Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/830A87FCD49511F0ACA42142C4F9AE02.roa
File:                     830A87FCD49511F0ACA42142C4F9AE02.roa (raw, json)
Hash identifier:          bsTrUkvUeF8H9NKumrsoLZyYLYi0L/VLYuWrA6AX0Gw=
Subject key identifier:   FA:5A:5D:9D:79:96:EE:EA:BB:7F:14:40:CB:9C:B0:50:20:26:10:40
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3D2F
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/830A87FCD49511F0ACA42142C4F9AE02.roa
Signing time:             Wed 22 Jul 2026 08:26:22 +0000
ROA not before:           Wed 22 Jul 2026 08:26:22 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     401783
IP address blocks:        49.128.215.0/24 maxlen: 24
                          101.53.86.0/24 maxlen: 24
                          112.196.212.0/24 maxlen: 24
                          124.66.222.0/24 maxlen: 24
                          182.237.53.0/24 maxlen: 24
                          182.237.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 00:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15663 (0x3d2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Jul 22 08:26:22 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a607eae-2b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ec:65:7c:3f:5f:71:4e:3d:8b:5b:df:ef:79:
                    f4:bd:ac:8b:88:05:4d:01:f7:e9:e3:55:d1:5b:48:
                    fb:ea:66:06:92:36:8b:e9:dd:cc:6f:18:32:4c:c8:
                    b0:3f:b2:e1:e6:dd:85:61:07:db:bd:0e:b3:52:09:
                    7e:83:7f:92:0f:8d:2e:c3:d0:53:48:cb:c9:67:75:
                    d2:23:53:da:6d:6a:ae:fa:0c:21:08:b8:24:3a:cb:
                    a1:8c:92:e6:94:a2:92:c2:a0:fe:a8:d3:77:e4:cf:
                    5d:2e:0f:33:16:88:d7:46:4e:4c:df:81:ce:1f:54:
                    70:c3:b4:3e:d8:dc:af:cb:55:85:45:e8:3b:98:1f:
                    1f:b5:1d:6e:a7:e9:c4:51:53:0c:dc:68:b8:cd:9c:
                    96:1d:dd:53:86:9f:7e:82:8a:23:ce:a2:d2:9d:a6:
                    f7:cb:02:12:c7:e4:da:f7:cf:c2:09:8c:66:9f:25:
                    53:4b:e6:8a:1f:03:51:c4:dc:38:3c:b7:86:ec:53:
                    6c:fd:0c:a4:ef:f0:a9:08:fe:6f:48:08:30:f6:28:
                    6c:49:9c:93:f2:50:45:5e:a5:3c:ad:a1:6c:67:64:
                    b8:88:c6:10:96:96:fc:04:57:c7:a3:92:48:27:e0:
                    8b:9f:3f:f7:95:46:26:f4:26:03:e5:b3:77:8c:49:
                    30:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5A:5D:9D:79:96:EE:EA:BB:7F:14:40:CB:9C:B0:50:20:26:10:40
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/830A87FCD49511F0ACA42142C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.215.0/24
                  101.53.86.0/24
                  112.196.212.0/24
                  124.66.222.0/24
                  182.237.53.0/24
                  182.237.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:6b:86:64:3b:1e:39:4b:08:bf:ea:71:89:c7:0c:d9:63:53:
         4b:90:cc:0e:da:bb:bd:19:58:77:0d:6d:c0:ea:bc:49:80:a9:
         44:fa:19:41:b7:b3:eb:7f:a8:97:e4:17:ee:1e:11:6b:db:26:
         30:e3:17:7c:d6:13:03:dd:4a:a5:f6:cf:0f:9a:43:eb:a1:c0:
         56:18:11:5a:ef:a4:8d:75:57:7e:d4:1f:45:f9:4a:eb:8b:7b:
         68:cb:cc:c7:82:4d:fe:7f:d7:99:69:19:cb:af:93:17:ae:d6:
         4a:ec:98:fa:6a:06:b9:d6:38:a1:78:c6:cd:18:a7:22:34:65:
         71:02:1a:eb:66:3b:42:21:70:88:a4:39:20:c6:66:3f:d2:a4:
         25:e4:d9:d9:5d:b6:90:48:d2:73:61:2a:6d:45:85:12:4c:a6:
         95:4b:21:fc:10:92:09:ad:93:d4:9b:08:4d:87:95:32:bc:89:
         ad:f3:3b:31:31:11:28:b4:36:a0:37:2a:20:cb:9d:a7:5e:45:
         6e:c4:5d:d6:29:0d:b3:0e:27:56:48:1b:1f:9c:4a:c3:a7:43:
         c5:e0:fe:00:47:1b:0f:49:67:6c:d6:7a:ec:a2:1a:21:21:ba:
         32:ca:fa:20:a5:9d:d5:b3:b2:db:ea:90:a1:9e:10:ff:e5:5a:
         02:79:51:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:08 2026 by rpki-client