Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/5A0D98C829F211F18AB4C1A0A2833773.roa
File:                     5A0D98C829F211F18AB4C1A0A2833773.roa (raw, json)
Hash identifier:          HFd9QgZh+NAMQFqbKs0U5sBBitb9/bP74JcV2UadE8k=
Subject key identifier:   BB:23:59:E8:8F:4A:65:E8:23:50:2E:9D:A3:F9:4D:FD:7F:3E:73:94
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       015E
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/5A0D98C829F211F18AB4C1A0A2833773.roa
Signing time:             Tue 28 Jul 2026 19:40:58 +0000
ROA not before:           Tue 28 Jul 2026 19:40:58 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     59217
IP address blocks:        63.222.127.0/24 maxlen: 24
                          209.8.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Jul 28 19:40:58 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6905ca-33bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b1:00:ca:f4:57:70:2b:26:08:48:99:14:f2:
                    25:73:0c:14:20:71:20:c7:61:98:95:c9:4c:47:a8:
                    37:6b:fb:f1:f6:75:5c:2e:3d:fd:b2:eb:39:f5:95:
                    77:27:e6:a1:2a:54:bc:06:0d:31:73:14:32:9b:6f:
                    84:ea:df:e4:26:6d:20:a9:d7:20:2f:51:c3:67:5e:
                    90:53:06:88:ea:46:3d:91:b7:f8:70:e5:54:4a:dd:
                    18:06:76:5e:af:ec:bf:cf:e6:6b:65:93:20:4f:bc:
                    d3:25:0b:00:08:46:5c:a9:b3:0b:ae:4d:7e:3b:dd:
                    00:67:b8:70:53:71:ba:1e:a5:57:49:94:8b:ee:2c:
                    9b:fc:d0:c1:b3:cc:4c:92:e3:ab:6c:f1:f5:b5:80:
                    8c:82:ee:b0:aa:1c:fb:70:94:7b:10:c2:8d:1d:4c:
                    f2:ab:3f:f4:57:cb:f4:d8:12:46:80:12:43:1b:3e:
                    91:6c:43:3b:19:c9:0f:1d:86:51:be:c4:5b:8e:cb:
                    35:e7:19:2a:09:0f:8c:31:0e:d1:81:4e:44:92:43:
                    04:4f:70:6c:d3:e8:92:fc:72:9a:8f:85:b7:ce:63:
                    20:47:a7:13:da:f0:42:07:ee:7d:ff:4a:36:47:5b:
                    92:c3:2b:a4:9b:78:87:c6:f3:57:0d:c6:de:d5:35:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:23:59:E8:8F:4A:65:E8:23:50:2E:9D:A3:F9:4D:FD:7F:3E:73:94
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/5A0D98C829F211F18AB4C1A0A2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.222.127.0/24
                  209.8.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:49:54:22:e3:a1:73:7d:68:81:5f:d8:14:55:65:28:07:15:
         40:bb:94:cf:6a:df:13:b0:ac:c6:c8:9a:18:18:33:76:60:2e:
         2f:57:77:3b:b3:96:88:23:54:d5:ab:b4:44:84:7a:a6:15:c8:
         52:2a:12:9b:fb:52:fc:4e:8c:d2:ea:b1:c9:b0:88:26:81:01:
         30:02:0a:5a:52:48:3d:c4:43:8b:cd:cf:bc:e7:a3:ad:a0:a0:
         a8:8b:84:03:6f:17:ac:3b:6a:c4:db:dd:48:26:4d:77:2e:10:
         67:c4:21:17:ab:c7:a5:30:9e:1c:f8:19:7f:2f:fa:4f:f8:e3:
         84:10:dd:39:8e:88:05:a3:3d:08:54:c9:f7:bd:da:26:3f:3c:
         66:02:82:9f:c1:64:4a:31:20:c0:15:bb:4b:f1:9a:69:dd:23:
         0e:21:d3:45:c7:93:fb:db:8a:3e:ed:68:2b:f7:a5:7c:62:89:
         ea:8c:0b:c4:ca:81:e7:77:56:5e:3d:c0:6b:ec:8b:28:f4:7b:
         de:23:e8:59:fc:26:7e:4a:94:3a:7e:08:1f:89:bc:81:32:7e:
         2c:42:9a:4c:cf:f7:b5:1f:c2:be:bc:2f:5e:c1:41:9f:1d:fb:
         58:15:be:a0:98:eb:55:69:7d:0a:e5:95:a7:59:69:ec:95:09:
         f7:17:d4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:07:57 2026 by rpki-client