Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/A87058D8445111F196638493CB833773.roa
File:                     A87058D8445111F196638493CB833773.roa (raw, json)
Hash identifier:          hjmeDeK8OqpXBY0QHMz/cAiPa+eSBTe6PN1y5++7MO8=
Subject key identifier:   4D:FD:C7:B4:7F:D7:2D:32:B8:F1:76:3B:88:96:BF:A2:C5:B7:9F:A5
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       012B
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/A87058D8445111F196638493CB833773.roa
Signing time:             Thu 30 Apr 2026 05:01:33 +0000
ROA not before:           Thu 30 Apr 2026 05:01:33 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     18252
IP address blocks:        61.19.128.0/20 maxlen: 20
                          122.155.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Apr 30 05:01:33 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69f2e22d-1667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:de:be:e4:ee:99:75:40:22:6d:00:a8:b8:
                    fe:c2:45:72:d6:29:f3:be:e3:c4:fc:f5:08:c1:98:
                    90:02:d2:ff:25:bd:65:ec:e7:4e:25:c8:22:34:49:
                    b3:96:78:a9:51:c2:bd:3a:a8:cc:30:c1:45:9d:a7:
                    e5:51:dc:2c:53:b4:7f:05:ff:95:a0:90:a1:57:99:
                    50:08:74:9f:89:5f:22:a1:a3:5e:b2:0c:87:ce:11:
                    6b:a6:b3:27:cf:fb:78:97:72:41:ed:d1:00:c1:52:
                    0e:29:db:d3:01:3d:d0:fc:42:6e:68:1a:95:4a:43:
                    7d:80:de:ca:71:5e:4a:f0:58:ea:65:47:d4:4d:cb:
                    60:43:09:88:25:65:fe:7f:8c:ec:40:c3:10:26:67:
                    d5:4b:a3:ee:90:a2:e5:7f:62:45:85:93:f5:38:88:
                    d8:99:a2:32:4e:ff:66:ec:e7:55:79:e0:af:c8:19:
                    a6:36:b3:86:c7:10:ed:86:23:22:ee:de:11:18:be:
                    13:45:81:9d:dd:36:1d:8d:94:14:4e:7b:b6:33:d8:
                    d3:cc:81:4f:6c:dd:a2:8b:bf:00:6b:72:0b:5f:bb:
                    27:09:f3:cc:13:b7:95:72:ea:d2:d5:a5:c2:86:85:
                    2b:84:01:53:ee:cd:50:0e:38:8c:0c:d4:33:7c:c0:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FD:C7:B4:7F:D7:2D:32:B8:F1:76:3B:88:96:BF:A2:C5:B7:9F:A5
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/A87058D8445111F196638493CB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.19.128.0/20
                  122.155.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:28:e8:1e:d5:e5:b8:e2:ae:6d:2f:c2:97:d2:73:0e:5e:90:
         1a:9e:fe:fa:1d:42:bb:9a:87:71:49:d2:97:a3:12:bc:e5:b0:
         50:29:77:0f:2e:a4:f6:e9:f5:d2:c4:94:65:e5:87:4a:9c:e4:
         8a:9e:30:a1:5c:d9:c7:15:44:27:c7:96:6c:bb:15:95:55:68:
         73:45:cb:cd:67:fb:b1:b2:ff:6b:35:40:c3:3a:c4:74:7c:f7:
         be:60:51:e8:ae:9d:ba:af:78:ca:d6:8a:0e:43:56:07:da:6e:
         d0:01:41:55:f4:26:4b:28:30:28:94:e3:63:73:00:bc:10:3f:
         0b:23:5a:29:9f:c9:1e:d0:10:f9:44:6f:3c:aa:19:30:c9:24:
         26:9b:6c:af:bb:45:6d:5a:82:3a:c6:c9:ef:41:ed:e9:52:41:
         57:a1:d8:55:cd:75:ca:0e:69:14:18:78:be:da:f5:66:99:7d:
         5d:b9:f1:91:61:db:c7:f6:e2:b5:23:75:5f:07:af:6a:af:bc:
         a1:c2:e3:e9:65:54:37:50:94:90:38:b2:e2:e6:3b:a2:69:0a:
         f8:ba:09:06:f8:28:90:00:3f:10:18:4a:7b:38:60:ef:05:50:
         8e:49:42:a3:05:6f:af:b4:e6:41:2b:39:5f:e1:8a:4e:4a:3f:
         ce:80:f0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:38 2026 by rpki-client