Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/82A6D4C4373711F0B4C22F6AC4F9AE02.roa
File:                     82A6D4C4373711F0B4C22F6AC4F9AE02.roa (raw, json)
Hash identifier:          oxq0hDitIG6KO5iWppkyeKZ9Q4lEP8Z7bY9XUQYAjLE=
Subject key identifier:   6B:63:8D:F4:6C:05:94:8A:A3:68:66:98:77:A9:87:7D:76:B4:13:0C
Certificate issuer:       /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial:       0332
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/82A6D4C4373711F0B4C22F6AC4F9AE02.roa
Signing time:             Sat 31 Oct 2026 01:48:13 +0000
ROA not before:           Sat 31 Oct 2026 01:48:13 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     198949
IP address blocks:        65.254.64.0/19 maxlen: 24
                          66.116.128.0/18 maxlen: 24
                          66.116.192.0/18 maxlen: 24
                          216.10.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
                          rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 00:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 818 (0x332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
        Validity
            Not Before: Oct 31 01:48:13 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ae548dd-89f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:3b:df:b9:d1:3d:bd:7e:0d:df:0a:99:90:
                    67:08:11:79:ee:9d:83:c7:f9:aa:98:7d:5c:42:f7:
                    53:8f:32:d7:6d:4b:d9:6a:d2:56:14:35:ce:c8:cb:
                    e8:c1:a1:e5:9e:0b:7d:9f:f3:d9:28:a9:f9:58:35:
                    94:7e:01:ef:82:e4:09:a2:5a:16:67:91:2b:21:71:
                    c1:c1:b2:1e:ed:01:45:6a:72:86:5e:6d:7a:4d:2b:
                    49:21:6b:65:8f:c5:84:a3:1c:08:c4:bb:f6:b5:56:
                    dd:c0:85:5e:f0:de:33:88:39:10:a7:94:e0:9e:3a:
                    3e:d5:07:8b:c8:7b:a9:8e:68:b6:5e:02:ec:b9:05:
                    ca:0d:2b:3f:cb:57:9e:62:f8:70:40:8b:2a:5a:3e:
                    6f:35:07:db:5f:81:b1:d9:05:8c:29:cb:b3:11:e0:
                    2f:b2:31:cb:0c:7c:63:a7:e3:cc:3a:10:8b:1f:a9:
                    c9:a6:2d:46:cf:bc:90:df:fe:db:8b:55:1a:20:80:
                    83:1d:e4:03:42:59:1c:25:5a:07:02:70:fa:66:e5:
                    12:e0:85:07:ac:f0:de:0f:33:fa:52:05:8e:25:aa:
                    46:cf:d4:67:e4:c7:0f:7b:fe:3b:79:8d:1e:bc:42:
                    a9:25:76:47:60:cf:23:55:76:dc:29:d1:de:e3:69:
                    3b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:63:8D:F4:6C:05:94:8A:A3:68:66:98:77:A9:87:7D:76:B4:13:0C
            X509v3 Authority Key Identifier:
                keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/82A6D4C4373711F0B4C22F6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.64.0/19
                  66.116.128.0/17
                  216.10.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:c8:37:ea:7d:2e:bc:dc:70:db:be:33:8b:63:a3:f8:a0:ba:
         be:35:76:e4:a8:c8:b3:80:30:6d:2b:37:e7:62:60:04:34:ea:
         95:ce:f9:d9:0c:a7:95:b9:8d:70:b7:7e:82:80:c0:78:b6:91:
         a8:79:a9:94:ad:6f:45:af:0d:66:82:62:e3:e8:6b:03:12:f0:
         8f:41:6e:4e:b0:3f:47:1a:e0:c5:65:48:c8:08:31:6d:d2:5e:
         f3:e9:05:8b:66:e7:db:74:d8:c3:be:8e:48:c1:a8:fa:a4:2f:
         fe:bb:c3:21:7a:03:eb:d9:ef:fb:ce:d1:07:f6:70:bd:3d:a6:
         ae:81:c7:39:e0:92:bf:88:6d:4b:d1:75:e6:e0:d6:a1:2a:3e:
         de:07:e1:13:d0:d2:5d:e1:00:8c:bb:79:34:ee:7c:0a:9a:af:
         4e:63:85:ff:75:ea:68:89:e3:8b:24:58:74:e3:a9:c3:e6:35:
         c0:43:bd:e4:b3:b3:ec:8f:3f:4b:b6:8e:9c:ff:7d:2f:af:9b:
         74:83:05:41:ad:01:e4:af:8d:1c:52:3c:50:67:0b:38:f7:f3:
         3a:a3:cb:cf:06:a3:86:04:58:33:25:a3:c1:21:2f:59:f7:6d:
         f4:6f:a5:09:47:96:a9:1c:c6:5c:97:55:64:48:ac:b2:c3:e0:
         8d:6e:c8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:28:12 2026 by rpki-client