Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/DCE066622C7811EC97C8D979C4F9AE02.roa
File:                     DCE066622C7811EC97C8D979C4F9AE02.roa (raw, json)
Hash identifier:          vHCnER0HBPmI45K/3yOU34zHXm+KOmRlpynpCbK+T3A=
Subject key identifier:   8B:65:3F:09:45:C3:CE:8E:DB:5D:6D:9D:19:86:1A:65:76:F8:02:64
Certificate issuer:       /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
Certificate serial:       0B59
Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/DCE066622C7811EC97C8D979C4F9AE02.roa
Signing time:             Fri 26 Jun 2026 20:23:18 +0000
ROA not before:           Fri 26 Jun 2026 20:23:18 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     45475
IP address blocks:        202.44.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl
                          rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2905 (0xb59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
        Validity
            Not Before: Jun 26 20:23:18 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a3edfb6-265d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:7b:a0:15:e3:18:b7:c5:da:e4:78:b9:07:
                    0a:1b:2c:4a:a6:dc:d9:3d:67:41:d0:3a:63:72:27:
                    aa:bc:47:cc:8e:69:44:1a:3b:c2:3d:be:7f:12:11:
                    fc:41:b3:52:51:92:2f:d3:a7:4c:67:b2:70:ff:ca:
                    b6:2f:16:d0:dd:61:c8:eb:e2:29:4f:c3:72:91:89:
                    7d:65:51:20:86:39:41:a4:1f:5a:27:89:9e:82:34:
                    0e:4e:8a:31:74:ef:03:64:e6:7a:4e:29:da:c7:0b:
                    a7:ca:7a:cf:87:90:e7:b4:2a:b2:04:2f:d1:64:0a:
                    53:5b:34:ef:16:01:87:18:7e:13:3d:34:27:33:a2:
                    c3:35:35:84:8d:b1:56:11:d4:7f:5c:9a:37:a7:b4:
                    7b:0f:c4:04:2d:96:4b:9f:ea:68:fd:ed:99:67:37:
                    16:79:8c:50:a4:53:1d:62:ad:50:ec:a4:ac:8d:27:
                    6b:b1:27:fd:16:36:6b:92:9d:3a:80:c0:86:4f:74:
                    7d:ea:a2:68:45:91:d0:6f:82:2e:a6:fd:a8:12:46:
                    74:60:88:c7:9b:ad:f2:fe:d0:e1:00:dc:64:cf:d7:
                    2b:dc:c8:23:0a:40:a3:b7:3c:36:78:ab:91:ac:00:
                    06:a0:53:5c:ab:c2:ae:fb:03:be:0a:64:94:ff:0b:
                    ef:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:65:3F:09:45:C3:CE:8E:DB:5D:6D:9D:19:86:1A:65:76:F8:02:64
            X509v3 Authority Key Identifier:
                keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/DCE066622C7811EC97C8D979C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.44.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:df:ce:15:77:ca:af:b2:7f:ba:58:89:6c:f5:3a:4a:13:67:
         08:c6:9f:30:b4:91:ec:ba:81:d8:75:71:41:84:d1:c0:6a:f9:
         01:56:43:b5:67:29:bd:5b:55:15:e4:14:fa:5e:a4:ab:65:2f:
         f5:60:c9:57:f0:62:65:14:c2:f4:60:bf:5f:b9:0d:9f:a5:78:
         6b:53:2f:4f:80:db:e9:5a:bd:8b:38:ae:d8:b7:d9:41:62:e3:
         57:ef:c7:8f:15:8b:09:02:07:40:0b:e4:4c:07:2d:1d:e2:d5:
         ec:e9:40:d5:b4:10:e7:36:c1:52:7c:36:3a:56:7c:c4:3b:cd:
         0f:8a:49:7a:21:b9:97:0d:cf:52:d0:77:83:30:ff:b8:89:f8:
         e2:6e:f2:eb:5c:a5:8f:8f:94:93:fa:94:40:23:44:f8:ed:a2:
         f9:92:3d:eb:08:c9:52:32:6f:76:f3:f2:77:07:01:da:53:5e:
         2d:f9:e3:3a:03:3b:6f:93:7b:cf:7f:c7:9f:f5:1f:5e:4a:c9:
         72:5f:cb:f8:b5:dd:dc:61:ff:56:fb:a4:10:31:52:b8:5f:1e:
         dd:dd:af:0c:c3:4c:cc:e2:ae:a6:ef:41:d1:c3:5d:5d:b1:21:
         59:b4:7f:c1:a4:94:ff:ac:f7:17:eb:df:ea:25:ec:d8:2e:45:
         fb:9c:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:24 2026 by rpki-client