Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3E07A36C86F411F1BD8261F36211F970.roa
File:                     3E07A36C86F411F1BD8261F36211F970.roa (raw, json)
Hash identifier:          TIuSzOkJZZ1STSCzsNvjYhAuIp2zJdL8nW3yiJCKow0=
Subject key identifier:   09:2B:82:A0:CB:8B:D5:C7:BD:45:44:27:1D:30:CD:76:90:EA:9F:A8
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3D38
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3E07A36C86F411F1BD8261F36211F970.roa
Signing time:             Fri 24 Jul 2026 00:14:24 +0000
ROA not before:           Fri 24 Jul 2026 00:14:24 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     202036
IP address blocks:        49.128.222.0/24 maxlen: 24
                          112.196.199.0/24 maxlen: 24
                          112.196.215.0/24 maxlen: 24
                          124.66.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 00:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15672 (0x3d38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Jul 24 00:14:24 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a62ae60-d0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:43:86:07:34:b6:4c:e8:59:df:28:7e:37:50:
                    a7:d4:a8:cb:86:f7:f1:fe:c1:8e:a8:77:71:23:0a:
                    b6:e5:6d:f0:f3:f3:64:c0:4d:10:0b:d9:6f:97:8b:
                    f4:0a:a8:ae:33:12:fc:b5:85:bc:2f:3a:a6:8a:a2:
                    60:3a:53:41:dc:89:02:d4:fd:10:2c:41:bd:7a:89:
                    41:0d:d4:02:4a:1d:57:db:9f:a5:fb:63:f0:bf:72:
                    8b:5d:74:d7:73:84:cd:2c:7f:8b:40:90:35:7b:ea:
                    d0:ba:da:5e:76:f2:9e:be:84:ac:8d:16:02:d0:f8:
                    e0:b3:79:b0:a8:92:fa:34:85:7f:a3:25:57:39:8c:
                    4a:65:0e:86:0e:8c:84:21:6b:50:ac:08:46:68:14:
                    d0:97:21:fa:c8:e1:86:57:00:2f:48:ad:8d:ae:c2:
                    d5:88:cb:82:a8:ff:48:b1:0d:fc:6f:37:35:1f:3e:
                    a6:a3:e0:e0:97:b9:db:d3:7e:b8:3a:38:ba:42:66:
                    e3:87:a8:f9:0d:b4:14:c6:1f:aa:5e:e5:12:b0:91:
                    ed:ae:39:9a:da:f7:1a:15:86:cb:f6:ff:b7:a3:83:
                    71:18:7d:e0:d2:2d:e5:b5:63:0a:07:66:2f:81:56:
                    a4:29:fe:8b:26:be:bc:3c:95:87:24:db:dc:6b:99:
                    48:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2B:82:A0:CB:8B:D5:C7:BD:45:44:27:1D:30:CD:76:90:EA:9F:A8
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3E07A36C86F411F1BD8261F36211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.222.0/24
                  112.196.199.0/24
                  112.196.215.0/24
                  124.66.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:1a:fe:c7:51:6c:83:37:66:19:59:af:88:47:b7:26:27:25:
         34:51:5d:69:05:d2:6b:4b:e0:a6:a9:54:df:fb:94:4a:c3:52:
         5a:c8:51:15:74:09:3c:22:6d:37:e3:8b:79:58:27:ce:7a:13:
         61:ee:c4:9a:ec:9d:f1:41:5a:62:3f:5b:6e:ba:5d:92:6c:00:
         d0:25:ea:ce:72:fd:9b:56:99:ab:6e:c8:d1:5a:19:38:37:38:
         d5:c8:ba:df:9c:27:f1:94:41:fd:cf:7f:33:2c:ba:65:27:6b:
         6c:7d:c7:e5:a7:28:3f:d8:c4:13:39:be:86:54:31:12:cd:7e:
         6c:94:36:ef:41:29:99:e7:c4:2e:f8:a9:94:1b:54:c5:d8:d0:
         fb:13:50:2d:2c:76:6e:48:d0:c2:08:61:63:e1:7d:ba:a3:cf:
         45:9e:7f:f5:1e:23:e6:7a:de:f6:7e:76:56:1e:eb:a8:70:6d:
         73:2a:58:fa:e0:db:7d:14:2d:bf:1d:ba:85:f5:87:1d:21:1c:
         27:c4:10:ec:11:9a:b8:4b:dd:47:b3:44:77:1e:3a:3e:2e:10:
         56:37:ab:12:cd:6e:5c:85:e3:4b:d7:b7:4b:f0:05:0e:bd:f1:
         b7:f5:35:14:40:85:63:00:ed:65:2b:e0:cb:9d:4e:24:77:0e:
         9e:f2:d3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:39 2026 by rpki-client