Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/648D8466B8A011F09DCB7C5BC4F9AE02.roa
File:                     648D8466B8A011F09DCB7C5BC4F9AE02.roa (raw, json)
Hash identifier:          h4q9+s6LKkIzk4CyJWXnprv1pvkZF4sAJykGIi6Qgw0=
Subject key identifier:   FC:F1:F1:E6:57:B0:4F:EA:70:D1:88:48:9B:91:A8:C0:19:63:9E:E2
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       035C
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/648D8466B8A011F09DCB7C5BC4F9AE02.roa
Signing time:             Tue 14 Apr 2026 14:59:45 +0000
ROA not before:           Tue 14 Apr 2026 14:59:45 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     401783
IP address blocks:        202.155.80.0/22 maxlen: 24
                          202.155.100.0/22 maxlen: 24
                          202.155.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:23:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Apr 14 14:59:45 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69de5660-57b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:e4:99:d3:93:a0:d9:32:f7:14:8d:72:25:
                    0b:0f:c9:34:e0:f9:9e:16:5e:8c:40:25:4c:37:b9:
                    77:f2:1b:86:ac:03:d0:d7:9f:da:55:0c:92:9c:8c:
                    e1:89:3d:20:8f:56:75:e8:db:15:6d:87:eb:12:1f:
                    32:e6:32:d8:dd:e9:2c:15:1b:ac:de:94:f0:9f:56:
                    b3:86:a8:02:fb:32:43:82:e3:19:b5:72:14:d2:74:
                    d5:6b:be:71:0e:8c:04:d2:2e:7d:9c:b2:61:f0:bb:
                    fa:71:75:1e:ad:29:f7:5c:ea:7c:8e:69:b7:b0:17:
                    da:ed:19:e4:85:7f:d0:53:78:2e:44:42:ae:21:fd:
                    db:c1:db:70:eb:7a:d4:c8:18:48:13:d4:67:ff:a7:
                    a8:c8:4c:b0:b4:dc:f5:a1:c7:c6:81:dc:11:dc:f7:
                    45:ad:75:3f:97:45:db:d0:f5:35:c8:88:ae:27:89:
                    d9:a7:90:0a:81:aa:b9:db:6b:bc:ca:6f:b3:74:7d:
                    88:fc:fc:6a:bc:ba:b2:c4:eb:47:98:31:d2:20:b5:
                    59:a0:e6:c4:e4:43:ed:36:b9:db:ab:3e:39:c1:af:
                    d0:58:d3:fc:9c:4f:04:f4:75:46:33:a9:a0:dc:7b:
                    65:60:c2:b5:81:0b:bf:ed:57:9a:4d:85:b2:66:19:
                    4d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F1:F1:E6:57:B0:4F:EA:70:D1:88:48:9B:91:A8:C0:19:63:9E:E2
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/648D8466B8A011F09DCB7C5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.80.0/22
                  202.155.100.0/22
                  202.155.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:1f:8d:47:56:e2:6e:7d:f8:79:b5:26:c6:3f:39:11:44:d7:
         8a:2f:4a:4f:38:90:b9:05:71:3c:dc:5a:55:e8:81:24:0a:5e:
         5f:52:d2:6e:f0:76:78:06:b7:c8:17:d7:c4:83:d6:01:c2:ac:
         af:58:60:69:bb:a0:c3:a0:8f:96:0c:2c:35:79:0d:87:8d:f3:
         07:d5:fd:72:fb:c6:c8:42:35:23:c7:58:bd:8e:28:4f:bc:db:
         79:1f:88:b1:c2:e8:13:17:21:d0:22:ec:b6:79:e9:e7:d4:15:
         95:9b:ab:60:da:4d:53:5e:47:d4:a0:ca:92:6f:db:8d:7a:94:
         8c:bc:fd:4d:d2:ef:95:94:87:10:50:26:47:1a:46:71:54:45:
         94:73:e2:f0:78:7f:fd:99:ed:07:d6:9f:e7:12:d3:b0:17:8b:
         21:5c:07:8a:07:9b:0b:6f:f8:ea:d1:1f:ed:6b:f5:d4:e8:91:
         2a:94:be:af:10:b1:7b:57:7b:77:89:45:a3:98:0d:28:c8:94:
         c2:62:f4:5e:0d:2c:27:85:d1:49:68:6f:0c:54:94:17:92:82:
         22:25:fe:1e:a8:cd:c6:21:c4:89:e8:1a:1d:23:e9:95:51:bf:
         f3:6b:86:96:fc:6b:17:c6:66:98:87:d4:0e:99:7f:7e:0a:6f:
         bd:d2:9a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:30 2026 by rpki-client