Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/3CFE7680BC5C11EFB951FD4FC4F9AE02.roa
File:                     3CFE7680BC5C11EFB951FD4FC4F9AE02.roa (raw, json)
Hash identifier:          T9cYe9ZeR41yqY0Knl/5FUBYrilHkPIrqJ76+KfRgiA=
Subject key identifier:   6C:84:A4:85:38:5F:4B:AF:D2:AE:A7:E8:BB:C9:EC:6C:46:60:2F:95
Certificate issuer:       /CN=A917B520/serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
Certificate serial:       011F
Authority key identifier: 39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/3CFE7680BC5C11EFB951FD4FC4F9AE02.roa
Signing time:             Wed 27 May 2026 03:33:11 +0000
ROA not before:           Wed 27 May 2026 03:33:11 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     150436
IP address blocks:        145.223.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 03:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
        Validity
            Not Before: May 27 03:33:11 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1665f7-c58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:4c:48:6a:78:fc:ee:dd:28:3b:f4:b5:78:
                    75:8e:bc:25:6b:19:c7:1e:45:59:ea:62:f7:d2:79:
                    17:fc:3a:29:69:de:65:89:69:f5:f1:19:07:8c:d1:
                    00:4d:2b:05:ac:3f:20:ef:15:6e:3f:9a:f2:7b:dc:
                    11:00:fb:5d:a2:a5:e1:27:df:61:8d:6d:c7:a1:fa:
                    1e:a8:95:e7:1e:5f:2a:45:fd:31:5f:dc:51:0c:73:
                    30:ed:22:68:f3:f9:0d:23:c5:17:67:e3:f7:a1:18:
                    5e:95:d9:75:e7:da:f1:c4:16:c6:cd:7b:82:58:7c:
                    59:57:f1:d6:b8:dc:7c:e9:52:3e:66:a1:d4:f7:ad:
                    df:c3:0c:4f:b9:d5:cc:b4:c1:9a:54:23:db:30:8a:
                    54:8e:78:4a:b4:1f:8a:8d:f1:99:99:c6:52:9b:65:
                    e0:24:d4:28:81:82:d1:ea:01:88:61:e7:d1:de:6f:
                    eb:2a:e1:c9:a1:a6:ff:c3:44:3d:f0:ce:43:3c:6e:
                    6a:e2:55:e5:53:ef:e7:d9:08:e5:ab:a4:47:ed:a5:
                    15:aa:42:9d:bc:7c:18:52:0f:1a:7f:4e:a3:e3:2b:
                    89:d8:b0:58:9c:e2:1f:8d:5f:df:e8:be:da:09:dc:
                    53:24:20:97:42:1c:f7:f9:f7:26:ea:6d:be:8f:e2:
                    da:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:84:A4:85:38:5F:4B:AF:D2:AE:A7:E8:BB:C9:EC:6C:46:60:2F:95
            X509v3 Authority Key Identifier:
                keyid:39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/3CFE7680BC5C11EFB951FD4FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.223.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         75:dd:76:cf:e0:c0:d6:79:59:25:07:68:19:3b:d1:de:d8:99:
         87:c3:e2:45:f4:2a:b9:71:6e:de:9c:6f:0b:7d:17:ff:90:45:
         48:6c:3a:d6:a7:2c:13:0c:52:c7:3c:fb:96:f9:7a:45:53:f2:
         36:6d:76:a0:8e:0a:e2:5c:9d:15:c5:06:16:18:05:7e:27:15:
         57:83:79:7f:11:7a:4c:32:51:85:4b:d6:6d:e3:31:4a:de:35:
         c0:b0:2a:7f:f7:ef:c5:97:06:25:4a:56:fd:ec:c3:62:4e:7b:
         ab:58:6d:12:3c:db:46:f6:71:45:8d:79:6f:cc:3e:79:dc:d3:
         24:37:61:fb:da:1b:b0:8e:15:ce:52:0a:73:cf:d6:dd:a7:b9:
         be:c3:7c:55:12:cd:f5:98:32:86:31:3b:30:03:4a:ce:8a:f3:
         f3:1f:a2:ff:5a:4f:ff:6b:a4:ab:d3:6a:16:bf:bf:7d:ca:92:
         0b:a7:19:54:f5:35:4e:8b:37:0f:a3:1d:f1:bc:fe:64:99:a1:
         74:70:7a:f0:a4:08:f6:d1:84:d8:fb:0f:91:cf:c6:e3:61:5e:
         7b:4a:d8:75:21:2b:21:82:5f:a3:ec:68:52:da:1d:0d:be:25:
         24:da:3f:b5:e9:5e:ac:72:6a:22:c1:99:3f:b6:fd:ba:1d:c3:
         f6:8c:c8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 18:05:10 2026 by rpki-client