Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3C4A4EE777E11EFB3F75352C4F9AE02.roa
File:                     E3C4A4EE777E11EFB3F75352C4F9AE02.roa (raw, json)
Hash identifier:          50bHfxKSpda4xd/0+Y70XiROBlQW8ceJ16h3JpGhCFI=
Subject key identifier:   85:17:69:FC:8E:A5:52:DE:8E:FB:30:7E:45:B3:76:46:D1:DB:8E:BD
Certificate issuer:       /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial:       0194
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3C4A4EE777E11EFB3F75352C4F9AE02.roa
Signing time:             Tue 07 Jul 2026 06:32:23 +0000
ROA not before:           Tue 07 Jul 2026 06:32:23 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     63997
IP address blocks:        45.254.38.0/24 maxlen: 24
                          2405:a280:33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
                          rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
        Validity
            Not Before: Jul  7 06:32:23 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4c9d77-ecd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:35:69:3d:2f:2f:ba:be:c6:10:91:b5:33:11:
                    6d:e4:27:eb:5d:41:ea:c2:2d:7a:c0:84:af:25:bb:
                    d4:83:4f:7e:54:ac:ea:fa:5a:0e:89:e0:be:4f:1d:
                    3d:7b:b9:2b:03:12:97:34:3f:2d:64:b0:71:8c:14:
                    48:53:f2:6b:c6:1b:09:cb:87:c0:46:d9:87:fc:34:
                    58:86:70:6d:4e:f2:1b:10:f0:5a:f2:c7:c5:f4:0c:
                    9c:12:77:f7:7f:2f:21:17:ea:6d:db:31:51:3f:3e:
                    05:85:30:01:d9:c9:9d:ed:07:ef:8a:25:90:82:d4:
                    f8:41:f0:ab:7f:78:62:5f:94:13:75:68:a6:26:20:
                    ea:aa:08:dd:dd:de:a8:3c:5e:f7:25:71:df:e1:16:
                    27:2c:4f:cd:f3:db:2f:97:b9:8c:26:e9:9b:06:cc:
                    ba:79:0f:d4:c7:51:79:bb:c8:ce:6f:f4:73:ee:63:
                    d3:5c:df:0a:d8:1b:64:5b:d7:1c:9f:34:fc:14:ee:
                    cd:56:62:8e:ec:58:fe:b6:7a:2d:57:2b:7e:b1:e4:
                    17:48:97:98:a2:d4:53:cd:13:9b:b6:c2:43:6e:fd:
                    f5:8e:54:43:92:eb:0a:c7:f7:29:ee:b7:6e:98:7b:
                    f7:9f:ed:70:64:52:a7:31:38:98:fd:94:c4:cf:ff:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:17:69:FC:8E:A5:52:DE:8E:FB:30:7E:45:B3:76:46:D1:DB:8E:BD
            X509v3 Authority Key Identifier:
                keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3C4A4EE777E11EFB3F75352C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.254.38.0/24
                IPv6:
                  2405:a280:33::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:87:8a:e4:b0:85:51:79:71:cb:68:5f:ab:19:39:95:7b:80:
         29:06:07:5a:f9:56:7e:2d:ed:ee:95:fb:c8:9c:b7:9c:e0:0a:
         f5:58:2b:46:60:5b:e6:c1:2f:71:b5:5a:e3:f5:ea:c4:a9:07:
         07:fe:56:d9:a0:7e:37:ad:ea:e4:d4:91:b4:a2:20:e1:1a:61:
         11:e3:84:44:55:3a:50:10:a6:3a:8c:86:4f:60:e5:3b:80:3d:
         76:ba:88:16:8d:85:55:86:a2:df:01:2c:dc:ff:15:25:26:4f:
         ab:11:64:10:12:88:37:46:00:ad:0e:01:46:8f:14:31:9b:0e:
         4f:a0:e4:61:23:4a:06:74:4c:a8:98:eb:09:80:ca:25:78:7b:
         38:2c:fe:e4:86:ba:16:e1:18:41:eb:85:c2:a8:00:3c:3d:5f:
         90:ae:dd:46:84:c1:a5:06:35:2f:a2:bb:16:98:83:fe:f6:11:
         8c:bf:fb:0f:e0:a6:01:02:ed:98:4f:35:f9:89:a8:1f:ca:3e:
         a9:c9:cf:10:7b:c6:ad:a6:31:db:fe:3a:2d:ed:6f:96:f1:0e:
         7b:4c:06:40:5b:c2:c3:7e:0b:d1:17:c8:4a:c3:b6:56:7f:1d:
         41:e3:21:64:f4:40:17:bc:48:78:8e:2e:be:76:ac:70:ec:b8:
         c7:4a:43:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:31:28 2026 by rpki-client