Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/2D954C6C5A5511F183A61EC6B3833773.roa
File:                     2D954C6C5A5511F183A61EC6B3833773.roa (raw, json)
Hash identifier:          rElfqdRGN29qxIjELniN/ns6Di2jBGzrKAoe/hx+ulg=
Subject key identifier:   BC:B8:90:5D:06:E4:19:95:98:65:26:11:2E:51:CD:1A:CA:58:78:C4
Certificate issuer:       /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Certificate serial:       3662
Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/2D954C6C5A5511F183A61EC6B3833773.roa
Signing time:             Thu 28 May 2026 05:22:11 +0000
ROA not before:           Thu 28 May 2026 05:22:11 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     38022
IP address blocks:        163.7.128.0/19 maxlen: 19
                          163.7.128.0/24 maxlen: 24
                          163.7.136.0/24 maxlen: 24
                          163.7.137.0/24 maxlen: 24
                          163.7.144.0/21 maxlen: 21
                          163.7.159.0/24 maxlen: 24
                          210.7.32.0/20 maxlen: 20
                          2404:138::/32 maxlen: 32
                          2404:138:204::/48 maxlen: 48
                          2404:138:205::/48 maxlen: 48
                          2404:138:206::/48 maxlen: 48
                          2404:138:207::/48 maxlen: 48
                          2404:138:1306::/48 maxlen: 48
                          2404:139::/32 maxlen: 32
                          2404:139::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13922 (0x3662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
        Validity
            Not Before: May 28 05:22:11 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a17d103-6fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:4a:fc:f9:91:89:f4:26:bb:98:92:f1:da:
                    54:86:2b:6d:48:67:3b:06:49:17:f6:2c:a1:60:e1:
                    a8:1f:70:32:c5:3a:c4:bf:1e:28:06:55:b5:a7:d9:
                    ef:3d:93:b4:88:c2:9f:09:57:6e:1b:8d:13:8d:e0:
                    31:32:70:04:74:d6:f2:7f:a8:ea:92:1c:5f:a5:63:
                    1d:0e:4b:e9:e3:c6:62:41:8f:a0:c2:83:b3:74:66:
                    8f:f6:b5:3d:2b:91:8e:0e:01:2b:48:e8:fd:2f:96:
                    c3:93:44:10:e5:42:ed:07:da:72:dd:94:4e:7d:c9:
                    c2:a9:8e:bd:1f:80:1c:72:44:8a:14:d1:a4:07:8a:
                    e6:d9:84:c9:36:38:d4:11:a2:ce:9a:5a:ba:17:92:
                    e1:a7:76:34:50:e6:b7:90:2a:bd:06:93:54:ea:f7:
                    0e:4b:75:43:b2:ab:41:f6:88:12:84:59:1b:1d:b2:
                    5e:07:e1:fa:fd:ce:d9:0a:da:e3:0c:96:30:fc:8c:
                    e3:b1:af:17:ad:51:93:d3:90:45:5c:5e:79:d7:4d:
                    f2:10:7f:05:34:1e:dc:0f:ab:41:27:3a:14:60:4f:
                    ba:da:a8:10:3b:ab:bc:38:0c:da:f1:4d:a9:15:cc:
                    22:e8:77:92:ba:cc:f7:fb:b0:41:d6:56:09:c6:fa:
                    3a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B8:90:5D:06:E4:19:95:98:65:26:11:2E:51:CD:1A:CA:58:78:C4
            X509v3 Authority Key Identifier:
                keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/2D954C6C5A5511F183A61EC6B3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.7.128.0/19
                  210.7.32.0/20
                IPv6:
                  2404:138::/31

    Signature Algorithm: sha256WithRSAEncryption
         a6:49:1b:ac:14:55:57:b3:3c:ea:e4:35:0b:bf:05:50:06:06:
         3f:3f:ba:e7:45:3a:68:87:21:b0:50:91:fb:76:6f:f5:75:83:
         aa:76:ae:03:e5:00:d6:dd:7d:4b:ff:e7:73:85:04:43:7b:ca:
         7e:6a:09:51:6a:9d:0b:79:58:9d:c9:53:24:05:8e:0f:17:47:
         7e:c4:36:49:4a:52:bb:83:0f:6f:b8:fd:31:a9:04:77:dc:65:
         35:ec:ef:4d:51:b1:2f:ab:ab:f3:16:53:e4:51:0e:73:6c:29:
         97:b8:c6:c6:66:53:8b:b8:cf:b2:98:c2:e1:50:e4:2c:5d:2c:
         41:34:0f:ad:ca:69:93:01:9f:0f:e6:e0:f5:bf:c6:ae:10:97:
         33:7c:32:fd:fc:8c:1d:d9:ba:72:e7:71:c9:c1:82:26:07:31:
         f5:5b:44:c8:e5:cf:f9:cd:10:87:48:5b:57:f4:af:7d:ef:68:
         2a:27:d1:45:53:bf:78:c5:32:b9:97:e2:b1:e9:09:51:82:5d:
         31:d3:2b:d6:f1:f9:17:91:62:0e:5b:f8:66:c4:74:4a:b4:87:
         96:11:16:41:60:36:1b:6f:69:9a:26:d6:86:55:3e:19:0c:6c:
         97:11:47:65:0f:2d:c7:46:76:a7:8c:e2:fe:d4:19:98:57:1d:
         e3:01:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:50:51 2026 by rpki-client