Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/670FF7B429C011F1A3F09FCF91833773.roa
File:                     670FF7B429C011F1A3F09FCF91833773.roa (raw, json)
Hash identifier:          OlVWz8nGryBxNYRtX9LuDsIW6s2g4bCFqY9G2NVU36E=
Subject key identifier:   34:8D:B7:7A:A4:79:4F:0A:DC:B5:49:72:67:8D:2C:D5:35:D9:20:7D
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       015C
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/670FF7B429C011F1A3F09FCF91833773.roa
Signing time:             Tue 28 Jul 2026 19:40:54 +0000
ROA not before:           Tue 28 Jul 2026 19:40:54 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     55034
IP address blocks:        63.217.234.0/24 maxlen: 24
                          63.217.235.0/24 maxlen: 24
                          205.252.124.0/22 maxlen: 24
                          209.8.50.0/24 maxlen: 24
                          209.8.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Jul 28 19:40:54 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6905c6-e275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:2b:c0:26:e7:30:92:ad:2a:d5:bc:c6:b1:
                    ed:07:ff:75:a8:08:07:75:c0:4e:c1:b7:90:3c:0a:
                    bd:4d:cd:08:fe:14:e7:89:ba:22:56:2c:e3:6a:be:
                    0f:1b:90:f9:52:b8:da:25:91:86:7f:f7:a8:bd:28:
                    7f:fc:8a:79:55:42:b9:98:30:63:ae:98:3c:85:7a:
                    22:f4:75:49:92:fd:73:cd:de:3c:98:8e:22:f7:79:
                    8f:82:5b:b4:54:6a:b6:59:48:e7:48:21:17:b4:5d:
                    71:f7:8e:c4:15:3f:8d:61:53:29:23:39:7a:ab:fd:
                    38:91:53:3a:82:98:b8:58:37:94:a5:bb:2e:af:70:
                    b5:b8:9a:76:d7:b0:57:10:7d:0e:45:7b:c9:9b:bb:
                    89:e8:0c:a5:42:d7:42:64:c6:37:1f:ca:d3:3f:13:
                    94:3f:6f:28:66:eb:9c:da:0c:79:34:46:21:72:84:
                    98:7a:27:93:37:1c:8d:94:9d:65:7e:af:69:d4:37:
                    8d:6e:dd:62:1b:6c:3b:8c:5f:03:dc:42:60:9e:de:
                    c3:13:24:f5:63:15:61:cc:81:5b:14:ea:52:4e:d5:
                    37:aa:45:7b:37:52:ee:aa:3d:65:b7:ff:63:06:d5:
                    56:71:b1:6d:35:e5:31:2d:70:55:3d:ce:8c:c0:4b:
                    a7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8D:B7:7A:A4:79:4F:0A:DC:B5:49:72:67:8D:2C:D5:35:D9:20:7D
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/670FF7B429C011F1A3F09FCF91833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.217.234.0/23
                  205.252.124.0/22
                  209.8.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:2c:38:c8:82:cc:d1:45:98:3b:f4:fe:13:ae:a5:e6:bb:2a:
         54:83:03:be:0e:00:6d:14:d3:78:1a:da:b7:0d:3a:10:f7:f4:
         c2:ab:4b:ce:e3:47:ae:5f:7c:fb:46:c3:33:28:3f:fd:24:77:
         6b:61:e1:40:39:5e:75:f4:32:1e:17:0d:37:6b:6b:43:e0:79:
         ef:7b:f0:b1:6d:ae:eb:2e:aa:2d:57:e3:71:70:d6:45:7d:6d:
         19:13:df:89:97:1f:94:fb:74:bc:45:28:7a:df:4a:91:75:8e:
         37:12:b6:0e:c2:08:ff:f3:fe:c9:c9:fc:de:0e:41:20:8b:82:
         b4:bc:9c:69:ee:da:ed:67:73:87:8d:67:f0:e0:13:c5:01:65:
         52:8a:0d:4d:9c:b2:68:4f:87:3f:71:b6:20:8e:54:92:23:c4:
         39:16:c4:e6:e3:91:9f:a5:83:15:a0:ac:27:ef:fa:62:4f:ea:
         0a:cb:9f:fe:b4:53:89:02:e6:a4:d2:ca:3f:56:dd:3f:08:50:
         9e:23:fa:f7:c7:b9:2f:61:cb:d2:79:8c:83:8e:f4:17:81:1f:
         e4:45:97:fb:29:c4:a3:c9:66:97:2d:c9:41:1d:18:a4:cc:64:
         4e:e8:ae:93:fe:c3:65:f6:8a:4a:05:d7:18:7a:59:3a:1e:6d:
         71:02:7a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:27:48 2026 by rpki-client