Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/CBBF13566EA911F1979A4FB45FA30FBC.roa
File:                     CBBF13566EA911F1979A4FB45FA30FBC.roa (raw, json)
Hash identifier:          InjAFjFfD9Kqc+Wu+wt8coAIdhYTvUAL4QI7Q5j856I=
Subject key identifier:   17:CA:31:15:C3:44:29:02:F5:57:42:10:FC:FA:FA:2A:3B:84:9C:CE
Certificate issuer:       /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial:       1A98
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/CBBF13566EA911F1979A4FB45FA30FBC.roa
Signing time:             Tue 14 Jul 2026 17:16:46 +0000
ROA not before:           Tue 14 Jul 2026 17:16:46 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     56868
IP address blocks:        43.255.58.0/24 maxlen: 24
                          43.255.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
                          rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 16:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6808 (0x1a98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
        Validity
            Not Before: Jul 14 17:16:46 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a566efe-e66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:7a:1a:12:f3:e6:de:0b:0f:61:1c:4d:b6:
                    ff:78:c2:ea:d3:8c:76:90:78:ca:9c:d4:90:fa:af:
                    df:4b:ae:79:c7:02:a7:28:2a:13:63:e0:6c:3a:db:
                    91:bd:47:a9:2c:fe:c4:7e:72:f8:68:a3:61:01:dc:
                    65:de:58:bb:56:17:10:33:c5:51:60:98:96:68:cb:
                    e7:5f:6b:3d:18:69:e3:e5:55:c5:93:70:fd:6b:c3:
                    9e:8d:c3:6e:fd:6e:46:d5:5d:72:fb:b9:38:7d:2f:
                    ba:42:ed:9b:62:e4:e6:4e:19:a2:4c:60:e7:da:2c:
                    74:17:6c:00:c0:0c:c8:bc:17:41:a0:52:ea:94:b5:
                    ca:dc:25:2c:3e:1c:bb:25:ef:41:08:c4:04:b1:f1:
                    62:db:0a:16:e1:b9:cc:61:b6:0d:4a:5b:a6:d8:3c:
                    4d:9e:7f:69:c2:8b:8f:65:b7:6a:51:d1:4f:08:96:
                    ac:51:53:7a:72:7d:b1:0b:54:cc:ef:6e:2b:34:9a:
                    c7:0b:0f:1c:4d:d2:71:b5:db:3f:0c:79:d9:e3:f3:
                    f0:93:d0:5c:5e:3a:c3:b8:66:e9:ff:f0:34:de:ce:
                    ef:51:b7:ba:43:ab:cb:1b:59:a1:65:99:f1:8e:e0:
                    5f:6b:81:20:19:5f:89:69:53:94:17:76:b2:6e:a4:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CA:31:15:C3:44:29:02:F5:57:42:10:FC:FA:FA:2A:3B:84:9C:CE
            X509v3 Authority Key Identifier:
                keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/CBBF13566EA911F1979A4FB45FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:13:30:b1:09:d9:93:ba:ef:37:fa:11:9d:b9:ee:0c:ad:6c:
         9f:10:6d:b6:1d:73:ae:af:40:53:cc:c1:0d:35:48:58:8f:88:
         31:6e:5d:e8:2f:18:a5:7e:43:da:6e:64:da:02:28:03:2f:24:
         4b:1b:ef:08:5e:c2:3a:63:f3:6f:a5:5f:94:e1:43:2f:7a:4b:
         9e:5a:8c:7f:bc:95:7c:b0:5a:c4:29:08:6f:13:6c:f3:96:f7:
         92:9d:7e:8f:df:12:3d:e9:33:a0:9e:8b:a8:f8:46:38:6e:9f:
         a5:f3:64:59:9a:25:9f:f8:f1:83:ec:17:e2:25:7d:2d:21:c5:
         9b:65:d7:87:eb:8e:d9:9c:52:0a:cb:72:7a:a3:56:16:96:66:
         7e:85:fe:0d:d6:fb:3e:eb:0c:3f:3b:38:2e:0e:79:c7:77:b3:
         12:6f:b7:ff:8b:ef:3d:93:6e:14:d8:98:96:47:e3:ad:0f:2b:
         14:fe:3d:0d:95:43:f8:e0:8d:d6:73:f8:37:07:c5:e3:23:34:
         07:5d:94:3f:fc:90:27:09:a7:5d:95:a6:c2:57:d1:90:7d:02:
         29:7b:8c:5a:aa:74:9a:d8:d6:63:f9:e3:d0:6f:df:46:27:94:
         22:4e:62:de:88:c2:af:10:7c:56:f5:e7:ca:f8:7e:8f:3c:54:
         03:20:1f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:07 2026 by rpki-client