Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/95B5855C18CE11EFBCD58454C4F9AE02.roa
File:                     95B5855C18CE11EFBCD58454C4F9AE02.roa (raw, json)
Hash identifier:          GltJ8ldfOd4MALKW5R9sn4CvSE9nA9cuV/EopB0f2fc=
Subject key identifier:   D1:F4:77:75:7C:39:71:78:B7:DB:CB:7C:CB:53:5B:21:67:88:A7:8A
Certificate issuer:       /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003
Certificate serial:       0ABC
Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/95B5855C18CE11EFBCD58454C4F9AE02.roa
Signing time:             Fri 26 Jun 2026 20:23:53 +0000
ROA not before:           Fri 26 Jun 2026 20:23:53 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     10103
IP address blocks:        138.19.0.0/16 maxlen: 24
                          165.84.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl
                          rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2748 (0xabc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003
        Validity
            Not Before: Jun 26 20:23:53 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a3edfd9-40f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:5f:47:52:ca:09:03:b2:05:2e:4d:57:60:
                    a0:93:18:f3:1e:38:2e:b7:86:0d:b8:37:86:6f:42:
                    e7:82:62:8e:70:28:3f:7f:18:30:53:ed:2c:1e:c3:
                    b6:c4:50:02:4b:41:e7:ea:aa:ee:e0:16:85:39:29:
                    24:e4:d1:29:51:61:37:be:59:17:25:e0:63:a7:3c:
                    bb:27:7e:63:4d:44:f5:c1:85:74:4a:13:8f:78:bc:
                    50:17:28:38:d6:94:a5:2a:d3:fd:03:66:69:2c:2c:
                    48:55:77:89:ed:b4:4b:99:0b:57:03:22:79:7f:0d:
                    56:e0:40:0c:87:8b:95:e7:96:5b:c0:1d:1c:00:97:
                    59:55:45:90:4a:c3:10:e7:9f:4e:d6:bf:60:eb:95:
                    5d:76:d2:47:5b:08:e0:ae:e8:19:1f:ec:96:2f:2d:
                    c6:69:7e:86:02:b3:98:b4:9c:82:ce:f3:70:2d:1a:
                    f9:e6:cf:4a:93:52:24:2f:f8:9a:b4:ce:40:b2:ac:
                    06:4f:61:6d:9c:c5:4b:e1:eb:d7:98:41:80:5c:98:
                    f5:2d:e9:c4:ac:54:3a:7d:fa:8c:23:bb:50:cf:b6:
                    1c:8e:10:b3:7a:7c:31:f5:7b:13:28:b0:8f:27:b1:
                    97:3d:30:66:26:c1:2e:7c:8f:2c:bd:8c:f4:b2:97:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F4:77:75:7C:39:71:78:B7:DB:CB:7C:CB:53:5B:21:67:88:A7:8A
            X509v3 Authority Key Identifier:
                keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/95B5855C18CE11EFBCD58454C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.19.0.0/16
                  165.84.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2d:99:e3:64:2f:99:6a:fa:02:fa:3e:66:8a:20:be:0f:e2:95:
         d3:fd:ff:13:87:b4:9c:77:3a:97:52:9a:d7:d6:da:8d:98:08:
         a5:ba:51:97:af:8b:94:b4:32:df:e2:83:96:3a:f5:a4:68:fe:
         f0:52:4a:0c:29:a6:4c:e9:c4:91:bf:b0:3a:80:7d:cc:70:a1:
         e3:3d:7e:09:4b:3c:08:87:1c:67:3b:2a:89:7b:77:78:69:7f:
         e5:cb:2a:67:f8:53:4b:82:06:bf:b6:f5:4d:5f:f8:86:55:a1:
         21:00:93:77:1c:d5:b9:1e:15:cc:da:d5:36:3a:0d:a9:48:6a:
         a2:33:c6:f3:db:55:80:62:61:65:ea:9b:59:ac:5d:ff:af:e0:
         95:a4:6d:22:f5:71:cf:57:78:35:a4:78:49:13:ac:c8:a8:fe:
         99:43:be:d1:ec:19:b3:ca:35:0f:71:4d:83:a9:60:80:7d:39:
         c4:39:ee:57:65:1e:65:b1:6c:4d:6a:f3:c8:fd:39:89:cd:4e:
         8c:61:ed:af:5b:78:a6:af:1e:09:ac:fc:4d:e2:13:98:5c:37:
         6e:a0:a3:d9:b8:f4:99:25:f1:30:a4:61:bf:74:2e:e6:ef:53:
         e3:ed:07:de:7c:ba:49:11:9b:98:fe:dc:70:b2:2e:8f:5a:8a:
         93:c0:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:40 2026 by rpki-client