Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/0771A364485311F1A9744CF89D833773.roa
File:                     0771A364485311F1A9744CF89D833773.roa (raw, json)
Hash identifier:          nv8DvJ56f9NVVaEsRCDSj/u6YxsIirbe7brvxi9Q8rE=
Subject key identifier:   8E:95:60:37:12:2D:D8:FB:91:12:EC:8E:75:C3:3A:D2:B4:D2:90:8B
Certificate issuer:       /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648
Certificate serial:       06C1
Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/0771A364485311F1A9744CF89D833773.roa
Signing time:             Wed 06 May 2026 22:28:03 +0000
ROA not before:           Wed 06 May 2026 22:28:03 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     142109
IP address blocks:        163.128.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl
                          rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1729 (0x6c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648
        Validity
            Not Before: May  6 22:28:03 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fbc073-9e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:1b:94:b0:b4:5c:90:cf:1d:dc:e3:1b:98:
                    f3:22:05:17:83:7e:a8:37:88:7b:2d:16:e7:8b:32:
                    ab:73:e6:73:22:31:d8:57:98:71:d1:50:d4:d1:57:
                    c3:83:38:19:b5:b2:ce:a6:56:91:b3:24:ee:fd:7f:
                    56:da:7d:fd:54:eb:65:6a:2a:09:a3:1a:d3:00:76:
                    b0:30:3b:7d:7f:b0:af:42:44:c8:4f:a0:53:19:4b:
                    50:b6:ba:34:f5:bf:8e:0e:cc:71:1c:e1:b6:4d:3c:
                    26:12:ef:0d:2e:65:07:22:45:f0:a1:cb:3c:8a:87:
                    97:ce:41:5f:5e:58:ce:f4:86:bd:a5:1a:96:b8:d4:
                    72:49:66:6e:3f:db:26:4f:73:67:d5:8b:18:48:f5:
                    4d:ad:70:3c:4e:b8:63:31:62:35:8c:46:72:35:d3:
                    20:20:69:43:fe:73:f4:de:61:6e:99:c2:41:05:4d:
                    53:a9:1c:39:72:b5:aa:a4:2f:8d:91:10:ed:de:75:
                    d0:9a:90:f0:e1:02:53:bb:6a:31:3b:f6:0b:0f:e8:
                    d0:e8:31:d1:5f:c9:4b:bb:86:8f:8f:18:82:9d:12:
                    da:a2:82:ae:8f:f3:db:05:72:93:2b:3e:36:02:1c:
                    fd:18:42:00:d6:22:1e:b8:27:3c:b8:cc:c1:32:e7:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:95:60:37:12:2D:D8:FB:91:12:EC:8E:75:C3:3A:D2:B4:D2:90:8B
            X509v3 Authority Key Identifier:
                keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/0771A364485311F1A9744CF89D833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:71:3c:63:cf:59:0f:ea:14:15:10:81:38:dd:5e:05:e8:b7:
         3b:e6:c2:e3:1c:02:31:3c:fa:e6:bf:14:66:2e:ef:b5:7b:47:
         9d:9e:38:79:fb:98:da:7f:cd:1c:5d:d3:83:f7:40:2e:18:28:
         bd:42:5b:1d:69:d1:07:e9:b6:9f:ef:97:6e:64:e5:62:e7:6f:
         f7:04:fc:e0:a1:ce:70:75:ec:ec:b0:30:c4:01:25:78:26:a7:
         36:5d:73:70:e9:50:e1:6a:e8:f2:1b:d0:fb:62:3d:90:2b:a5:
         30:a7:2c:77:c5:3e:3d:72:47:ea:8f:7c:13:64:9c:8e:21:f1:
         51:54:52:8a:63:2e:b9:26:4c:e4:05:df:96:41:79:93:29:10:
         1d:7a:6b:65:fe:4c:3f:15:f0:21:81:5a:35:01:40:70:57:51:
         a1:c2:1c:1e:c7:be:53:53:d8:f0:e9:be:6a:1c:4c:2e:cc:6f:
         ea:25:2a:37:ff:2a:f5:bd:66:11:54:86:fc:25:91:79:95:80:
         f1:6f:9a:63:10:29:49:57:b5:a8:6d:29:a1:96:26:a0:74:80:
         ac:5d:f3:40:52:26:58:b9:b2:b9:d6:6e:78:f4:d6:71:b0:1d:
         e1:38:12:d7:6a:42:a0:4a:6e:25:1d:04:86:c4:ab:a0:17:96:
         f5:de:8b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:37 2026 by rpki-client