Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/69977ED8794A11F1A904CD4C78A30FBC.roa
File:                     69977ED8794A11F1A904CD4C78A30FBC.roa (raw, json)
Hash identifier:          KZT6Psnmy8n/F8KO/zJ9m4zllIcZy2oBZLC5Bi71PHg=
Subject key identifier:   F2:5E:CA:D7:51:63:6D:9D:DE:EC:B5:49:00:CC:AE:08:22:3C:5D:C3
Certificate issuer:       /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial:       02ED
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/69977ED8794A11F1A904CD4C78A30FBC.roa
Signing time:             Fri 24 Jul 2026 13:08:54 +0000
ROA not before:           Fri 24 Jul 2026 13:08:54 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     26337
IP address blocks:        43.225.52.0/22 maxlen: 24
                          103.21.58.0/23 maxlen: 24
                          103.50.160.0/22 maxlen: 24
                          103.195.184.0/23 maxlen: 24
                          103.224.22.0/23 maxlen: 24
                          137.59.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
                          rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749 (0x2ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
        Validity
            Not Before: Jul 24 13:08:54 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a6363e6-cc10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:dd:61:a7:0d:f0:14:21:f2:54:70:8f:43:ca:
                    d3:d6:30:3f:2c:b9:a7:9f:d8:51:1e:4b:18:8f:76:
                    77:a2:a4:af:2b:7c:ad:08:56:68:37:5b:77:5b:4c:
                    fe:55:3c:c9:f1:1f:8c:34:fd:7d:49:7f:7b:68:d6:
                    0c:dc:b6:23:bc:16:82:fa:97:0b:0f:20:fc:72:72:
                    01:a8:fc:69:a2:10:41:22:5f:88:11:e0:24:9f:2e:
                    1b:60:3f:cb:28:b8:76:1a:04:02:43:4c:1c:b7:a3:
                    16:31:5f:07:c8:98:71:f3:24:7a:03:0a:82:43:19:
                    43:df:b9:f2:24:5f:a1:10:ac:3e:e1:cc:d7:27:9b:
                    c4:ae:90:fc:6b:b4:d0:1c:33:0f:de:53:c4:1c:81:
                    0f:ba:c2:f0:63:3c:ac:78:46:73:26:28:39:0d:9f:
                    d8:c2:3f:e2:03:11:6b:0e:a1:4e:30:14:87:29:b6:
                    cb:63:a7:cc:12:44:b6:01:8a:57:03:0d:fd:ca:86:
                    be:8e:c4:84:bb:ab:e8:df:88:61:b1:04:cb:d2:fa:
                    b1:54:91:c0:d3:06:d8:9e:14:46:9d:27:f8:76:5b:
                    81:4f:42:bb:4c:52:b5:3b:06:68:15:07:2a:5b:cf:
                    32:c6:9e:32:58:e3:a5:b8:70:42:14:05:04:16:c9:
                    1c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5E:CA:D7:51:63:6D:9D:DE:EC:B5:49:00:CC:AE:08:22:3C:5D:C3
            X509v3 Authority Key Identifier:
                keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/69977ED8794A11F1A904CD4C78A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.52.0/22
                  103.21.58.0/23
                  103.50.160.0/22
                  103.195.184.0/23
                  103.224.22.0/23
                  137.59.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e7:41:41:2b:0d:ca:f0:a3:3c:3e:a4:aa:7f:0d:41:46:96:bd:
         92:d7:3b:44:04:d9:1a:79:00:27:32:55:00:a9:c3:24:70:ad:
         7e:85:98:83:7d:f5:ce:67:0a:9d:08:49:b5:63:8a:e7:90:ce:
         aa:72:9f:f3:25:94:80:7b:70:71:fd:94:bb:a6:5f:0d:bf:88:
         eb:cf:7a:28:44:e6:ea:e1:71:fb:0c:a5:bb:13:c4:3b:aa:bf:
         47:e8:29:42:66:15:03:a8:70:96:53:7e:9b:f8:ed:1b:bb:ab:
         e7:79:36:ef:d1:08:22:08:fa:5e:b3:52:30:a9:c4:74:e4:91:
         4f:05:5c:9a:cb:6c:ae:91:f2:bf:62:80:41:42:4a:fc:2c:e4:
         6e:de:42:fe:d1:15:4b:10:c0:c1:87:3b:30:15:df:4d:56:8b:
         b4:61:85:ca:97:49:1b:ea:f3:27:fb:c3:fc:b2:89:93:48:7f:
         e2:2b:ce:76:97:c9:5a:0a:44:de:ca:23:68:cd:6f:c7:87:1c:
         54:80:ee:91:11:5e:4c:1a:b0:3c:b1:1f:0a:8e:23:a1:c1:e9:
         cf:0d:2b:0b:60:a8:0b:d0:0f:cb:22:96:2a:d4:35:65:2e:bb:
         68:4b:39:df:8b:a2:48:61:60:99:8c:b2:ab:86:3d:dd:da:74:
         27:cc:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:22:53 2026 by rpki-client