Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B7724DF64AEF11F18C019EA8CC833773.roa
File:                     B7724DF64AEF11F18C019EA8CC833773.roa (raw, json)
Hash identifier:          MyZSs7WFahXHlv4AdJVcPNzCPQT2aCU9pHIBod0Xyik=
Subject key identifier:   FA:C8:F8:19:D4:C9:AC:8E:43:58:20:83:13:B5:EF:68:C5:1B:DF:5A
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       19B9
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B7724DF64AEF11F18C019EA8CC833773.roa
Signing time:             Thu 11 Jun 2026 20:41:46 +0000
ROA not before:           Thu 11 Jun 2026 20:41:46 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     46606
IP address blocks:        110.173.128.0/19 maxlen: 24
                          111.118.160.0/20 maxlen: 24
                          182.160.128.0/18 maxlen: 24
                          203.19.59.0/24 maxlen: 24
                          203.98.73.0/24 maxlen: 24
                          203.98.75.0/24 maxlen: 24
                          203.98.80.0/24 maxlen: 24
                          203.98.84.0/24 maxlen: 24
                          203.98.91.0/24 maxlen: 24
                          203.123.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6585 (0x19b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Jun 11 20:41:46 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a2b1d8a-c952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:ca:44:d3:d5:26:45:33:d3:f2:cf:b1:99:
                    0a:c9:8d:e3:05:1e:17:a8:e0:0b:19:6d:2c:19:ab:
                    5f:2f:e1:2d:4f:a0:32:27:f0:cc:d2:a6:d6:f1:d4:
                    8f:e4:78:5c:dd:df:11:7c:b3:72:2c:bb:71:80:e4:
                    22:2d:2a:db:ac:29:16:e2:a7:18:32:78:86:5b:55:
                    df:38:0d:bb:18:bb:b0:89:b2:65:98:6d:4c:dc:25:
                    c2:fd:46:9a:6b:c0:aa:a9:4d:c7:7f:8e:aa:6d:b9:
                    f5:b4:76:54:c5:cc:e6:55:fc:b4:90:b3:86:58:dc:
                    a0:2c:ed:7a:39:05:77:16:39:1a:49:3e:50:f1:3c:
                    16:cc:81:35:d9:cf:81:50:3e:7d:eb:01:bf:dd:8f:
                    fd:ba:91:5f:fd:28:ef:bb:6b:3b:ab:56:2d:77:1b:
                    10:9c:57:ff:c7:25:59:85:0a:4c:07:29:aa:2b:5e:
                    73:46:3e:8e:18:a1:50:86:3c:c8:17:39:92:99:19:
                    2c:8f:5c:1e:b9:9e:2b:cd:62:1a:ea:54:48:3d:4f:
                    4c:10:6e:03:1b:03:d0:f1:b9:a5:bd:53:b7:6e:35:
                    8b:62:4e:e7:8b:39:0c:bc:72:3a:8a:41:e5:9b:03:
                    49:7b:05:d3:30:c1:2b:a8:66:2a:5e:c8:63:d7:42:
                    df:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C8:F8:19:D4:C9:AC:8E:43:58:20:83:13:B5:EF:68:C5:1B:DF:5A
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B7724DF64AEF11F18C019EA8CC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.173.128.0/19
                  111.118.160.0/20
                  182.160.128.0/18
                  203.19.59.0/24
                  203.98.73.0/24
                  203.98.75.0/24
                  203.98.80.0/24
                  203.98.84.0/24
                  203.98.91.0/24
                  203.123.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:cf:35:d4:bb:7f:8f:d6:b7:9c:4b:35:d1:59:d4:20:4f:b3:
         92:28:1d:5b:08:3f:e0:48:83:18:95:56:b0:1e:9b:2d:d1:80:
         b0:41:61:43:16:1c:ca:81:40:78:d1:0a:68:71:54:7d:e3:bd:
         6a:29:81:9b:1a:d1:55:33:47:de:5c:36:18:04:28:38:c4:f9:
         60:54:a3:b0:0c:83:16:35:b0:95:b9:1f:10:05:11:1d:01:4a:
         8d:af:42:ce:67:16:b4:41:45:30:00:58:81:f5:5a:d5:af:5b:
         95:ec:83:05:e5:a1:cb:be:a9:9a:9f:4f:09:b8:84:6c:8f:9c:
         96:cb:9c:49:d0:67:f4:5a:67:e0:b0:81:4a:07:b7:53:09:44:
         0e:be:3e:eb:c6:31:9d:78:75:72:05:3d:d2:fe:ac:6a:3b:67:
         d9:71:7b:7f:ae:7f:4e:96:7d:66:2a:27:43:14:dc:dc:72:1c:
         41:43:d4:f5:a3:54:6b:2e:83:4e:d8:c0:b8:a2:e9:f4:bc:7e:
         a8:79:00:e1:be:61:cc:3d:54:3b:26:08:87:9c:72:90:eb:a5:
         fa:e6:5e:f7:d1:a0:c1:31:49:d1:85:75:50:1a:72:72:9f:29:
         f4:27:43:7b:4e:d1:17:6b:46:17:e5:fd:99:71:84:7f:42:4e:
         57:ea:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:57 2026 by rpki-client