Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/11749BE62DA511F1AB5ACB70A2833773.roa
File:                     11749BE62DA511F1AB5ACB70A2833773.roa (raw, json)
Hash identifier:          XiFtfljCFKD2LKcSnLJ3irXOuLI/m6SajhgaUNMIkk4=
Subject key identifier:   99:C6:87:03:39:38:4F:E7:77:A3:56:40:60:26:EE:D0:68:A5:AB:4C
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       015D
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/11749BE62DA511F1AB5ACB70A2833773.roa
Signing time:             Tue 28 Jul 2026 19:40:57 +0000
ROA not before:           Tue 28 Jul 2026 19:40:57 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     57402
IP address blocks:        63.216.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Jul 28 19:40:57 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6905c8-b56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:48:7d:65:9a:5d:3c:f2:84:07:27:d0:dc:
                    4c:49:5e:f8:b4:f3:61:16:c6:b7:c9:e9:ca:0c:f3:
                    f4:4d:e7:a4:21:a2:fe:2c:16:10:08:2f:d9:ea:01:
                    cb:54:ed:fc:0a:76:2a:f5:a9:aa:50:22:94:f6:3a:
                    a8:0e:d4:d8:04:88:9e:a8:30:cd:4f:89:30:43:94:
                    2e:ce:6f:70:7a:72:12:24:92:50:55:3f:b1:6e:ed:
                    a3:ad:5d:8f:ef:a9:88:37:a8:2b:5a:de:a5:61:60:
                    30:ec:92:3e:99:ee:41:d8:36:ad:91:45:b0:e5:c6:
                    f5:35:b8:15:b1:89:07:c2:4a:c2:57:e5:2d:22:27:
                    5f:d6:20:8d:c0:dd:89:4e:a7:ed:57:60:0d:41:d5:
                    b0:bb:82:f5:66:3a:b7:2c:c1:22:b4:66:ff:d6:cd:
                    1b:33:c7:85:9b:08:6e:94:59:2c:f2:08:a5:e5:58:
                    4f:c0:5d:f5:28:23:30:68:02:54:01:ce:c2:5b:31:
                    1b:63:f1:2a:68:bc:23:2d:64:a4:01:c2:8a:84:1c:
                    cc:96:0b:a0:d1:53:37:dd:a6:79:c2:4d:8e:78:eb:
                    d7:08:d5:1c:09:13:db:54:d7:65:0e:e6:38:64:83:
                    48:3d:7a:0f:fa:b5:79:99:5f:5b:f8:eb:4d:2f:9a:
                    39:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C6:87:03:39:38:4F:E7:77:A3:56:40:60:26:EE:D0:68:A5:AB:4C
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/11749BE62DA511F1AB5ACB70A2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.216.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:ea:17:58:ac:2f:16:f5:8f:10:26:db:02:7b:e5:df:1d:8e:
         e4:4a:f5:04:95:37:cb:d8:88:88:62:0e:0f:12:0d:a4:28:54:
         1f:1b:4e:f3:fd:df:d2:c1:45:8b:7e:ec:10:ef:8c:0f:2a:e0:
         17:3a:21:80:49:de:d6:f0:1c:00:d9:dc:fe:be:d5:e8:f3:c2:
         95:9b:98:53:75:52:13:f1:eb:80:25:5b:dd:e3:75:70:1a:8b:
         b0:51:56:5b:ed:e9:a1:85:b9:19:6a:e2:a2:67:9f:71:9e:c9:
         a1:39:0a:87:21:8f:5d:90:44:bb:d0:76:dd:22:f2:fc:7f:80:
         b1:a7:46:ba:70:69:9b:cd:7b:8e:26:c0:6c:ee:26:50:df:c3:
         65:47:30:00:36:dc:a4:e1:88:0f:9f:1e:95:6e:8b:16:f8:4c:
         f0:ff:95:f8:4e:7d:58:c5:bf:c8:9d:63:4c:62:5b:be:17:73:
         e1:c0:09:64:3f:7e:af:b6:ef:85:9d:ba:62:5d:b2:a1:64:90:
         d5:99:2b:82:8e:b9:77:71:f8:c7:56:13:02:b7:dd:3d:60:64:
         87:2c:73:5f:3b:36:8c:cc:b7:fc:91:ce:21:d6:cb:be:de:63:
         4a:f5:08:8e:7c:cb:c8:3e:96:57:6c:fd:92:ad:17:b7:5b:a9:
         8f:c7:08:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:30 2026 by rpki-client