Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/69357C0E85DB11F1AE068C506DA30FBC.roa
File:                     69357C0E85DB11F1AE068C506DA30FBC.roa (raw, json)
Hash identifier:          m/IoJyQm5MAh9MWBVEQf7bLT74/Ycs7n7FF63CLDb48=
Subject key identifier:   33:5D:1E:44:37:16:F3:90:41:C1:57:EC:25:AB:D7:4E:20:41:41:C4
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       03B0
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/69357C0E85DB11F1AE068C506DA30FBC.roa
Signing time:             Wed 22 Jul 2026 14:41:23 +0000
ROA not before:           Wed 22 Jul 2026 14:41:23 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     214024
IP address blocks:        202.155.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944 (0x3b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Jul 22 14:41:23 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a60d693-1cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:21:17:d6:c6:2f:a8:7a:6d:53:64:8b:97:4c:
                    38:cb:0a:23:f1:31:d9:91:0f:f2:b3:b8:77:2b:92:
                    4e:bc:cb:39:1e:f9:9b:4e:c1:ec:7f:e8:59:86:8a:
                    28:39:fe:57:61:3c:d4:bb:73:16:37:05:d5:30:56:
                    7a:02:2f:54:75:c4:99:b0:ab:be:61:f0:42:82:a7:
                    97:b7:53:b7:e8:bd:38:8d:a6:ca:67:6e:5e:93:b4:
                    53:7d:f1:5e:49:36:a9:62:3c:f0:47:06:99:8e:82:
                    ca:3a:d4:9c:4a:57:d2:27:40:9e:6d:ba:2f:79:31:
                    00:ea:8c:1d:4d:0f:50:4d:bd:d6:b2:52:c4:35:5b:
                    1a:65:8b:3e:87:3d:08:06:29:45:b1:64:92:f9:fa:
                    fe:93:04:3d:24:6b:17:e3:35:83:8b:68:bc:89:57:
                    23:23:1a:27:44:74:03:13:08:38:58:5b:12:9f:e7:
                    e6:5a:dc:8d:68:fa:5a:c8:40:e3:8c:c5:2f:ad:cf:
                    95:a8:90:66:fb:62:8c:48:d0:9c:88:90:76:9c:20:
                    3e:82:b8:dc:2c:40:da:81:dc:47:d4:4f:24:b0:b2:
                    6d:ed:75:eb:bd:bb:53:45:d5:f7:70:9c:62:af:1e:
                    03:fc:93:1e:ae:52:0e:f8:3f:66:35:f6:0e:c8:ea:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5D:1E:44:37:16:F3:90:41:C1:57:EC:25:AB:D7:4E:20:41:41:C4
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/69357C0E85DB11F1AE068C506DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:7e:76:fa:99:ef:ff:3c:a4:63:3d:fc:7a:8a:c8:59:ad:4d:
         ec:b8:66:48:80:3d:aa:d1:0e:36:79:6f:c5:bc:00:2e:0a:ef:
         dd:4f:88:54:cd:30:d5:15:5f:0e:8c:5e:8e:83:d8:36:6a:51:
         ad:05:9e:85:bd:60:a8:30:77:2b:86:2c:03:52:5c:ba:23:4a:
         f7:c7:d0:4d:1d:48:f3:27:f2:12:38:10:c0:47:e6:ed:0e:52:
         7f:03:b8:76:40:6e:66:21:39:ae:95:97:dd:a3:7a:7a:f6:98:
         1c:98:32:81:bb:80:b6:f3:69:94:12:e4:52:75:4d:25:88:d9:
         2d:a9:67:f1:ba:31:67:3b:c5:d2:28:76:7c:9e:75:ad:e4:a3:
         4f:ca:34:24:d9:63:92:85:02:1b:51:a6:ef:75:55:35:5e:94:
         8a:34:13:5f:a4:c0:f8:5d:10:97:36:a5:95:c0:a5:6f:fc:57:
         2c:3b:d3:70:b8:bb:49:ac:03:50:ba:e3:ca:ea:ab:df:60:16:
         b7:96:ad:23:19:8f:29:71:49:a4:93:5b:a6:25:c9:3e:54:cb:
         86:ca:92:0d:a1:70:d1:e0:26:4b:58:3a:6a:35:59:77:c0:58:
         0d:c8:67:3e:4c:9c:9c:54:65:1a:fa:b5:81:45:fa:72:1b:3c:
         0c:b5:90:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:47 2026 by rpki-client