Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/9580A702548211EFAADB996FC4F9AE02.roa
File:                     9580A702548211EFAADB996FC4F9AE02.roa (raw, json)
Hash identifier:          +DCvPGD1gJzVRYp0NyLyo9qI/LocUFsJLWMxD2e8AY0=
Subject key identifier:   F2:2A:13:50:79:0F:DC:9D:EA:85:20:01:EB:6E:F2:07:F1:C4:24:BA
Certificate issuer:       /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Certificate serial:       0199
Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/9580A702548211EFAADB996FC4F9AE02.roa
Signing time:             Wed 27 May 2026 03:33:09 +0000
ROA not before:           Wed 27 May 2026 03:33:09 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     150436
IP address blocks:        45.78.192.0/18 maxlen: 24
                          69.5.0.0/19 maxlen: 24
                          207.166.160.0/19 maxlen: 24
                          216.19.0.0/18 maxlen: 24
                          216.230.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 03:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
        Validity
            Not Before: May 27 03:33:09 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1665f5-c3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2e:ff:25:65:e2:cc:76:b5:29:b6:21:b6:33:
                    71:f3:2a:d4:82:78:f4:21:fa:50:dd:52:ed:27:db:
                    27:fc:e4:ea:09:25:45:87:0c:11:e3:4f:22:30:c7:
                    5a:94:b6:bd:7e:f7:53:30:b0:8c:83:3b:40:75:7b:
                    d2:85:c0:ac:86:05:b1:97:8b:3b:02:a6:3c:65:72:
                    f5:e6:13:2f:40:5a:6c:e9:1a:65:e2:d8:8a:91:ab:
                    c0:43:e7:a9:eb:76:1d:e9:df:06:d9:95:75:b1:e9:
                    6b:4f:15:27:44:86:62:2e:e4:d3:bb:54:69:65:d0:
                    41:c3:1a:26:58:bf:f1:12:22:c1:06:82:8f:02:6a:
                    53:6e:18:63:61:21:24:2e:ef:4b:20:56:48:0a:5d:
                    59:ff:9a:dc:39:37:7d:c1:21:f0:e2:8e:f6:83:49:
                    d5:6b:30:e1:98:06:75:57:f4:a3:9d:3e:1d:5a:f5:
                    e4:85:60:95:fb:52:5b:8a:f8:a7:a2:6e:08:27:05:
                    f2:28:d7:5c:ea:73:4f:6b:ce:18:4e:59:8d:09:c0:
                    22:3b:f3:ca:68:79:5f:58:0c:1a:7a:42:57:0d:14:
                    ca:3d:93:e9:8b:87:2d:e1:52:78:f4:35:e9:35:aa:
                    49:57:48:b9:d7:c7:81:20:c9:3f:45:5f:2e:9a:01:
                    17:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2A:13:50:79:0F:DC:9D:EA:85:20:01:EB:6E:F2:07:F1:C4:24:BA
            X509v3 Authority Key Identifier:
                keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/9580A702548211EFAADB996FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.78.192.0/18
                  69.5.0.0/19
                  207.166.160.0/19
                  216.19.0.0/18
                  216.230.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:c9:9f:2b:f2:e2:fd:22:d6:45:26:a7:34:65:3f:1d:12:d3:
         4e:21:9f:c0:0c:b1:46:d7:5a:ee:aa:17:ef:5d:ca:ea:f1:7c:
         90:56:f1:01:4a:2b:4b:58:21:fa:49:b3:46:68:03:41:ea:e1:
         bd:ea:cf:ef:f0:c7:56:e8:b8:22:b1:99:73:61:06:55:a7:c5:
         e2:60:b5:7c:c1:88:c3:f9:66:48:da:29:d9:d1:97:f7:9b:3c:
         4b:26:e6:96:49:e9:57:15:a6:f7:7f:00:09:7e:98:6f:bf:fd:
         13:c7:e3:e8:c3:3e:f2:1b:b6:84:93:c0:45:b0:cf:d7:b0:6a:
         52:d2:75:8e:67:9c:83:1b:ba:6f:4f:29:c8:09:13:a2:ac:6b:
         1c:2e:10:c2:4d:91:f8:66:f3:96:2a:d5:89:47:f0:c8:c7:8d:
         8c:04:ae:21:4f:80:51:d9:e7:3c:a8:98:a9:6c:3f:f5:3c:2f:
         15:d0:fd:e8:5c:64:05:6d:d8:84:c7:3f:33:93:ac:bb:04:b9:
         03:2f:85:32:b2:80:ed:7b:e7:de:1c:7a:e0:e7:2f:b3:f2:e0:
         4c:78:f4:90:79:62:e6:06:04:0d:50:d0:fc:95:6f:f8:59:12:
         d6:5d:ac:c9:71:5e:91:3c:7d:f1:46:7b:fe:34:79:2b:29:60:
         ef:e2:a1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 18:04:59 2026 by rpki-client