Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/061C3362985911EBA5F39B54C4F9AE02.roa
File:                     061C3362985911EBA5F39B54C4F9AE02.roa (raw, json)
Hash identifier:          DcXxwtYoJk7rZEQlOyE6scqgd0i6m1iXL9fTUlPBgDY=
Subject key identifier:   E4:EC:EA:39:C2:50:FE:77:BE:60:9E:A2:61:13:26:F3:8E:95:16:26
Certificate issuer:       /CN=A915DB55/serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B
Certificate serial:       06FF
Authority key identifier: 44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/061C3362985911EBA5F39B54C4F9AE02.roa
Signing time:             Mon 08 Jun 2026 20:24:23 +0000
ROA not before:           Mon 08 Jun 2026 20:24:23 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     139034
IP address blocks:        104.255.36.0/22 maxlen: 22
                          104.255.36.0/24 maxlen: 24
                          104.255.37.0/24 maxlen: 24
                          104.255.38.0/24 maxlen: 24
                          104.255.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl
                          rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1791 (0x6ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB55, serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B
        Validity
            Not Before: Jun  8 20:24:23 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2724f7-8cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:18:e9:f0:d8:fd:23:cb:a6:35:28:4f:c8:91:
                    1b:48:45:ca:e6:9c:ae:dd:a0:62:19:64:b1:f5:fb:
                    2e:2d:65:15:37:d0:ec:24:79:22:ae:13:a9:d0:81:
                    64:ba:a4:36:17:df:13:19:2e:bf:b2:98:d8:64:e4:
                    04:73:e9:89:b1:8d:06:ce:af:ce:20:1d:16:ed:32:
                    5f:f0:9d:93:23:f2:07:b0:34:93:c6:c1:a4:0f:cc:
                    5e:1e:66:66:17:8c:09:e4:95:e1:56:21:0d:df:fe:
                    aa:e7:5b:75:92:b6:f8:6c:d1:fc:81:93:6a:84:ed:
                    c3:61:ee:af:0c:b5:0c:98:ae:35:32:3d:fc:f5:d5:
                    64:2e:7c:88:b2:56:48:7f:c5:76:d8:b2:53:5a:20:
                    3a:96:14:0e:a5:73:f3:9b:f5:db:b1:38:04:dd:45:
                    4a:f8:27:6c:f5:db:3d:35:fa:31:7e:9e:9b:67:07:
                    39:a1:c6:cb:0b:15:24:b7:81:5e:32:99:3a:91:6b:
                    df:29:2e:50:9e:8e:52:6d:2c:b7:d6:91:5b:5a:95:
                    4b:8f:66:82:0e:47:e4:b6:13:da:8c:96:f0:a6:2c:
                    c4:21:46:e0:a8:99:aa:4c:f6:0e:36:db:b5:2f:76:
                    b7:d0:1f:f1:b0:6c:72:7b:9b:36:67:64:a7:2c:60:
                    35:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EC:EA:39:C2:50:FE:77:BE:60:9E:A2:61:13:26:F3:8E:95:16:26
            X509v3 Authority Key Identifier:
                keyid:44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/061C3362985911EBA5F39B54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d6:06:cf:ae:3b:c0:8f:e3:f5:c2:93:0d:ae:61:6a:c4:b4:1c:
         82:d7:15:69:83:44:75:e1:73:2b:86:5c:92:10:b3:a3:fa:fb:
         ad:6e:e0:15:72:ed:26:74:8a:36:60:06:19:c5:33:4a:24:56:
         1b:0f:8c:d5:35:75:33:09:ab:3a:1a:e5:2f:a5:df:a7:5e:13:
         d9:09:d5:c8:03:3e:98:84:ef:6f:5a:1f:39:d3:98:87:00:8d:
         9d:b6:3b:3e:7e:f9:45:4c:36:f6:ce:8e:8c:db:3c:cb:41:85:
         9d:13:4f:ee:a8:4a:ad:d9:5f:7c:f6:cc:b1:e3:79:7a:a3:6b:
         91:de:13:b6:7e:d0:77:91:e5:a1:5c:f4:63:22:54:db:ff:07:
         bf:97:8f:c1:3c:3e:37:58:8d:e6:37:41:39:c7:f2:84:20:f4:
         f2:7f:d2:c7:9c:d6:a3:47:70:b6:2f:5c:0e:c5:ec:d3:88:54:
         1c:8a:dc:23:82:c0:e9:91:c9:15:b2:f9:bd:f5:b2:ac:ec:22:
         25:4d:8b:92:ae:e4:e7:a5:0a:9d:b1:84:f0:ad:0b:d4:4b:31:
         a3:9d:8c:dd:92:3b:f6:70:92:08:0c:10:5f:0b:18:24:62:a9:
         5c:9a:32:c9:ad:5c:2a:97:34:aa:c2:4d:b0:0f:b2:3c:07:8d:
         01:f7:c3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:37:20 2026 by rpki-client