Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/D5D654E4760611F1B28E97E07AA30FBC.roa
File:                     D5D654E4760611F1B28E97E07AA30FBC.roa (raw, json)
Hash identifier:          LKzEPMeNq68lEF5DAAViO1AMnnXw1fNEUoGr5S01Lg8=
Subject key identifier:   C7:BD:B6:B5:B9:96:8A:E0:D6:69:66:45:5F:5D:90:08:24:FE:87:94
Certificate issuer:       /CN=A9111537/serialNumber=A08850D5315F74B6148C2E56F964A7DC193640AE
Certificate serial:       08
Authority key identifier: A0:88:50:D5:31:5F:74:B6:14:8C:2E:56:F9:64:A7:DC:19:36:40:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/D5D654E4760611F1B28E97E07AA30FBC.roa
Signing time:             Mon 06 Jul 2026 05:44:13 +0000
ROA not before:           Mon 06 Jul 2026 05:44:13 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154742
IP address blocks:        203.24.209.0/24 maxlen: 24
                          2001:df7:2b40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.crl
                          rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111537, serialNumber=A08850D5315F74B6148C2E56F964A7DC193640AE
        Validity
            Not Before: Jul  6 05:44:13 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a4b40ad-fc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:46:f7:1d:6b:e2:ce:da:5d:25:fa:ef:c7:
                    eb:66:8c:6e:60:2c:49:e1:5a:6a:69:de:1b:52:ef:
                    97:ca:a4:13:59:b1:76:e4:b1:95:39:f3:66:6d:08:
                    4b:f2:f4:d2:a8:f4:32:23:43:f0:af:ec:28:dc:e5:
                    41:9c:84:dc:a3:0d:b3:89:b0:f6:9f:9a:bf:a8:a2:
                    77:2f:23:15:70:5d:6a:ed:a9:3e:31:23:8e:69:8e:
                    de:5c:23:04:ce:67:8d:4c:bb:6c:0a:84:09:52:b5:
                    21:4e:bf:75:f7:bc:74:d1:3e:2c:3b:04:99:18:dd:
                    48:c1:ce:82:e0:12:1c:b5:b8:19:fc:8f:e5:cc:0d:
                    ee:96:47:1d:09:60:5d:80:7d:82:b0:2b:e6:8b:4d:
                    49:5e:fb:08:f7:8e:03:8d:8b:43:6f:48:5e:f0:3c:
                    a7:77:07:09:80:d7:4c:c9:66:ce:02:ce:bd:23:72:
                    66:5d:9e:65:23:13:5c:e5:3a:63:c9:a1:19:68:0c:
                    da:00:10:bb:88:a5:41:58:86:86:b1:78:49:e5:09:
                    28:2e:7f:2b:ae:68:1f:54:f6:4d:97:24:28:05:4d:
                    c4:ac:16:61:c9:97:9b:de:42:49:b6:9d:2e:a6:7f:
                    4f:1d:f7:0d:50:22:70:58:a4:b1:e1:42:1d:fe:e9:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BD:B6:B5:B9:96:8A:E0:D6:69:66:45:5F:5D:90:08:24:FE:87:94
            X509v3 Authority Key Identifier:
                keyid:A0:88:50:D5:31:5F:74:B6:14:8C:2E:56:F9:64:A7:DC:19:36:40:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oIhQ1TFfdLYUjC5W-WSn3Bk2QK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111537/D5B3B540760311F1B9B648AC79A30FBC/D5D654E4760611F1B28E97E07AA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.24.209.0/24
                IPv6:
                  2001:df7:2b40::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:93:4b:d1:73:4e:8a:96:89:80:05:9d:43:05:72:79:5f:9c:
         df:3b:c0:f8:f2:52:91:f3:39:b0:58:6f:77:c0:ce:ae:a5:a1:
         1b:40:eb:ec:1c:88:c4:67:81:d6:68:21:4a:30:ca:3f:fe:50:
         8d:76:3f:ff:b7:0c:63:66:18:1f:7f:91:3b:00:93:1d:76:19:
         b1:d6:4b:3d:69:b7:07:d2:63:d9:5b:e6:d0:26:af:77:17:5c:
         5c:69:9d:c5:78:0c:c5:7a:38:2e:49:ba:b2:7b:cc:de:73:02:
         86:fc:2c:36:ed:ae:49:56:b2:64:c8:0c:1a:80:05:fc:32:66:
         9e:11:6b:34:0e:ed:fe:59:5d:92:32:8f:99:4d:6e:1f:92:17:
         0c:ae:da:60:04:b2:ec:03:bd:0c:e8:41:18:29:dd:7e:ee:4b:
         c9:95:e1:85:f1:50:6e:71:63:35:f5:5e:e2:09:48:be:33:24:
         39:2a:71:f3:fc:99:7b:7b:f5:30:c2:a1:0a:8e:d5:f0:0b:58:
         02:44:95:7f:67:08:e0:f2:ac:21:2b:7a:43:ca:bf:f1:0e:98:
         3d:41:d9:87:5c:23:1b:b4:96:b2:e6:61:a5:81:d7:06:26:fb:
         ef:d9:fb:1d:21:58:7d:d4:bf:00:d8:71:3a:a7:3d:ae:7c:48:
         a6:18:09:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:00:06 2026 by rpki-client