Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/55493366013C11ED9864F33CC4F9AE02.roa
File:                     55493366013C11ED9864F33CC4F9AE02.roa (raw, json)
Hash identifier:          uBaw5Q6jikAq0eKkm9ajQdmiDr9wO4JgcYfCq8WV99U=
Subject key identifier:   B0:7D:C8:98:B9:48:56:04:39:06:F2:10:67:F7:22:1E:16:E5:49:E0
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       0A32
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/55493366013C11ED9864F33CC4F9AE02.roa
Signing time:             Wed 01 Jul 2026 09:44:39 +0000
ROA not before:           Wed 01 Jul 2026 09:44:39 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     135381
IP address blocks:        202.44.217.0/24 maxlen: 24
                          202.44.218.0/24 maxlen: 24
                          202.44.229.0/24 maxlen: 24
                          202.44.230.0/24 maxlen: 24
                          202.44.231.0/24 maxlen: 24
                          202.44.232.0/24 maxlen: 24
                          202.44.233.0/24 maxlen: 24
                          202.44.244.0/24 maxlen: 24
                          202.44.252.0/24 maxlen: 24
                          202.44.254.0/24 maxlen: 24
                          202.44.255.0/24 maxlen: 24
                          203.150.118.0/24 maxlen: 24
                          203.150.121.0/24 maxlen: 24
                          203.150.122.0/24 maxlen: 24
                          203.150.131.0/24 maxlen: 24
                          203.150.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2610 (0xa32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Jul  1 09:44:39 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a44e187-3ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:6b:e1:c2:34:2e:d4:88:1d:6c:b1:65:4a:
                    3d:9c:52:cc:5e:9e:75:b7:14:6f:13:93:85:36:9a:
                    ba:19:ed:ad:27:08:9d:e8:6a:0a:6f:ad:e0:18:ba:
                    c7:94:8a:f0:76:1f:f9:6b:f2:65:0d:6f:a2:58:a4:
                    e4:76:58:b6:15:cf:f6:be:1c:99:40:65:6c:a9:66:
                    d4:61:95:e0:c3:75:e3:15:3e:70:4c:5f:47:ea:a4:
                    93:01:fa:f9:5e:b6:1f:f0:b3:d6:4f:c3:49:d0:07:
                    c4:de:c3:e3:06:06:e7:be:dc:7c:c9:ad:61:e1:ba:
                    66:cb:ff:bd:ea:f3:80:09:cf:8e:2e:eb:c5:83:bb:
                    a9:62:2b:c2:36:ae:91:1b:1b:4c:1b:84:1a:e6:f0:
                    36:eb:cd:c2:e2:d7:ce:f0:bf:c8:49:d1:af:7b:90:
                    3e:e4:1f:83:f5:e1:9b:2c:bc:2e:85:c3:64:a4:ae:
                    05:67:51:21:1a:7c:13:6b:25:15:22:4f:56:6d:d4:
                    84:2e:72:54:19:40:2a:7e:b3:3b:33:a2:f6:00:4e:
                    39:2b:2f:3d:d8:a1:da:7a:5e:f0:c4:e3:f6:54:17:
                    82:b3:77:77:1c:d4:a9:c1:b2:3f:54:ad:9c:0a:81:
                    ac:54:19:37:84:bc:cb:2b:bc:f0:eb:fe:9f:df:93:
                    56:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7D:C8:98:B9:48:56:04:39:06:F2:10:67:F7:22:1E:16:E5:49:E0
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/55493366013C11ED9864F33CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.44.217.0-202.44.218.255
                  202.44.229.0-202.44.233.255
                  202.44.244.0/24
                  202.44.252.0/24
                  202.44.254.0/23
                  203.150.118.0/24
                  203.150.121.0-203.150.122.255
                  203.150.131.0/24
                  203.150.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:a7:d9:6b:36:7d:a4:57:d7:2f:58:f9:08:26:20:6b:93:13:
         13:62:2d:52:64:a4:9a:74:c4:ee:f6:77:42:7f:e6:1e:a4:55:
         b3:12:ef:e6:40:19:31:f2:56:ab:64:be:59:4e:f2:10:72:db:
         b0:a7:27:89:3f:d7:63:03:6f:6b:24:1a:e3:5d:4f:87:62:07:
         6b:f7:c3:33:5a:8d:07:40:18:21:23:36:01:bc:f9:3e:ad:bb:
         75:a9:c4:1d:c5:0e:f3:d7:ab:3a:4d:af:70:b4:a2:d5:83:fe:
         90:60:5e:f0:d0:48:5b:7d:ae:22:49:d1:3e:48:bc:a4:71:7b:
         56:09:1e:fe:8e:50:67:d0:b1:31:c7:57:a6:19:c6:38:2e:af:
         f4:90:b5:0c:cb:be:ff:8f:3b:71:76:94:94:f3:f4:bb:a9:56:
         38:6b:d8:a8:20:10:7b:92:a6:9e:a1:fe:f2:25:c9:54:bf:ad:
         66:c9:b6:07:91:ab:1a:dc:9f:ef:3e:0d:3f:32:44:21:50:c7:
         ae:2f:1b:ee:7f:33:a5:40:57:e7:e4:29:0a:9d:56:19:51:59:
         8f:3c:bd:ba:34:65:57:51:9f:33:e3:c2:f6:36:e4:21:b6:27:
         d2:36:40:f9:08:d6:11:7a:38:24:12:91:a8:20:f2:db:9f:2a:
         02:47:a5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:01 2026 by rpki-client