Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A17C3508168911EFBF38F580C4F9AE02.roa
File:                     A17C3508168911EFBF38F580C4F9AE02.roa (raw, json)
Hash identifier:          virvE8MNeacbpPBupuEDzS3TVIUvnhiLbybl98L+CAc=
Subject key identifier:   E4:80:25:C2:D5:B3:F9:12:7B:54:74:B9:97:72:0A:97:57:F5:A4:C0
Certificate issuer:       /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial:       0205
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A17C3508168911EFBF38F580C4F9AE02.roa
Signing time:             Tue 23 Jun 2026 04:33:23 +0000
ROA not before:           Tue 23 Jun 2026 04:33:23 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     400619
IP address blocks:        14.192.4.0/22 maxlen: 22
                          14.192.4.0/23 maxlen: 24
                          14.192.6.0/23 maxlen: 24
                          43.224.224.0/22 maxlen: 24
                          103.215.76.0/24 maxlen: 24
                          103.215.77.0/24 maxlen: 24
                          103.215.78.0/24 maxlen: 24
                          103.215.79.0/24 maxlen: 24
                          116.213.40.0/22 maxlen: 24
                          203.91.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
        Validity
            Not Before: Jun 23 04:33:23 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a3a0c93-e6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3a:04:bd:98:97:69:53:ac:b2:d5:5e:4a:b3:
                    1a:10:33:9b:bc:30:f4:6a:f9:0f:c2:3f:da:39:3f:
                    13:71:ca:61:c5:12:07:0b:f7:69:aa:bc:a1:69:6d:
                    3b:19:72:ae:41:ae:a4:b0:13:be:a7:61:29:b2:73:
                    16:b5:00:5a:a7:66:e8:e9:cd:f6:76:d5:2e:a9:46:
                    b9:fc:10:a3:b3:98:b1:12:37:2d:25:9d:48:aa:05:
                    43:52:d0:00:ad:bb:8e:41:0a:06:f4:6b:8b:b0:b4:
                    5e:a9:c8:88:0d:8a:dd:71:66:0a:3b:71:bd:02:fd:
                    9d:8f:58:6c:4b:ad:b1:a4:14:bf:17:1d:02:54:9b:
                    34:9f:57:02:4a:31:06:ec:a4:92:03:77:36:b4:28:
                    8c:55:7b:a0:1f:20:5f:30:d6:dc:3b:fa:14:a8:18:
                    93:39:07:3f:43:67:46:18:1e:5c:8c:bd:26:9e:27:
                    8b:15:92:aa:b6:ed:c4:f6:8a:3e:c1:6e:e4:a6:57:
                    e5:64:cf:5a:16:56:2b:51:bb:82:ec:a9:3b:76:fb:
                    0d:80:83:26:86:6f:8f:bd:f2:60:4c:2e:05:39:55:
                    2d:64:39:bc:51:f0:5b:31:12:88:fd:10:f9:ca:1a:
                    99:41:24:9f:1e:51:96:fa:ac:0a:c8:23:1b:76:3d:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:80:25:C2:D5:B3:F9:12:7B:54:74:B9:97:72:0A:97:57:F5:A4:C0
            X509v3 Authority Key Identifier:
                keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A17C3508168911EFBF38F580C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.4.0/22
                  43.224.224.0/22
                  103.215.76.0/22
                  116.213.40.0/22
                  203.91.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:e7:ee:16:bd:b8:67:7e:38:a0:96:bc:27:41:b4:3e:79:27:
         9d:5b:b0:af:7f:4f:e2:b8:0f:54:86:a2:5c:63:3d:8b:5f:7f:
         87:23:de:f7:b5:d4:1c:37:6b:af:9a:49:df:2d:69:90:f4:ff:
         13:2a:59:8c:fb:8f:86:a3:06:37:04:a8:e5:d1:86:6f:7a:1e:
         2e:26:22:4c:c7:a5:17:9c:44:71:e1:56:ba:0a:e1:4a:10:76:
         c6:db:52:49:0f:b8:5a:95:d6:5c:82:b4:90:2a:14:68:70:a8:
         c2:04:43:33:ce:ef:ad:14:ed:02:fe:fd:24:89:a8:43:28:41:
         ad:f7:1b:d6:92:28:89:62:b6:e4:00:11:aa:f1:af:50:3d:69:
         6e:34:6e:eb:bd:24:5e:95:46:dc:b7:eb:8f:f0:ed:32:5e:65:
         54:84:8a:e8:fb:3e:f5:9e:23:3e:ba:b1:8e:d2:6d:51:c8:64:
         9e:c6:07:cb:d0:cd:18:aa:55:cf:36:5d:be:5e:f3:bd:49:60:
         c1:69:a3:54:fc:92:9e:2e:0e:64:25:be:1c:45:7d:0a:a8:8c:
         62:63:b5:21:5d:b9:a4:98:5a:8a:84:7e:20:6d:10:6a:e5:45:
         42:e3:fb:74:01:42:56:c2:9a:99:34:ba:f0:89:c4:56:bf:04:
         ee:e2:a0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:43:42 2026 by rpki-client