Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/974EDB46ED1311F09DD269343F6F56BC.roa
File:                     974EDB46ED1311F09DD269343F6F56BC.roa (raw, json)
Hash identifier:          J+RBZjwgHU8zSwFmYdVtdQjKdd/cwy+vE2XUwKs3QAs=
Subject key identifier:   01:3C:99:E6:B1:C9:71:71:0D:04:84:26:85:2E:6B:DD:97:75:24:9E
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       038B
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/974EDB46ED1311F09DD269343F6F56BC.roa
Signing time:             Mon 08 Jun 2026 06:31:52 +0000
ROA not before:           Mon 08 Jun 2026 06:31:52 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     138077
IP address blocks:        202.155.66.0/23 maxlen: 24
                          202.155.68.0/23 maxlen: 23
                          202.155.70.0/23 maxlen: 24
                          202.155.104.0/22 maxlen: 24
                          202.155.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Jun  8 06:31:52 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a2661d8-7310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6e:a2:0f:64:e3:7d:9c:25:43:37:cf:94:ee:
                    8f:df:d6:10:ac:fe:0d:ca:26:ae:c0:74:ec:fd:e5:
                    f0:0e:c4:d8:6e:a3:b1:4b:95:2a:2f:8e:01:a8:7a:
                    ca:aa:4c:e6:c4:26:59:b3:01:2d:59:b6:40:ff:53:
                    2b:3e:0c:33:54:79:39:0e:e4:76:3c:7e:63:cf:5a:
                    cb:08:f7:9f:3d:55:c1:6a:cb:61:8a:d6:49:17:ff:
                    f5:df:d0:26:5b:c2:6d:e8:28:fa:3c:42:73:89:e2:
                    fe:45:d5:37:b2:98:bb:87:51:ee:36:e7:d4:6a:64:
                    a0:ef:ee:66:03:60:8b:9d:d1:2e:a3:d2:1b:cb:e8:
                    47:81:3e:1e:4a:4b:b2:dc:37:03:ce:2e:5a:4a:b4:
                    26:f7:0f:94:c0:44:c0:c5:d7:3e:c9:7e:f1:3f:1d:
                    3b:21:69:42:48:55:a9:fa:87:d7:e1:a6:48:86:32:
                    b5:1b:df:0e:0c:6d:67:12:35:05:fb:00:93:f0:9d:
                    57:35:64:bd:47:7a:01:9f:76:4c:73:1d:e8:5c:dd:
                    06:d1:e7:f7:26:33:85:84:f6:6d:29:84:1e:7c:e7:
                    e6:ae:02:96:d3:54:b8:96:2a:89:e6:a4:b9:42:b0:
                    2f:85:65:d0:2c:e4:27:c6:13:06:37:4d:97:ff:01:
                    f7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3C:99:E6:B1:C9:71:71:0D:04:84:26:85:2E:6B:DD:97:75:24:9E
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/974EDB46ED1311F09DD269343F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.66.0-202.155.71.255
                  202.155.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:27:c4:44:25:49:dd:9f:8b:62:80:26:01:f7:b1:27:e7:df:
         37:35:e2:55:73:26:41:d7:d2:13:47:b7:0a:3f:a4:62:74:9d:
         18:ee:98:d0:ab:7e:0b:66:5c:20:00:76:ae:cd:bd:eb:8b:0c:
         90:fe:08:31:74:0d:68:46:34:82:44:c6:88:d5:08:e2:c3:f7:
         2c:af:4c:9e:bb:00:4a:18:79:cd:1b:47:ba:2b:43:87:56:e0:
         37:3c:58:0f:cc:5d:b0:ce:26:60:d2:87:43:69:ce:58:82:19:
         33:6d:99:55:04:c7:e0:65:bb:5f:31:92:c3:4f:dd:ac:32:46:
         76:07:65:15:b0:88:96:b7:11:14:f2:3f:6f:a0:98:82:99:c1:
         b7:24:50:15:65:1f:aa:c2:27:4f:40:29:2a:f8:63:33:2e:2b:
         61:b6:a0:7c:33:b9:8a:49:6d:ef:66:23:e7:12:62:3f:c3:45:
         68:8c:d9:cb:4c:51:16:c1:11:6b:16:e1:79:c3:80:a8:f7:3b:
         eb:0a:b2:d0:3e:d0:87:ed:b9:d5:2a:3a:b2:fe:68:d5:b2:d8:
         9c:fe:cf:ed:9f:85:cc:cb:2d:f4:00:53:4d:5b:2b:e8:e2:38:
         40:b6:a8:82:70:bf:83:43:b4:28:b2:c0:8b:d7:f1:64:2f:89:
         82:fd:9e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:59:54 2026 by rpki-client