Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/7FE5F2CEDB9411E9832A463AC4F9AE02.roa
File:                     7FE5F2CEDB9411E9832A463AC4F9AE02.roa (raw, json)
Hash identifier:          J9d3oCMnh4MCQUF8hvG6C1s4rT5lBz2hVV4fQZpMFs4=
Subject key identifier:   CD:CF:07:0A:88:25:28:F9:48:6D:E4:E0:71:39:11:09:85:AF:2F:7E
Certificate issuer:       /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
Certificate serial:       3560
Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/7FE5F2CEDB9411E9832A463AC4F9AE02.roa
Signing time:             Thu 04 Jun 2026 16:13:10 +0000
ROA not before:           Thu 04 Jun 2026 16:13:10 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     56293
IP address blocks:        59.153.84.0/22 maxlen: 24
                          103.10.20.0/22 maxlen: 24
                          2400:db80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl
                          rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13664 (0x3560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B4DB, serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
        Validity
            Not Before: Jun  4 16:13:10 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a21a416-2e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:09:d9:19:de:79:1d:a4:34:37:4c:da:2c:98:
                    c7:86:09:15:c2:1a:e1:39:5e:8a:71:75:db:86:14:
                    00:b0:1d:af:93:20:1f:55:79:8f:fb:86:52:21:15:
                    33:80:22:4c:5a:f5:22:7d:b7:49:51:1b:80:04:28:
                    6e:26:9b:c5:b3:c1:59:47:a2:07:59:83:33:67:97:
                    52:f6:0a:e1:0c:61:17:87:78:b0:3d:2a:5c:8c:35:
                    70:22:18:4e:02:79:9a:b3:0b:68:99:d1:16:47:72:
                    af:04:b4:e0:53:a2:84:1e:23:f7:80:e6:27:a6:e8:
                    c3:2a:41:b3:8b:43:53:9e:d6:4b:c0:18:6d:6c:bc:
                    84:6c:74:80:42:e2:7e:7f:80:b5:59:1a:3a:80:fc:
                    2a:1f:7b:10:b7:1d:1d:7d:65:45:e5:d5:cf:43:b9:
                    40:9e:01:b9:36:6b:69:57:89:54:76:32:1f:13:78:
                    a8:74:30:bb:3a:ce:de:70:3a:5f:35:0b:9b:24:a7:
                    4e:91:5f:58:d7:04:39:cd:3f:ac:b1:60:29:8b:58:
                    74:d3:7a:21:e5:2a:a4:e6:99:4e:0e:5c:b9:08:14:
                    cb:ab:20:3a:fa:8a:a8:dd:1f:c2:69:bb:a4:9b:77:
                    b4:11:b3:f2:2d:c6:69:7b:78:1a:b4:e1:7b:69:31:
                    fd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CF:07:0A:88:25:28:F9:48:6D:E4:E0:71:39:11:09:85:AF:2F:7E
            X509v3 Authority Key Identifier:
                keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/7FE5F2CEDB9411E9832A463AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.84.0/22
                  103.10.20.0/22
                IPv6:
                  2400:db80::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:49:d0:61:ab:28:e7:74:b8:2d:ce:ca:2e:eb:66:3e:4a:29:
         6d:fd:a6:89:0b:03:00:85:58:e5:f6:8c:13:c4:ed:d5:64:d2:
         02:4a:08:50:9f:9b:82:89:5d:77:3a:89:35:92:68:20:1a:06:
         c4:a5:bf:30:19:da:34:2a:60:36:55:53:64:32:2c:fb:eb:a9:
         6e:00:96:68:0e:e8:18:9d:d8:df:fa:83:ec:d8:0d:14:d5:89:
         59:a3:ce:0b:81:c3:8d:ab:f6:a1:36:d3:c8:f1:9e:18:2d:07:
         86:83:be:dc:94:fb:73:ef:30:6c:e7:2c:c3:ad:b1:b3:5b:1c:
         cf:39:64:25:1a:84:4e:1e:9b:8f:df:18:fc:5e:30:d3:ba:27:
         4b:39:4b:1e:fb:b7:30:b1:ca:ad:1c:57:61:47:93:3d:51:5e:
         68:db:78:1e:c3:cf:29:ac:95:27:13:30:48:66:17:19:b8:72:
         4b:1c:0f:b4:c2:18:7a:57:be:f1:1f:f5:c1:60:bf:ad:b8:64:
         86:df:df:f4:5c:2c:c9:2c:c2:ee:97:b3:7f:01:09:5a:ad:3b:
         57:25:a9:dd:82:6d:39:2b:59:f7:b7:95:f6:ee:10:b7:83:f3:
         69:a1:42:9f:c9:20:d2:ae:e7:c3:97:6d:b5:c4:fb:a1:92:b7:
         45:2b:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:59:13 2026 by rpki-client