Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/495EADB4ABFC11F1817FA89C6A11F970.roa
File:                     495EADB4ABFC11F1817FA89C6A11F970.roa (raw, json)
Hash identifier:          FBNqPMPTEYHVvGU77MxzJrj7KAVcUXffGlg20+PyVOs=
Subject key identifier:   78:63:6E:74:91:64:C1:A7:4A:CA:D2:63:50:F6:A6:0A:76:87:F4:31
Certificate issuer:       /CN=A917A95A/serialNumber=4D62DDEF19BB452F1419561008CB121C829920DD
Certificate serial:       09
Authority key identifier: 4D:62:DD:EF:19:BB:45:2F:14:19:56:10:08:CB:12:1C:82:99:20:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TWLd7xm7RS8UGVYQCMsSHIKZIN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/495EADB4ABFC11F1817FA89C6A11F970.roa
Signing time:             Wed 09 Sep 2026 03:35:50 +0000
ROA not before:           Wed 09 Sep 2026 03:35:50 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     0
IP address blocks:        175.106.30.0/23 maxlen: 24
                          2400:bc00::/36 maxlen: 36
                          2400:bc00:1000::/37 maxlen: 37
                          2400:bc00:1800::/44 maxlen: 44
                          2400:bc00:1810::/48 maxlen: 48
                          2400:bc00:1813::/48 maxlen: 48
                          2400:bc00:1818::/45 maxlen: 45
                          2400:bc00:1820::/43 maxlen: 43
                          2400:bc00:1840::/42 maxlen: 42
                          2400:bc00:1880::/41 maxlen: 41
                          2400:bc00:1900::/40 maxlen: 40
                          2400:bc00:1a00::/39 maxlen: 39
                          2400:bc00:1c00::/38 maxlen: 38
                          2400:bc00:2000::/35 maxlen: 35
                          2400:bc00:4000::/34 maxlen: 34
                          2400:bc00:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.crl
                          rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TWLd7xm7RS8UGVYQCMsSHIKZIN0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 09:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A95A, serialNumber=4D62DDEF19BB452F1419561008CB121C829920DD
        Validity
            Not Before: Sep  9 03:35:50 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6aa0d416-7b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a3:05:38:5d:38:d8:5b:e3:4d:95:d5:1f:59:
                    a0:86:ae:b7:5c:05:8e:ba:ae:f2:ba:66:d7:84:5b:
                    d5:18:d6:d3:8d:4a:c2:34:e4:a6:c4:b2:ef:48:f4:
                    42:b8:30:99:81:cc:b6:be:ee:44:cb:f9:b4:52:7c:
                    e0:58:b1:2c:19:30:82:92:2f:e2:30:03:f3:e7:67:
                    cc:ef:f9:1b:d7:59:e9:d8:be:5d:eb:00:31:2a:b5:
                    d7:ed:6f:24:4b:54:37:e7:0c:e7:19:14:3f:f4:81:
                    64:9f:bc:95:1d:f4:f3:00:49:84:fc:55:64:61:c4:
                    24:20:ff:b4:f5:fd:ba:bf:8d:63:07:a9:43:f6:89:
                    8f:1f:b9:66:61:de:68:58:ea:5e:c5:03:51:07:27:
                    b7:f3:e4:31:b9:d1:f5:d7:c9:18:6b:00:e7:30:9b:
                    94:c6:81:ab:58:25:62:00:d4:d0:cb:4f:dd:7d:3a:
                    35:01:ab:39:40:76:00:35:ef:a0:de:ee:7d:81:ce:
                    95:1e:16:df:53:25:09:a3:57:8f:a1:0f:20:b7:20:
                    dc:9a:b5:a0:0e:a0:a5:a9:a7:20:e7:c3:12:e1:69:
                    a3:35:69:0d:1f:18:f7:18:ea:75:78:a1:7d:5d:51:
                    51:0e:72:7a:f5:8b:4d:bf:0c:ce:af:f4:41:51:25:
                    96:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:63:6E:74:91:64:C1:A7:4A:CA:D2:63:50:F6:A6:0A:76:87:F4:31
            X509v3 Authority Key Identifier:
                keyid:4D:62:DD:EF:19:BB:45:2F:14:19:56:10:08:CB:12:1C:82:99:20:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/TWLd7xm7RS8UGVYQCMsSHIKZIN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TWLd7xm7RS8UGVYQCMsSHIKZIN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A95A/7284FB28ABFA11F193FD5FA46911F970/495EADB4ABFC11F1817FA89C6A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.106.30.0/23
                IPv6:
                  2400:bc00::-2400:bc00:1810:ffff:ffff:ffff:ffff:ffff
                  2400:bc00:1813::/48
                  2400:bc00:1818::-2400:bc00:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5d:f0:e9:7a:92:c0:36:85:af:c0:7f:46:29:da:b8:bc:f1:42:
         ca:55:47:c2:e3:f2:25:15:db:d9:f6:4e:d3:d7:17:63:92:2e:
         1e:6d:9b:39:52:8e:87:a1:4b:e5:ed:ca:32:d9:0b:7b:59:76:
         7d:ef:28:39:09:34:35:a9:38:9c:47:5c:af:d2:1d:63:f6:c5:
         6a:0c:e8:4b:c0:67:77:16:1b:42:ae:2b:21:f8:20:27:0f:fd:
         b5:0e:b9:ed:ee:ac:a9:26:5d:3b:56:da:ba:20:41:c6:e2:3e:
         f9:bf:55:3f:14:ae:44:aa:d4:61:7f:9f:bf:57:3b:8c:40:48:
         ec:c0:aa:99:7a:52:dd:b1:c0:e2:bd:0f:b6:59:4a:11:65:2c:
         64:c8:b3:49:03:57:6e:5b:cf:8b:4f:8e:57:23:dc:3e:ed:dd:
         ef:4b:8d:c4:37:25:a8:b9:57:99:da:5f:3b:67:a0:11:43:c9:
         db:1d:1b:c8:73:e4:d2:af:39:9f:ac:ec:04:d7:98:a8:f5:41:
         8b:08:0c:4b:96:a5:76:a4:1b:6e:0d:7c:90:79:85:4a:b4:4d:
         a2:56:b3:20:a2:d7:62:89:fe:5e:77:6e:16:c1:ac:d1:bc:3e:
         87:b1:ac:84:be:f2:7a:4a:99:47:c7:ba:bd:3e:3c:16:d4:7a:
         6d:00:12:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:04:43 2026 by rpki-client