Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/D69F6688CD8511EBB5252063C4F9AE02.roa
File:                     D69F6688CD8511EBB5252063C4F9AE02.roa (raw, json)
Hash identifier:          5H7jFR8PbzvOaXFxaLgu+GI1ic8LMgRyhhFbb7DKPOU=
Subject key identifier:   06:93:87:0C:C4:DE:80:D3:D0:BD:70:4A:DF:22:92:C4:D9:79:97:C7
Certificate issuer:       /CN=A917C422/serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A
Certificate serial:       3590
Authority key identifier: 3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/D69F6688CD8511EBB5252063C4F9AE02.roa
Signing time:             Fri 28 Aug 2026 15:13:22 +0000
ROA not before:           Fri 28 Aug 2026 15:13:22 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     9584
IP address blocks:        114.142.144.0/20 maxlen: 24
                          202.65.192.0/19 maxlen: 24
                          202.66.128.0/19 maxlen: 24
                          202.134.64.0/18 maxlen: 24
                          219.90.112.0/20 maxlen: 24
                          2001:eb0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl
                          rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13712 (0x3590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C422, serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A
        Validity
            Not Before: Aug 28 15:13:22 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a91a592-29e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:12:5a:60:42:b1:68:9c:63:5d:9e:b4:36:63:
                    18:12:48:3e:8d:85:1f:1e:e7:2c:81:a0:1c:fc:f7:
                    45:da:81:ac:91:3b:0b:f1:4c:34:e1:ff:9d:f9:56:
                    f7:fe:93:52:8e:52:6c:30:63:eb:da:a2:cd:b5:aa:
                    1a:6b:26:fe:91:8f:9b:0e:01:44:be:eb:70:49:9a:
                    ba:4c:a8:85:1e:d6:29:a9:6d:2c:c5:66:fc:cd:45:
                    28:e4:20:e7:5d:a2:a8:53:18:f9:96:46:40:b4:f2:
                    fd:ec:1f:f1:ab:5e:db:45:9f:3c:23:a3:f6:dd:6e:
                    6b:66:9a:96:cb:ca:69:30:fa:61:02:a9:b5:d2:5a:
                    08:87:91:fe:0c:8a:14:f2:3d:d8:45:3f:e5:1e:82:
                    00:c8:a9:4f:fd:26:41:37:cc:8f:4f:e5:bd:6c:d1:
                    33:e3:90:b2:f5:6c:14:dd:2a:11:b4:74:90:75:c9:
                    33:ca:84:c4:14:31:72:94:73:fe:b0:23:bc:57:4a:
                    9c:9a:31:b1:4d:f4:e7:da:36:76:f5:17:a2:2f:cf:
                    2d:21:fe:e7:d4:e3:c9:31:60:29:0b:60:af:d3:05:
                    e7:92:d9:d1:7f:63:3a:8a:91:29:6d:5d:07:20:81:
                    77:36:43:30:43:ae:2f:fa:38:a6:e3:4a:71:20:fb:
                    ea:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:93:87:0C:C4:DE:80:D3:D0:BD:70:4A:DF:22:92:C4:D9:79:97:C7
            X509v3 Authority Key Identifier:
                keyid:3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/D69F6688CD8511EBB5252063C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.142.144.0/20
                  202.65.192.0/19
                  202.66.128.0/19
                  202.134.64.0/18
                  219.90.112.0/20
                IPv6:
                  2001:eb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:ad:49:e4:74:63:10:f1:1d:3f:d0:22:5d:23:63:58:f3:b4:
         ea:f8:d3:e3:b0:82:8b:f4:9d:4d:98:f6:a5:b4:6b:4f:57:f4:
         df:7b:3e:9c:c5:e8:01:f4:a9:a1:4c:53:51:b3:12:67:5f:15:
         5f:c7:10:21:af:59:db:98:04:75:c0:f1:4a:8c:01:1f:9e:f3:
         2b:43:07:45:d0:9d:f6:eb:04:3a:e3:8b:55:46:55:ff:ac:e8:
         f5:fd:f2:20:3e:63:fb:da:5e:d3:a9:db:5d:11:d8:63:f8:c0:
         6e:30:c8:7c:79:60:39:e3:e7:b1:c6:d9:e1:00:c0:a5:6a:a3:
         18:38:a9:ca:d5:19:41:bf:fd:cd:96:51:1b:94:f0:be:ae:d9:
         0e:53:be:3e:6d:bb:c6:7f:cb:bb:88:8a:54:b6:2a:64:de:67:
         56:50:e1:8e:c0:74:a1:a8:b7:8b:fc:4c:a0:50:85:79:71:a9:
         eb:7a:f6:29:27:90:c8:77:1d:b3:a6:95:a6:e8:ac:fa:0c:c2:
         57:5c:bb:58:b5:ad:e4:5f:74:12:b4:64:83:5f:90:81:f6:69:
         59:62:f8:31:25:10:0c:0d:95:92:b6:68:a5:18:68:84:90:74:
         42:d6:46:32:ad:b8:b1:99:7c:e4:33:3f:91:71:47:15:f4:80:
         71:12:06:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:16:21 2026 by rpki-client