Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/4EB8310C43EE11F19AC895DFAD833773.roa
File:                     4EB8310C43EE11F19AC895DFAD833773.roa (raw, json)
Hash identifier:          ywh+EspzzTB1z73ivawXczceUdTNF+vMHbVnAWHY+X4=
Subject key identifier:   6C:FD:66:5E:5D:FF:50:E4:44:D2:31:9C:EB:2D:69:6B:FC:93:FA:31
Certificate issuer:       /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial:       0A2D
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/4EB8310C43EE11F19AC895DFAD833773.roa
Signing time:             Thu 02 Jul 2026 20:21:19 +0000
ROA not before:           Thu 02 Jul 2026 20:21:19 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     38818
IP address blocks:        49.0.128.0/19 maxlen: 19
                          49.0.168.0/21 maxlen: 21
                          203.34.37.0/24 maxlen: 24
                          203.174.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
                          rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2605 (0xa2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
        Validity
            Not Before: Jul  2 20:21:19 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a46c83f-15f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d2:c2:c4:3d:3f:1f:04:a0:70:cf:6a:b4:b2:
                    db:29:86:71:ae:26:70:aa:21:de:c7:66:d8:93:48:
                    14:16:8a:c4:7a:32:c3:ed:44:db:b6:26:2f:57:dd:
                    1c:db:59:26:f1:26:3e:fc:6a:7b:0b:40:d2:02:fe:
                    53:b7:13:85:54:16:f4:22:d0:e6:b4:3b:b9:c7:0d:
                    b0:bf:5d:19:bd:50:f2:23:87:71:fd:35:98:83:97:
                    84:4f:3e:6d:7d:a6:08:e3:9f:c2:44:ed:23:c6:e4:
                    93:3c:75:e8:d1:15:8e:ea:93:c3:f0:70:2c:8f:01:
                    0b:c5:80:99:44:c7:57:82:57:80:54:ad:81:c8:cf:
                    c1:f9:5d:61:82:2d:4a:f1:4c:94:87:da:ea:6f:62:
                    07:02:44:9b:cf:db:05:db:ad:94:aa:11:5f:02:5e:
                    55:f6:17:6b:c6:c4:ca:2c:77:47:a9:10:64:5d:c2:
                    dc:49:4f:9a:10:50:8d:b3:d5:af:2d:07:37:82:21:
                    d2:ad:85:d5:bd:de:5f:ea:3a:51:71:e4:f0:d9:42:
                    06:1a:d2:9b:ec:e9:3b:72:7f:3e:64:23:34:5f:b5:
                    de:6b:95:42:34:b9:22:10:53:95:67:a3:99:be:d4:
                    ac:5c:6c:ef:30:3c:c0:28:92:73:f4:1b:f5:ed:6f:
                    93:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FD:66:5E:5D:FF:50:E4:44:D2:31:9C:EB:2D:69:6B:FC:93:FA:31
            X509v3 Authority Key Identifier:
                keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/4EB8310C43EE11F19AC895DFAD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.0.128.0/19
                  49.0.168.0/21
                  203.34.37.0/24
                  203.174.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:8e:d0:15:fb:b9:df:f3:32:cb:da:15:5c:2c:97:b8:c3:fa:
         14:f5:d1:f1:15:05:2d:af:5d:25:1d:4e:c0:3f:dc:55:6f:75:
         0f:9f:05:8c:cb:42:45:aa:05:68:d7:1f:b5:9e:5c:25:79:d6:
         8c:25:c3:d5:ec:22:13:b6:a7:1c:43:d6:54:84:39:78:dd:87:
         83:d1:59:7e:91:f5:b3:4d:aa:03:ce:d2:3c:b5:ab:99:82:46:
         dd:93:f4:c4:ae:2e:bc:4b:2c:f5:b1:4a:ee:e3:8c:5e:70:c3:
         de:1e:3a:25:de:47:b0:f8:e6:34:af:00:76:51:a7:bb:63:be:
         de:8f:fe:17:a7:9d:2a:1a:62:98:8a:a2:22:36:9c:0a:37:14:
         44:14:f2:50:a4:99:4d:2a:4a:2e:4a:9c:1c:97:79:56:f1:ff:
         95:93:31:82:14:77:aa:d5:ad:30:38:e9:62:c3:f3:64:1d:76:
         aa:6d:ef:d6:a0:6b:de:96:26:3a:74:2d:25:a2:15:d2:2d:65:
         39:3f:00:0c:11:12:88:b2:ef:a6:35:dc:b2:c9:62:2a:9d:b3:
         44:ae:50:9b:a3:8d:93:bb:75:2b:2c:4f:c1:59:25:d1:2d:a6:
         ef:72:9c:ca:77:59:b2:84:57:fe:b4:8f:b5:2e:12:5a:82:a2:
         c6:66:9a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:29:44 2026 by rpki-client