Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/619B0B285AE611E781C33D7CC4F9AE02.roa
File:                     619B0B285AE611E781C33D7CC4F9AE02.roa (raw, json)
Hash identifier:          jo11qUhM4oXE7eBalp1J3JxJQge1HTpHBWzi+ddVqEw=
Subject key identifier:   CD:16:E3:E8:DB:E4:EE:A1:ED:AE:45:01:B4:CF:3D:A5:EE:6F:48:5E
Certificate issuer:       /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
Certificate serial:       1D13
Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/619B0B285AE611E781C33D7CC4F9AE02.roa
Signing time:             Tue 18 Aug 2026 16:30:05 +0000
ROA not before:           Tue 18 Aug 2026 16:30:05 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        203.33.22.0/24 maxlen: 24
                          2001:df3:ba00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl
                          rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7443 (0x1d13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
        Validity
            Not Before: Aug 18 16:30:05 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a84888d-8c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:7c:cd:d1:09:22:2a:a2:54:45:e2:0d:d3:
                    76:40:67:ee:8f:48:d8:53:9c:a1:6b:86:eb:4f:10:
                    42:22:ef:9e:fe:21:db:3d:e3:76:eb:41:96:35:dd:
                    3b:1e:9b:df:52:10:85:51:8a:26:00:61:ae:11:35:
                    69:c6:08:2a:50:0a:78:aa:4e:1e:09:77:af:2c:10:
                    1d:ac:da:90:97:61:20:8d:fc:ce:92:1f:20:f0:70:
                    39:92:08:b0:bf:0e:71:98:94:6e:0a:e2:52:eb:04:
                    71:ca:14:d0:09:87:d7:8c:25:88:c8:7c:6c:20:38:
                    4d:95:d6:5a:8e:06:7b:82:52:f5:e0:f5:86:0e:ae:
                    28:ed:d6:80:66:6a:dd:4e:bb:66:f7:9e:ec:09:c1:
                    98:2b:e6:50:8e:55:d6:cc:c9:21:56:c5:5d:c3:26:
                    e0:aa:7b:57:4b:42:d6:69:cb:c0:93:0f:6d:66:e1:
                    6c:f2:27:0a:17:1b:f4:68:b1:f2:06:2c:b1:1d:f4:
                    4c:ca:93:86:e1:0c:60:2f:0e:ac:aa:11:88:08:da:
                    81:1f:33:3f:fc:ad:d0:a7:f4:7d:6d:ba:0d:f7:6c:
                    92:af:bd:c6:e6:d6:35:92:d9:71:6c:9e:bf:dc:1a:
                    ae:58:d0:4a:0f:ea:24:40:47:7d:95:a3:ca:d6:d4:
                    f7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:16:E3:E8:DB:E4:EE:A1:ED:AE:45:01:B4:CF:3D:A5:EE:6F:48:5E
            X509v3 Authority Key Identifier:
                keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/619B0B285AE611E781C33D7CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.33.22.0/24
                IPv6:
                  2001:df3:ba00::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:f7:90:2f:02:b3:02:41:66:8c:4e:66:ce:60:06:b5:0f:8b:
         96:6f:26:79:5e:20:3d:37:d9:3d:21:32:41:67:7e:55:1b:e4:
         a7:d3:ca:90:f4:cd:4b:70:2d:1d:55:d7:f7:25:93:b4:c0:bc:
         ef:08:79:df:84:b2:ab:7e:46:6e:03:c8:96:ce:29:a6:44:0a:
         14:e7:01:68:15:a9:2f:5e:11:a0:74:ac:ae:0f:69:88:02:43:
         09:5c:e7:7b:bf:7d:86:91:3b:9f:70:0c:2d:96:d1:46:9c:81:
         26:5c:5f:66:63:d2:02:88:58:01:8d:84:ab:01:e5:b4:24:cf:
         e6:b0:34:31:bc:b9:0b:0d:33:e4:1a:ba:f6:31:e3:e0:40:50:
         d2:1e:dc:fc:e3:c6:8d:0b:27:ab:31:39:d9:db:dd:48:83:a0:
         4b:d1:0c:f1:04:07:4b:c8:1f:01:67:83:ba:1a:f3:5b:8e:9d:
         a5:5e:5e:f4:fd:09:b4:6f:60:b9:0d:9a:a9:88:5f:7e:db:ea:
         c8:d9:cf:58:81:b4:69:56:f0:64:6c:59:68:99:9f:33:64:6c:
         9c:39:75:0f:fb:f6:f9:66:4c:3c:3f:ce:38:3b:a2:3b:80:3c:
         9b:84:ee:4d:0e:83:88:d3:c9:e5:87:a4:45:a9:bb:31:05:da:
         c6:87:d5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:33:59 2026 by rpki-client