Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/46C3344E346611F0AF16091DC4F9AE02.roa
File:                     46C3344E346611F0AF16091DC4F9AE02.roa (raw, json)
Hash identifier:          uxsjY8RnGTGObugTJ84lDm+Fi0D1aslw+PvVlD355NE=
Subject key identifier:   8D:23:C8:8A:BB:28:B8:B2:C5:C6:71:A8:94:35:73:E9:4C:DB:11:E2
Certificate issuer:       /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial:       0333
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/46C3344E346611F0AF16091DC4F9AE02.roa
Signing time:             Sat 31 Oct 2026 01:48:15 +0000
ROA not before:           Sat 31 Oct 2026 01:48:15 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     26337
IP address blocks:        65.254.64.0/19 maxlen: 24
                          66.116.128.0/18 maxlen: 24
                          66.116.192.0/18 maxlen: 24
                          216.10.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
                          rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 00:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819 (0x333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
        Validity
            Not Before: Oct 31 01:48:15 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ae548df-7de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:f7:db:8e:24:cb:81:80:3f:dc:d2:23:e7:
                    4f:6b:04:62:ae:26:d2:b6:e5:4f:69:9d:5d:62:0c:
                    95:05:f7:6f:56:01:fd:6b:a1:7b:25:60:b0:9c:e9:
                    00:42:ca:69:b8:cc:05:30:b3:a9:39:0f:a5:ef:1a:
                    b5:dc:2d:66:02:1b:66:a8:9e:17:8c:7d:3f:a7:3a:
                    32:a1:0d:1d:6a:96:71:d0:0b:bc:06:d8:f5:b6:03:
                    6b:2d:90:d8:d5:58:8f:14:64:e8:7b:8f:19:ad:eb:
                    40:ec:d4:e5:d9:a7:b2:b3:e0:a1:32:4c:16:1c:73:
                    fb:e3:dd:98:9b:3e:01:27:ac:43:fc:93:9b:e6:69:
                    09:48:84:a6:32:7f:92:47:6d:17:a8:46:7f:63:94:
                    0e:05:14:0d:20:50:38:23:f3:bf:29:79:c6:ab:5d:
                    df:ee:e6:85:0f:42:72:b2:0a:26:52:7f:47:0c:ad:
                    4b:a1:aa:df:a1:f1:46:0a:ed:0e:e3:d7:a9:f8:6b:
                    e0:9a:f9:b5:9c:26:e5:a3:b9:d3:1b:61:c6:fe:c0:
                    c4:ec:85:a6:29:08:e3:17:64:80:3a:12:22:80:88:
                    7e:ab:f4:c6:9d:b5:9a:d9:2d:6c:21:76:f2:ac:e3:
                    6b:de:96:1e:c6:d0:cf:ea:25:ec:e6:d5:41:9c:9e:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:23:C8:8A:BB:28:B8:B2:C5:C6:71:A8:94:35:73:E9:4C:DB:11:E2
            X509v3 Authority Key Identifier:
                keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/46C3344E346611F0AF16091DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.64.0/19
                  66.116.128.0/17
                  216.10.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:2a:6e:66:43:41:33:63:7b:81:f6:6a:2a:29:fd:93:4b:df:
         bb:c5:73:b2:60:b5:93:54:40:48:b0:f1:e3:88:53:ca:72:04:
         9f:0a:e1:e0:6f:07:41:4b:16:f1:51:98:25:bf:f8:aa:af:83:
         98:f9:3d:67:56:83:38:07:27:03:d1:68:90:cd:ef:8b:c9:6a:
         96:f2:90:e3:43:ea:3c:e5:0b:b7:90:b0:ef:10:0f:69:0c:06:
         2a:b1:50:e8:f8:dc:7c:ff:21:f3:95:8d:ec:fa:f4:89:18:b6:
         a9:9b:69:8b:2e:b5:35:28:64:ce:85:00:14:16:76:8c:a5:3f:
         3e:71:18:78:8b:6c:ab:4c:ac:43:1e:4e:78:a0:95:fb:67:c0:
         ac:87:ce:0b:0a:36:dd:91:75:61:12:94:11:81:52:6a:71:e8:
         97:1e:49:4a:31:88:73:c4:f5:ca:4d:d7:94:f2:da:b1:2f:97:
         a2:b4:98:4b:7a:87:4b:ce:e6:f4:81:29:ef:ca:ca:04:61:46:
         9f:33:15:7f:3c:16:06:c2:bb:49:60:4b:f8:09:fb:06:db:40:
         e6:37:24:8a:a6:02:c6:4f:9e:5b:e0:e8:bf:53:1c:b3:6f:f2:
         ef:e0:d3:e3:34:8a:9e:8d:55:00:18:27:72:a8:87:d9:e6:5c:
         bc:19:f2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:51:34 2026 by rpki-client