:ce:86:e7:d3:a0:7f:2f:47:1d:85:a4:31:1e:b6:
                    9f:80:8d:13:e6:ce:2f:23:25:d1:34:a5:1a:8f:75:
                    99:35:42:30:d4:89:73:53:5d:76:29:8c:88:8b:6b:
                    9f:16:c7:7f:9c:b1:17:ff:65:89:1c:bd:3c:d9:55:
                    4f:43:22:48:a7:ec:65:0d:e3:a8:7b:4e:18:23:95:
                    39:af:a0:0b:86:85:23:91:df:79:c5:69:6a:3d:96:
                    87:44:87:91:f5:9b:7b:66:c7:60:30:70:29:fa:99:
                    f7:dd:af:eb:12:71:09:b6:07:f8:45:33:43:78:8f:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CB:43:17:BF:23:B1:30:17:F9:16:DB:17:B8:8F:26:80:3D:12:84
            X509v3 Authority Key Identifier:
                keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/69977ED8794A11F1A904CD4C78A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.52.0/22
                  103.21.58.0/23
                  137.59.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:a0:75:43:a6:a5:74:64:a9:05:4a:c8:b4:6a:cc:59:61:b3:
         04:17:b1:eb:6f:34:33:ef:aa:ee:a1:78:82:e9:0e:3c:cb:f8:
         8b:dc:6b:e9:59:bd:23:de:d4:f7:73:d3:00:42:da:f0:00:1d:
         5a:de:5d:b4:32:da:4d:b8:eb:88:f3:60:5c:40:9a:12:4e:1a:
         7f:f2:6e:5b:d0:d1:5f:a2:98:bb:01:da:47:13:d8:fb:3e:af:
         51:90:a5:45:40:11:e6:2b:eb:a3:12:98:4c:be:6d:e4:54:8a:
         fb:fe:bf:37:83:57:64:45:d1:79:45:24:0e:c5:f8:94:76:69:
         10:2d:76:32:39:ff:69:8d:e0:e3:d2:ef:f3:41:8c:20:25:cd:
         97:74:8b:9d:61:5c:71:13:8c:a4:17:44:02:5b:46:02:4a:68:
         90:25:7a:eb:c4:61:ee:43:e6:a2:24:a3:a2:d5:a8:dc:c8:7b:
         1f:bc:10:a6:20:64:65:ca:b0:90:91:af:6e:31:aa:f4:2d:04:
         7f:9f:06:60:23:19:9f:51:5e:d9:b6:89:92:e5:64:84:a6:06:
         9d:48:18:98:d6:9e:a8:86:84:6a:08:a5:58:d6:8a:9a:32:f5:
         a7:48:ae:37:a6:36:96:b7:ad:d9:8e:42:32:c2:3f:19:b1:ff:
         51:ba:4a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:48:46 2026 by rpki-client