Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/7E099DB21C5611EBB91D2683C4F9AE02.roa
File:                     7E099DB21C5611EBB91D2683C4F9AE02.roa (raw, json)
Hash identifier:          U6Px3+2UpSkVxzu/Qr8RX6ggWXcyYRot1wBwG96ExR8=
Subject key identifier:   06:4E:60:41:06:86:37:63:1E:90:73:4B:A3:8E:D6:E6:37:C2:F9:6E
Certificate issuer:       /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial:       087F
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/7E099DB21C5611EBB91D2683C4F9AE02.roa
Signing time:             Wed 08 Jul 2026 22:23:23 +0000
ROA not before:           Wed 08 Jul 2026 22:23:23 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     45785
IP address blocks:        116.193.157.0/24 maxlen: 24
                          183.78.168.0/24 maxlen: 24
                          183.78.169.0/24 maxlen: 24
                          183.78.170.0/24 maxlen: 24
                          183.78.171.0/24 maxlen: 24
                          202.43.100.0/24 maxlen: 24
                          202.43.101.0/24 maxlen: 24
                          202.43.102.0/24 maxlen: 24
                          202.43.103.0/24 maxlen: 24
                          210.1.224.0/21 maxlen: 21
                          210.1.224.0/22 maxlen: 22
                          210.1.224.0/24 maxlen: 24
                          210.1.225.0/24 maxlen: 24
                          210.1.226.0/24 maxlen: 24
                          210.1.227.0/24 maxlen: 24
                          210.1.228.0/22 maxlen: 22
                          210.1.228.0/24 maxlen: 24
                          210.1.229.0/24 maxlen: 24
                          210.1.230.0/24 maxlen: 24
                          210.1.231.0/24 maxlen: 24
                          2401:c400::/32 maxlen: 32
                          2401:c400:1000::/48 maxlen: 48
                          2401:c400:2000::/48 maxlen: 48
                          2401:c400:3000::/48 maxlen: 48
                          2401:c400:4000::/48 maxlen: 48
                          2401:c400:5000::/48 maxlen: 48
                          2401:c400:6000::/48 maxlen: 48
                          2401:c400:7000::/48 maxlen: 48
                          2401:c400:8000::/48 maxlen: 48
                          2401:c400:9000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
                          rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175 (0x87f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
        Validity
            Not Before: Jul  8 22:23:23 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4ecddb-50a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:a0:2a:c6:af:de:d2:1b:21:f7:ce:c0:30:
                    a5:ae:53:52:42:92:b0:c2:44:97:8f:22:1b:50:d6:
                    8c:e2:29:5d:e6:2c:ac:8c:e2:ba:d6:84:da:5a:e3:
                    3b:cf:16:a7:0a:45:68:8f:b4:77:e3:a0:21:c8:91:
                    6c:d6:b3:1e:db:60:ed:b1:43:46:ad:85:05:87:79:
                    af:dd:1a:6a:ca:74:e6:d9:ae:48:28:aa:61:12:d2:
                    8f:00:71:86:ab:e2:07:24:b3:54:3b:f6:d2:2b:ea:
                    26:81:43:28:f8:3d:09:29:61:e1:84:5f:f2:1b:49:
                    19:b6:88:19:d9:62:ef:aa:fe:6a:94:05:bc:a5:9b:
                    ed:de:5d:fc:2a:81:cf:9f:51:a2:71:99:be:1a:b9:
                    0b:80:5d:20:a5:bc:35:35:d6:39:13:f6:45:f6:93:
                    cc:1c:b9:bf:b1:6d:15:b0:69:9b:f2:2d:63:e9:52:
                    08:ae:99:6c:ac:9b:da:08:8a:99:72:d3:cc:eb:40:
                    aa:d4:6a:62:d2:dc:59:97:68:87:44:6a:bc:45:71:
                    10:c4:fb:59:54:3e:12:24:26:89:50:1a:62:db:dc:
                    85:82:19:f3:54:93:e9:37:66:b3:45:9e:84:1c:5b:
                    b2:82:78:96:a2:09:49:a3:a3:7f:4b:c4:18:75:8c:
                    33:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4E:60:41:06:86:37:63:1E:90:73:4B:A3:8E:D6:E6:37:C2:F9:6E
            X509v3 Authority Key Identifier:
                keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/7E099DB21C5611EBB91D2683C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.193.157.0/24
                  183.78.168.0/22
                  202.43.100.0/22
                  210.1.224.0/21
                IPv6:
                  2401:c400::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:c9:84:ba:02:38:49:04:d2:04:6f:53:f8:cc:11:86:2c:7c:
         b6:5a:cd:d4:68:c1:85:ad:3a:0d:b5:5e:41:8b:69:17:40:86:
         41:73:31:30:ac:74:96:d1:4a:8d:54:86:f5:65:b9:90:ae:43:
         c0:11:8b:72:dd:ec:27:2e:bf:bb:c6:eb:e5:ad:43:6c:25:96:
         eb:82:99:8e:9a:13:e9:2b:70:76:ca:9c:ad:cf:45:94:f1:da:
         13:e6:4d:ef:70:92:13:00:df:af:96:49:29:31:e9:8e:97:1a:
         a9:54:19:4b:01:2f:81:70:44:34:fd:d5:87:e0:b5:62:be:70:
         95:ba:2b:08:bd:3c:29:b2:5a:f4:f3:2e:ab:15:ba:4e:69:70:
         ce:74:e9:e8:be:60:db:29:0e:5a:7e:1a:aa:e5:54:b8:00:bb:
         0a:b0:f1:ad:49:24:ff:a3:46:2f:bb:9e:a1:f8:c9:c2:5c:81:
         4d:3e:0b:2c:94:a6:c5:99:50:38:8d:25:9b:a1:5e:ea:b4:1b:
         7a:03:10:c0:14:4f:fb:ec:ab:ec:be:a8:81:43:d8:57:3b:0f:
         e3:e5:f5:08:9c:35:0e:da:98:f4:a2:79:f6:96:31:63:83:28:
         ba:a4:db:39:23:d4:a1:50:b2:ce:a4:d9:dd:bd:e1:cb:85:c7:
         7c:7a:af:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:30:12 2026 by rpki-client