Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/92F6F8D0866A11F19ACF0A6359A30FBC.roa
File:                     92F6F8D0866A11F19ACF0A6359A30FBC.roa (raw, json)
Hash identifier:          OxQYq5Pl6LLzBR7Hlyn/TUzcpXJUxM8IGIxor8rYXrQ=
Subject key identifier:   E9:79:26:EE:75:2A:19:E5:8D:1D:8D:C3:0F:2A:A1:78:D3:0A:A5:0E
Certificate issuer:       /CN=A912AF78/serialNumber=A02FA1377E8973D834E8999212EC2C570960DFCD
Certificate serial:       14
Authority key identifier: A0:2F:A1:37:7E:89:73:D8:34:E8:99:92:12:EC:2C:57:09:60:DF:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC-hN36Jc9g06JmSEuwsVwlg380.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/92F6F8D0866A11F19ACF0A6359A30FBC.roa
Signing time:             Thu 23 Jul 2026 07:46:12 +0000
ROA not before:           Thu 23 Jul 2026 07:46:12 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133880
IP address blocks:        45.125.228.0/24 maxlen: 24
                          45.125.229.0/24 maxlen: 24
                          45.125.230.0/24 maxlen: 24
                          45.125.231.0/24 maxlen: 24
                          103.44.216.0/24 maxlen: 24
                          103.44.217.0/24 maxlen: 24
                          103.44.218.0/24 maxlen: 24
                          103.44.219.0/24 maxlen: 24
                          2401:d880::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.crl
                          rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC-hN36Jc9g06JmSEuwsVwlg380.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AF78, serialNumber=A02FA1377E8973D834E8999212EC2C570960DFCD
        Validity
            Not Before: Jul 23 07:46:12 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a61c6c4-252c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:be:ae:8d:81:a6:fd:9f:81:4b:d8:c4:17:aa:
                    19:14:60:c2:ec:a4:23:7b:93:60:b3:7b:80:00:c1:
                    73:e3:28:8e:61:61:e1:38:e3:43:9d:1a:5e:1a:d5:
                    43:c5:41:26:df:fd:c8:18:a4:85:3e:b2:89:dd:22:
                    cc:eb:4e:61:1d:36:74:6b:3b:7a:ae:cb:62:2d:89:
                    de:44:be:ea:d4:01:45:7f:3c:0b:0d:d6:f5:14:80:
                    15:f9:6b:22:83:b4:3c:d1:dc:47:e4:da:ce:17:8d:
                    2a:85:6c:5a:4f:97:34:0b:4a:71:eb:b7:74:1b:ee:
                    b0:c0:be:16:23:45:fe:91:94:e5:86:01:96:a3:97:
                    04:22:c2:78:fe:58:91:c2:a1:04:95:9c:fb:17:f7:
                    34:7c:6e:e7:a0:bd:50:c2:03:33:94:9f:61:ce:50:
                    10:08:1e:29:8a:e3:f2:22:b4:62:ba:e2:cd:01:e3:
                    5e:06:b7:f1:9c:a2:fa:e4:f1:64:d2:f0:c4:92:59:
                    7e:95:a6:ea:e2:47:5f:7f:dd:3a:f6:33:28:ce:1d:
                    f0:ae:a2:e6:c1:17:a5:cb:fd:c9:62:57:31:34:f8:
                    22:02:d7:3d:31:3c:7e:e4:79:74:4a:df:e6:fa:d3:
                    3c:ff:fe:11:7e:1b:6f:07:da:a3:48:cc:ba:60:b7:
                    de:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:79:26:EE:75:2A:19:E5:8D:1D:8D:C3:0F:2A:A1:78:D3:0A:A5:0E
            X509v3 Authority Key Identifier:
                keyid:A0:2F:A1:37:7E:89:73:D8:34:E8:99:92:12:EC:2C:57:09:60:DF:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC-hN36Jc9g06JmSEuwsVwlg380.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/92F6F8D0866A11F19ACF0A6359A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.125.228.0/22
                  103.44.216.0/22
                IPv6:
                  2401:d880::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:1d:3d:7c:b6:ed:ad:a3:da:62:0c:a7:61:80:ce:b0:e8:0f:
         4c:8e:1c:98:f1:b7:a3:45:b3:f7:c5:ea:04:70:d7:75:06:93:
         13:40:da:61:e7:75:40:12:73:bc:6f:43:b9:ee:5f:97:8b:29:
         8c:ad:25:dd:a2:45:67:8e:03:7c:f8:ce:82:4b:85:bb:b5:ba:
         db:33:21:a7:13:d3:07:72:40:39:cb:ae:1a:82:71:9a:e7:9b:
         7c:91:4d:f3:eb:af:64:13:34:43:99:78:98:4d:f8:a9:aa:42:
         f4:57:2a:68:63:2d:f4:57:ef:e6:b9:af:53:10:7a:12:13:22:
         d9:6f:0b:cc:82:67:ee:36:14:90:26:73:7a:c8:2b:d4:26:68:
         40:48:d2:bb:89:6e:d9:31:55:1d:12:3c:94:c3:0e:b6:0a:43:
         3e:7b:f5:42:6f:03:2d:c2:a8:49:8b:ee:13:7c:d1:6c:fb:24:
         9a:dd:c1:3b:15:bc:85:78:cf:2d:90:11:d6:34:c0:8f:97:1f:
         06:21:43:7b:73:4d:e4:98:a8:14:b7:53:6a:51:d2:2d:c9:51:
         bc:4b:e9:2a:30:bb:9a:29:85:cd:e2:59:21:e8:e2:0c:ed:0a:
         6e:79:d0:81:7e:6d:fa:fc:76:7f:50:57:0b:ac:d0:9e:16:89:
         aa:c3:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:07:13 2026 by rpki-client