Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa
File:                     11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa (raw, json)
Hash identifier:          YIMgtn+dQ8yJTeLxcT1UUhFPvR85/hE3R6ckZdnpSnk=
Subject key identifier:   75:C1:8A:F1:A6:43:95:EF:7E:EF:A8:A4:03:AC:F5:D2:E2:17:C7:E4
Certificate issuer:       /CN=A917E0A8/serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA
Certificate serial:       0702
Authority key identifier: 74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa
Signing time:             Thu 30 Apr 2026 19:24:18 +0000
ROA not before:           Thu 30 Apr 2026 19:24:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59253
IP address blocks:        69.161.221.0/24 maxlen: 24
                          209.17.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl
                          rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1794 (0x702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0A8, serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA
        Validity
            Not Before: Apr 30 19:24:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f3ac62-528d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:88:95:9c:24:98:74:e2:bc:a8:2e:d8:ab:00:
                    c1:e5:74:c9:49:91:6c:d4:d3:ad:0d:10:e2:51:ba:
                    85:cf:bf:9b:4e:36:83:49:60:73:0e:e8:07:8d:53:
                    ac:53:36:bb:bd:0f:db:1d:7e:a7:49:31:de:86:a7:
                    2a:2f:01:08:71:d4:74:28:96:36:ce:ff:de:8a:b3:
                    26:bb:6b:cf:8d:f0:0a:11:d5:1a:d2:90:76:49:56:
                    9e:53:54:13:02:13:2e:9e:a6:64:e2:18:dd:c5:7a:
                    8a:fc:eb:9a:fa:cf:91:33:87:71:3e:64:4a:9c:ee:
                    20:bd:4c:7f:07:27:24:1b:10:8d:81:88:e6:c9:b0:
                    6e:0d:f5:39:85:d9:6b:c5:b0:eb:7e:6b:e9:95:f9:
                    5d:ca:f7:76:21:6c:bb:67:8a:e1:a6:76:d5:9d:2f:
                    fd:76:d3:e9:1d:8e:54:21:77:61:9f:df:24:c3:e9:
                    38:e2:e0:c2:65:ee:97:3b:31:b4:8c:1f:33:bb:6b:
                    fa:98:a4:a7:71:ef:c2:42:14:f3:26:00:f2:ee:06:
                    e8:ea:22:94:a6:76:ef:46:16:3d:ed:b5:cc:fc:58:
                    70:fb:19:75:37:0d:62:94:b3:db:20:94:69:d5:b3:
                    4d:5e:0d:3b:e7:c8:29:a6:e8:20:b3:84:e4:8d:42:
                    22:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C1:8A:F1:A6:43:95:EF:7E:EF:A8:A4:03:AC:F5:D2:E2:17:C7:E4
            X509v3 Authority Key Identifier:
                keyid:74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.161.221.0/24
                  209.17.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:b3:d6:11:9a:2a:e3:61:ce:bc:4b:f6:26:1e:0f:f4:3c:47:
         b7:8a:34:e6:c1:78:ff:d9:ad:1d:5d:bb:7f:97:5a:bd:e0:16:
         15:f8:61:e5:4b:1c:ac:8e:52:bb:82:ef:b3:ed:f6:07:20:74:
         be:b8:80:63:1b:8e:90:31:33:8f:d2:4d:9f:b9:9f:e2:74:b2:
         42:85:b7:61:97:49:fc:21:28:83:eb:a5:a4:30:cc:f6:70:01:
         d6:a7:0b:a0:a7:19:d0:7c:13:d4:59:a8:18:2b:88:f1:21:db:
         38:e9:76:48:5a:97:78:c8:6b:0f:c0:c0:e8:b2:be:57:f1:1d:
         55:b7:12:4a:2b:6d:99:b7:bd:ef:4f:24:12:10:27:cf:a5:b0:
         e4:7e:06:f5:b4:d2:9e:5c:08:38:69:83:c9:3e:28:be:61:8c:
         88:63:8e:a1:63:28:90:82:cf:92:f3:76:13:13:82:d3:1f:9d:
         3a:ae:b4:50:d0:df:67:70:c1:7a:5c:15:f7:0e:0b:66:07:0e:
         1a:d7:20:ae:12:2e:41:ec:4a:05:d6:85:74:d7:21:15:cd:fa:
         a6:be:aa:6a:65:be:e1:1b:96:d8:73:9b:1d:95:8b:26:6d:4c:
         3a:01:1f:79:2f:62:e2:0d:39:ad:78:ab:3c:0f:c6:fb:2d:2d:
         75:5f:77:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:36 2026 by rpki-client