Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/DFC15BFCEE2A11F08F37AFA2486F56BC.roa
File:                     DFC15BFCEE2A11F08F37AFA2486F56BC.roa (raw, json)
Hash identifier:          SDyY9CxWbpTxTv2y+7w0t15rfAMVOucoRmveZEJG2J4=
Subject key identifier:   77:60:DF:67:4E:6A:33:93:21:F2:B3:40:D7:4D:60:3D:9A:A0:10:ED
Certificate issuer:       /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial:       3667
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/DFC15BFCEE2A11F08F37AFA2486F56BC.roa
Signing time:             Sat 18 Jul 2026 15:10:30 +0000
ROA not before:           Sat 18 Jul 2026 15:10:30 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     23647
IP address blocks:        202.51.65.0/24 maxlen: 24
                          202.51.66.0/24 maxlen: 24
                          202.51.67.0/24 maxlen: 24
                          202.51.77.0/24 maxlen: 24
                          202.51.79.0/24 maxlen: 24
                          202.51.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
                          rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13927 (0x3667)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
        Validity
            Not Before: Jul 18 15:10:30 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5b9766-d178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9f:4f:5a:0d:4c:9b:cd:39:2d:ca:4e:23:ae:
                    ff:19:4e:ba:48:1e:55:a9:36:06:60:3e:d0:cb:3e:
                    ad:74:01:b2:d3:82:4c:57:49:df:06:1f:07:83:a4:
                    24:56:ec:bf:20:bf:d0:c4:6a:c4:bd:58:2e:ec:e4:
                    05:4f:85:94:5e:88:69:7e:cd:d9:b8:47:54:b5:1e:
                    83:cf:ee:22:cc:49:bb:e9:22:ad:2f:87:49:7e:73:
                    32:44:ea:fe:25:60:9e:48:fb:3d:c7:3c:ea:15:d6:
                    3e:81:d3:68:fd:b3:b6:1b:70:a0:5d:d2:82:2d:e5:
                    aa:90:47:41:5a:ae:94:1d:7c:0f:40:e4:8d:6d:26:
                    49:7f:97:08:fa:60:81:04:69:4d:17:e6:54:2a:0b:
                    6d:4d:14:93:0f:0e:c6:7d:56:70:40:9b:ba:e3:0d:
                    4c:0f:e4:5b:8d:36:ee:59:94:eb:81:17:17:6b:81:
                    15:27:b0:97:06:ad:8d:ca:ae:0d:5e:5e:fc:20:1e:
                    53:7e:8b:9e:1d:fd:b6:c9:0c:0c:db:00:dd:04:28:
                    ad:30:3a:79:3a:40:65:01:4f:38:ba:89:e4:aa:97:
                    3a:f3:22:56:2c:cb:2d:93:2c:0e:0f:93:69:a3:fa:
                    59:36:c3:f9:4f:05:72:75:74:df:13:ee:80:90:42:
                    21:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:60:DF:67:4E:6A:33:93:21:F2:B3:40:D7:4D:60:3D:9A:A0:10:ED
            X509v3 Authority Key Identifier:
                keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/DFC15BFCEE2A11F08F37AFA2486F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.51.65.0-202.51.67.255
                  202.51.77.0/24
                  202.51.79.0/24
                  202.51.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:81:e8:eb:ec:29:81:7c:d1:e7:f7:b9:fc:1a:2d:ed:01:2b:
         b7:67:03:dd:b0:d1:43:72:fc:f4:96:82:18:6f:f1:51:c2:9f:
         64:5e:8c:7f:ed:43:88:b8:f2:12:a1:66:3b:c7:64:75:e5:83:
         89:65:cd:c9:36:b4:45:b9:c3:46:02:7e:69:1e:e0:ad:c8:aa:
         f2:c7:fd:a2:b0:86:a9:d6:e8:04:fa:af:bf:22:00:35:b7:fc:
         dc:8f:99:96:66:94:d2:f2:44:6d:ba:49:b8:7b:97:fe:11:f6:
         a1:16:52:e5:da:45:aa:1d:4b:4d:bd:4f:73:14:3c:ce:52:d5:
         3b:68:7b:7d:69:30:50:d2:05:a8:15:c1:2d:8f:e3:b9:5d:a4:
         d8:0b:7c:b5:bc:70:84:39:1d:b3:34:f3:59:7d:f7:56:e2:35:
         40:66:db:ec:85:0a:8c:82:ab:6b:db:72:6b:64:1a:60:3b:0f:
         31:87:96:6f:5e:52:a6:d3:cd:23:8a:e2:e6:0d:cb:c9:4b:24:
         d6:e8:cb:79:3e:76:be:b3:5e:3b:35:a5:9c:72:b8:36:68:92:
         42:a2:7f:85:56:4c:d1:f4:ca:6f:d8:5b:3f:d9:ba:6d:57:eb:
         dc:d4:d8:d4:c1:00:cd:6d:b3:56:f9:ed:d3:1d:5c:2e:7f:9b:
         21:b8:66:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:13 2026 by rpki-client