Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/10FAFA36ACD811F1A413C9326C11F970.roa
File:                     10FAFA36ACD811F1A413C9326C11F970.roa (raw, json)
Hash identifier:          K0WYHVmvlzu39e9QCpMkN/Uieb8ADNB5R9SM75i/GcM=
Subject key identifier:   78:59:9A:37:9F:8D:D7:4D:AB:A5:5D:F1:4C:6D:9D:AA:F7:37:3A:BB
Certificate issuer:       /CN=A915B53B/serialNumber=7D8523C9194AAE90B140D6588B2CB35BB378DCA4
Certificate serial:       09
Authority key identifier: 7D:85:23:C9:19:4A:AE:90:B1:40:D6:58:8B:2C:B3:5B:B3:78:DC:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYUjyRlKrpCxQNZYiyyzW7N43KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/10FAFA36ACD811F1A413C9326C11F970.roa
Signing time:             Fri 11 Sep 2026 14:57:08 +0000
ROA not before:           Fri 11 Sep 2026 14:57:08 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     55967
IP address blocks:        45.113.192.0/22 maxlen: 24
                          103.235.44.0/22 maxlen: 24
                          2402:2b40:7000::/36 maxlen: 36
                          2402:2b40:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/fYUjyRlKrpCxQNZYiyyzW7N43KQ.crl
                          rsync://rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/fYUjyRlKrpCxQNZYiyyzW7N43KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYUjyRlKrpCxQNZYiyyzW7N43KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B53B, serialNumber=7D8523C9194AAE90B140D6588B2CB35BB378DCA4
        Validity
            Not Before: Sep 11 14:57:08 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6aa416c4-ba5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7d:b4:bb:21:9a:62:57:2c:48:5d:75:14:62:
                    12:0e:04:c2:ae:96:50:d9:0b:74:d8:86:c8:c5:c2:
                    46:26:25:1b:1a:8a:7e:c4:3b:74:ba:32:cb:13:9e:
                    09:f6:ad:fe:36:6d:e6:c7:26:0e:19:1d:9f:d5:6f:
                    bc:18:c3:2d:0b:3b:59:d1:20:23:05:de:b8:1a:d7:
                    78:6c:a7:5e:40:74:02:d0:ca:c3:a1:18:ca:04:12:
                    4a:f6:aa:3e:e2:09:b2:cf:f8:72:07:78:0b:23:b2:
                    7d:8f:5b:62:6f:00:4b:51:c4:7b:5f:41:bb:29:90:
                    af:92:5d:5a:23:e4:bb:ed:75:f2:20:c8:60:7e:61:
                    44:a2:29:cd:bd:4d:76:54:ff:4b:53:a0:1e:f3:ab:
                    91:b2:bf:95:ad:b2:78:eb:7c:9c:e4:f1:5f:31:50:
                    66:c5:45:d1:65:4f:00:ce:14:cc:4f:0d:b9:ae:45:
                    14:69:e5:3b:89:5d:e2:6b:a8:87:b8:54:94:bb:50:
                    6f:13:8d:14:d5:e4:70:21:c4:d2:42:6f:66:dc:66:
                    9d:4e:8e:f7:ab:31:48:f2:47:6b:7c:9c:03:89:98:
                    0c:87:2d:3d:d5:1e:f8:cc:68:e5:b8:85:fa:10:a4:
                    9d:9b:6c:bd:fe:0b:f6:1e:6d:72:8b:fa:ea:42:81:
                    c6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:59:9A:37:9F:8D:D7:4D:AB:A5:5D:F1:4C:6D:9D:AA:F7:37:3A:BB
            X509v3 Authority Key Identifier:
                keyid:7D:85:23:C9:19:4A:AE:90:B1:40:D6:58:8B:2C:B3:5B:B3:78:DC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/fYUjyRlKrpCxQNZYiyyzW7N43KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYUjyRlKrpCxQNZYiyyzW7N43KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53B/4B4B4620ACD611F1B95550FF6B11F970/10FAFA36ACD811F1A413C9326C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.192.0/22
                  103.235.44.0/22
                IPv6:
                  2402:2b40:7000::-2402:2b40:8fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         76:bb:f5:5f:6a:d0:af:4a:ae:10:93:c0:56:c9:23:a6:ac:09:
         d8:87:76:89:32:3d:97:c8:82:fe:88:95:65:57:ec:79:27:34:
         22:93:2b:a5:c3:c7:c4:c3:f0:c0:0a:94:b4:ad:bd:a1:8c:75:
         bd:e1:b5:e4:aa:ad:0a:9c:13:2e:e3:d7:79:dc:e1:18:7a:07:
         f2:16:ab:7a:ba:b3:54:4a:d2:03:17:3f:60:ec:bb:47:e6:8c:
         2c:be:bb:0f:52:0b:dc:4a:ed:7d:3b:dc:2e:92:e0:79:1c:c4:
         af:29:51:16:ef:b6:e5:25:ef:30:78:95:6c:0a:00:4f:2b:5a:
         11:d5:9c:c9:fb:5e:2e:b2:d8:74:10:1f:09:8e:bf:a6:a0:13:
         aa:29:6d:a2:69:f2:63:50:09:f1:0a:60:65:6e:2f:77:95:25:
         d9:fc:55:a9:45:51:ba:02:b2:dd:27:ab:92:7b:d2:dd:af:4d:
         d6:da:5a:45:22:1b:0c:d9:8d:57:16:8c:8e:2a:7f:02:b4:3e:
         3e:79:a6:3d:b4:ab:67:df:9f:a7:c1:f7:ed:3f:f9:56:6c:b1:
         63:96:3c:fc:b5:53:14:85:6f:e4:c3:86:63:70:65:85:cd:56:
         11:f7:ee:59:52:fe:a4:8f:b9:3a:d4:09:10:bb:4a:ff:ac:d3:
         4c:a4:30:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:38:56 2026 by rpki-client