Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/7D4462BAC93311F0B048172CC4F9AE02.roa
File:                     7D4462BAC93311F0B048172CC4F9AE02.roa (raw, json)
Hash identifier:          ocfm0632GkIQFqFPtClJ7d+H9AJy5vbW5Lcs0qelByk=
Subject key identifier:   B6:E1:A4:FF:2B:F5:C9:9D:9C:B5:91:99:EF:52:F4:95:8A:C3:57:69
Certificate issuer:       /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Certificate serial:       0390
Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/7D4462BAC93311F0B048172CC4F9AE02.roa
Signing time:             Sat 27 Jun 2026 01:33:00 +0000
ROA not before:           Sat 27 Jun 2026 01:33:00 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     134186
IP address blocks:        45.117.60.0/24 maxlen: 24
                          2402:5e80::/32 maxlen: 32
                          2402:5e80::/48 maxlen: 48
                          2402:5e80:1::/48 maxlen: 48
                          2402:5e80:2::/48 maxlen: 48
                          2402:5e80:3::/48 maxlen: 48
                          2402:5e80:4::/48 maxlen: 48
                          2402:5e80:5::/48 maxlen: 48
                          2402:5e80:6::/48 maxlen: 48
                          2402:5e80:7::/48 maxlen: 48
                          2402:5e80:8::/48 maxlen: 48
                          2402:5e80:9::/48 maxlen: 48
                          2402:5e80:a::/48 maxlen: 48
                          2402:5e80:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 Jul 2026 01:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
        Validity
            Not Before: Jun 27 01:33:00 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a3f284c-83e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:13:84:1d:b3:9b:dc:94:2a:b9:8d:d5:fa:07:
                    d1:13:6d:72:21:3f:c2:73:4d:8c:95:f7:30:44:7a:
                    74:d2:19:e7:e4:b3:ff:73:24:d0:51:81:98:64:97:
                    1d:94:2f:c2:8a:ba:36:4e:0e:44:68:74:28:59:18:
                    df:e4:f5:db:13:10:fc:92:2d:fe:51:74:d8:55:75:
                    87:ed:12:fd:76:b1:90:60:cf:85:88:de:dc:e3:05:
                    ed:76:ee:24:5d:5b:7c:9d:0d:f1:c1:a8:11:20:3b:
                    b4:4e:51:41:26:e6:e2:d8:67:ed:78:16:7a:fd:94:
                    52:2b:f3:ab:2a:f1:fb:93:66:d4:c0:d2:a6:ea:b7:
                    b6:92:d1:73:3d:a8:72:6a:58:cd:31:6d:53:64:64:
                    72:85:b9:e1:2a:23:db:fe:25:ac:73:a9:df:4c:2a:
                    d9:b2:12:c3:33:81:8c:85:c5:14:ea:74:de:01:48:
                    a1:e7:45:0b:6a:db:ec:9f:40:d6:55:61:87:de:f2:
                    2a:ba:25:34:49:79:04:12:9f:02:dc:6c:a0:60:a3:
                    24:35:24:17:72:64:21:f9:a1:03:ce:ba:92:fe:17:
                    41:f8:64:f1:63:b6:42:c6:a0:26:f7:f2:3b:46:72:
                    78:ed:d0:ab:d8:d3:8a:6a:a5:4f:b0:b2:e6:5a:e6:
                    3b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E1:A4:FF:2B:F5:C9:9D:9C:B5:91:99:EF:52:F4:95:8A:C3:57:69
            X509v3 Authority Key Identifier:
                keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/7D4462BAC93311F0B048172CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.60.0/24
                IPv6:
                  2402:5e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:1c:9c:62:ee:7f:11:0d:44:c7:3b:0d:4f:26:e8:22:52:f1:
         b0:79:d4:8e:18:0d:c9:53:27:27:2c:39:f0:6d:93:6f:4c:cb:
         67:f8:1b:e4:f4:ac:fa:e9:ea:d4:fe:77:15:a7:76:31:df:92:
         63:2d:cf:74:9c:af:4e:7e:a3:69:b5:4b:51:97:fe:aa:f8:fe:
         e0:9d:6a:36:23:f5:8f:cc:0d:19:c8:e0:66:dc:1b:d5:5b:ca:
         7e:91:e9:eb:89:ad:b3:d7:4a:56:4a:71:24:66:09:b3:29:17:
         a0:de:99:80:47:4d:00:1e:3c:87:fc:b9:a0:0a:8a:5c:6b:bf:
         68:af:21:77:16:b4:c2:f8:03:78:18:81:36:14:6a:65:be:81:
         34:23:a4:7c:13:ad:a0:f2:2e:95:6e:77:4b:4e:52:4c:7f:25:
         32:de:cd:59:be:d9:0c:28:a0:7e:b1:4c:5b:e4:80:d3:2d:cb:
         b7:bc:d0:4f:75:8b:a0:c5:5b:a9:b8:3b:d0:fc:b1:7b:53:33:
         b0:ba:fd:4e:08:97:0c:bf:90:ad:a7:20:e2:06:34:69:2c:62:
         1b:f8:08:cb:9d:72:c3:44:bd:c8:77:24:a1:48:07:e5:5a:68:
         0c:2c:8c:de:07:91:68:87:08:7c:23:8d:de:ad:be:1b:9b:97:
         5f:72:90:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 00:42:51 2026 by rpki-client