Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/F4A77A06CED911ED9BC69385C4F9AE02.roa
File:                     F4A77A06CED911ED9BC69385C4F9AE02.roa (raw, json)
Hash identifier:          1z0DBiQnEIz3Dx2+68qVMHYw2A5RwkYWaUuHFrVt564=
Subject key identifier:   64:6D:EC:F0:1E:C8:57:39:E4:0B:CA:45:95:D3:45:9E:6B:B7:B4:E1
Certificate issuer:       /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Certificate serial:       0E59
Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/F4A77A06CED911ED9BC69385C4F9AE02.roa
Signing time:             Thu 30 Jul 2026 17:35:12 +0000
ROA not before:           Thu 30 Jul 2026 17:35:12 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     55990
IP address blocks:        94.45.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3673 (0xe59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
        Validity
            Not Before: Jul 30 17:35:12 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6b8b50-ccf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:71:1e:02:f4:06:40:84:c4:8e:d4:f0:bd:
                    0d:61:a8:cf:ac:5e:17:13:a4:96:84:48:64:6f:43:
                    d1:2c:8d:b3:c3:75:14:ff:62:ba:64:3e:3a:7c:1a:
                    ba:19:62:df:6c:31:28:dc:6f:7e:f1:ca:34:03:4a:
                    c6:94:c3:e1:e3:ed:c0:60:11:27:a0:ca:4c:fc:78:
                    4c:e1:5b:af:d9:e6:3e:93:43:3e:f4:25:12:32:e3:
                    f8:8e:57:db:4c:60:f3:de:f7:06:7d:7a:28:ab:9d:
                    9b:83:7b:a3:f7:3d:18:e3:4b:41:6a:90:9e:09:9d:
                    25:66:bf:fc:17:dd:67:f3:52:02:22:5b:9b:18:67:
                    6e:4d:50:eb:c1:ec:7d:16:71:8c:9d:5c:c9:35:d0:
                    94:f0:7d:55:1b:24:20:7d:37:0e:94:e2:b0:1d:e2:
                    0c:2e:44:84:02:3d:85:a0:09:9c:42:f4:2c:69:0f:
                    3d:08:a8:3e:99:cf:1f:0f:05:8a:db:b0:ad:9b:11:
                    f1:47:31:9d:bb:c4:bc:6b:29:44:fa:d8:88:ca:d7:
                    f4:e2:57:b1:01:45:cb:b5:08:f3:59:2e:37:ca:c2:
                    fe:0c:80:5c:c1:e1:d8:2b:a6:0d:c0:c1:c9:fd:c0:
                    77:f4:f4:d2:d8:98:5d:81:1c:55:88:db:de:f9:dd:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6D:EC:F0:1E:C8:57:39:E4:0B:CA:45:95:D3:45:9E:6B:B7:B4:E1
            X509v3 Authority Key Identifier:
                keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/F4A77A06CED911ED9BC69385C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.45.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:3a:69:15:f9:ea:ee:1c:99:57:89:82:1f:2f:86:1b:55:15:
         9e:de:f8:52:e0:e9:95:73:dd:95:92:5f:c0:07:d8:2b:9f:88:
         ec:b1:38:9f:d4:a6:12:cd:d1:9d:e2:89:7e:71:73:38:36:55:
         9e:ab:58:00:24:26:64:7b:94:a4:47:8b:3a:7c:4a:79:99:4b:
         04:7a:dd:19:ba:7e:3d:30:35:74:84:29:ec:6d:d6:1a:0b:1d:
         61:9a:94:aa:64:bb:ff:20:56:68:37:5f:65:c7:94:68:47:c2:
         00:14:d2:d7:2f:9f:61:e8:91:d7:93:00:87:77:60:22:68:b8:
         aa:f0:15:3d:7c:9a:12:f6:89:c5:83:c5:7b:71:8b:3d:5e:c8:
         62:a0:14:f9:8c:42:77:6d:7d:71:33:72:0c:9b:04:9c:5a:58:
         76:3a:da:14:02:d2:2e:d9:9f:f8:b3:43:9e:49:e2:a5:ef:aa:
         9e:5e:71:52:1b:0c:7b:f3:fd:6f:cc:f5:68:d5:4c:0a:81:75:
         90:26:af:e7:ba:d3:ab:0b:9e:b7:b9:17:21:84:c5:1c:45:86:
         f1:47:3e:e3:e1:14:d9:33:af:7a:5b:58:f3:f3:76:ac:1b:f4:
         e8:08:7f:1e:5d:00:7a:a2:70:37:c3:db:15:cf:c7:da:cb:f1:
         45:26:93:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:23:09 2026 by rpki-client