Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa
File:                     4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (raw, json)
Hash identifier:          5PHbUM/X+Td9kzCJHVRsM26TQZj90GItMYtQ/V/nVug=
Subject key identifier:   11:13:34:F7:CD:C2:7E:91:01:23:18:A9:15:88:4A:CC:45:C8:E3:F8
Certificate issuer:       /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Certificate serial:       01DB
Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 03:53:52 +0000
ROA not before:           Thu 03 Sep 2026 03:53:52 +0000
ROA not after:            Fri 01 Jan 2027 00:00:00 +0000
asID:                     152634
IP address blocks:        202.36.116.0/23 maxlen: 24
                          2001:df3:88c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl
                          rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
        Validity
            Not Before: Sep  3 03:53:52 2026 GMT
            Not After : Jan  1 00:00:00 2027 GMT
        Subject: CN=6a98ef4f-56a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:14:3f:3d:d6:55:15:91:6b:15:c6:ff:1e:33:
                    a6:ca:1a:e1:a0:f0:66:54:53:00:a1:75:c0:59:c9:
                    24:ca:2f:83:73:a2:d8:94:34:0b:71:23:39:92:0d:
                    86:a0:71:8f:38:69:cc:5a:70:10:9d:bf:e8:50:79:
                    c8:ee:86:16:85:6c:42:49:fb:ac:61:ce:a2:c8:2f:
                    5d:d6:e4:27:00:bb:18:8b:8e:3c:d1:f3:db:0b:f8:
                    4f:57:5f:e3:55:c2:79:89:02:f9:f2:61:2c:ff:f6:
                    0b:19:fb:7d:59:04:94:cd:a2:04:7c:3a:33:87:dc:
                    84:3f:17:8c:b5:20:da:c7:83:bf:28:82:8e:7a:41:
                    24:cb:38:94:df:d3:89:b6:c1:b0:37:ad:73:f3:7d:
                    10:09:a1:5c:57:d1:00:71:02:47:10:78:57:dd:aa:
                    92:80:c1:55:50:2e:30:e3:02:4d:f1:9b:c5:3a:e1:
                    2f:dd:66:e0:01:78:0f:1d:22:89:71:c5:bf:e7:c3:
                    43:a7:bb:ab:dc:08:6f:27:c3:aa:57:38:ea:32:53:
                    73:62:e2:9e:9a:23:5a:06:a2:8b:7e:2e:2b:3d:bc:
                    87:4c:05:e1:1c:51:b1:e9:f3:fc:ad:6f:e9:9b:09:
                    96:95:f6:6c:93:7a:2d:78:79:52:4c:c2:28:16:47:
                    df:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:13:34:F7:CD:C2:7E:91:01:23:18:A9:15:88:4A:CC:45:C8:E3:F8
            X509v3 Authority Key Identifier:
                keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.116.0/23
                IPv6:
                  2001:df3:88c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:59:cb:ed:35:bc:41:f6:b8:0a:e9:ef:da:69:9c:54:d6:ca:
         da:94:89:9d:37:79:47:53:fd:0f:0e:02:fe:b5:60:2e:99:12:
         23:42:06:97:10:f3:f8:ce:e7:09:32:04:9a:4b:25:6d:9e:e7:
         fb:1f:3c:44:e4:f1:06:50:81:f0:08:c6:e4:f9:6a:1a:3a:2a:
         4a:91:70:d0:21:f5:7e:7f:c0:98:66:e3:00:cd:77:a6:9d:87:
         b7:28:25:f2:c2:ac:3e:53:8d:53:09:6c:db:37:c1:04:b0:ba:
         da:82:c5:b0:96:6b:f0:56:98:18:d3:d3:6d:bc:15:69:02:3b:
         b0:a1:d1:27:d9:7c:48:a4:d7:26:5d:5d:e4:fe:5d:d0:2f:4a:
         f5:5b:9f:3b:76:66:13:d5:7c:b6:1c:95:f4:94:e3:86:ed:9d:
         eb:d6:6d:ab:56:b5:64:da:85:34:b7:62:f0:e9:01:46:43:28:
         c1:e1:4f:13:5f:4a:07:d2:ed:5d:96:1e:6b:51:88:b3:b6:a7:
         f0:22:3d:f8:87:8b:12:76:eb:94:ca:3d:45:bc:b9:a2:51:1c:
         c6:4f:33:77:92:b7:5e:3f:9c:dd:f0:e2:3b:c4:77:c0:f7:65:
         3e:6c:bb:ae:38:0d:c8:b5:a4:33:76:83:b5:f3:69:3b:e9:1b:
         68:75:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:11:06 2026 by rpki-client