Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/52AE08D4ABCF11F083B9610FC4F9AE02.roa
File:                     52AE08D4ABCF11F083B9610FC4F9AE02.roa (raw, json)
Hash identifier:          KHjpOX86nJ+JvEal4Th9ElzR3Sk1i9bEDW0jA6Nf2qo=
Subject key identifier:   46:BD:69:FC:94:EE:89:83:CA:E7:75:14:74:CA:5A:27:00:FB:31:8B
Certificate issuer:       /CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B
Certificate serial:       0185
Authority key identifier: 07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/52AE08D4ABCF11F083B9610FC4F9AE02.roa
Signing time:             Thu 13 Aug 2026 04:54:54 +0000
ROA not before:           Thu 13 Aug 2026 04:54:54 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     26658
IP address blocks:        45.125.108.0/22 maxlen: 24
                          103.193.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl
                          rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C5E0, serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B
        Validity
            Not Before: Aug 13 04:54:54 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7d4e1e-c858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:29:71:fa:ee:07:c3:24:2a:a7:e3:9c:eb:08:
                    58:2f:61:e2:de:23:2d:4b:79:b9:df:82:f7:b8:20:
                    54:c2:29:08:d0:7d:d3:b9:93:c1:bb:8e:c9:a1:6a:
                    3b:4b:13:59:5c:d0:db:e5:07:57:2b:e3:87:63:41:
                    b8:f1:29:aa:b6:76:0c:4b:e7:c6:4f:88:f5:12:cb:
                    1b:fe:7f:e4:2d:a4:62:52:15:63:51:77:30:8a:39:
                    0d:48:df:b6:34:d8:61:1d:a1:6e:04:5a:87:7d:1c:
                    65:ae:8c:5f:82:96:a1:77:72:f4:c3:f7:88:bd:b0:
                    91:50:b1:bd:9d:b7:d9:7d:06:03:0f:77:a0:eb:14:
                    bb:d6:a5:a7:09:4a:b1:68:07:3e:76:0f:d6:09:ba:
                    d1:b0:14:e4:94:3c:53:78:79:4f:22:c3:d3:85:33:
                    6e:a1:6c:78:16:1b:01:37:40:8b:ea:4d:95:51:0e:
                    f3:51:10:79:aa:bd:22:d8:c7:96:28:7b:88:b8:b4:
                    54:83:95:72:af:4d:df:7d:05:91:a3:af:39:3d:19:
                    47:4b:f2:c1:70:40:40:c2:95:29:62:a9:27:6a:6c:
                    7f:0a:be:ae:f2:37:6b:9d:64:b9:79:8e:4b:51:73:
                    4b:22:cd:80:5e:ae:8f:64:9f:56:92:65:2d:65:ae:
                    3f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BD:69:FC:94:EE:89:83:CA:E7:75:14:74:CA:5A:27:00:FB:31:8B
            X509v3 Authority Key Identifier:
                keyid:07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/52AE08D4ABCF11F083B9610FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.125.108.0/22
                  103.193.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:e1:c8:70:db:a6:fb:bf:90:37:ba:45:84:e8:36:5d:d8:a0:
         c7:f7:0c:12:9b:4c:82:3f:5c:f6:5f:53:60:e2:99:4c:b2:76:
         be:56:79:d6:4f:35:3d:80:2f:ac:89:79:27:9f:2f:c2:9c:ef:
         b1:96:0a:42:8b:d8:29:e3:59:60:2c:50:e5:94:9f:ca:38:4c:
         0d:39:54:cf:56:6c:43:13:90:ad:6d:b7:13:e7:1c:04:27:64:
         aa:2d:ea:97:14:ee:b4:f6:92:f2:93:4d:d3:5d:f4:2d:da:e5:
         01:02:d8:48:a9:59:b8:49:94:05:f4:0e:6f:17:95:a8:fc:15:
         13:47:a8:96:b4:11:05:2b:56:81:79:c5:8b:07:47:3d:d2:ef:
         d5:fd:ea:2d:76:cc:e0:73:e3:90:bd:62:8a:be:87:c3:84:a3:
         9e:f6:b0:66:a4:aa:9a:d7:6e:b0:7d:ed:64:a6:bb:b0:1b:74:
         a9:76:ed:6d:18:9d:bc:cd:cd:1c:b5:8a:2f:42:66:fa:46:26:
         be:95:e4:a3:ef:20:69:96:e0:bf:91:ea:f2:b4:25:e5:5a:93:
         2c:a3:2c:03:8a:8c:95:a2:e0:cc:69:6c:cf:ae:c2:46:4a:db:
         09:e5:25:e1:33:73:aa:7b:f4:83:d8:a6:a7:3c:93:92:f9:8c:
         13:62:e5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:47 2026 by rpki-client