Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/233E4D90309811ECAED04B4AC4F9AE02.roa
File:                     233E4D90309811ECAED04B4AC4F9AE02.roa (raw, json)
Hash identifier:          D50hEYh8O0H9oNnuQPz6gT2BMwMdqOT2afGIjjhf7LU=
Subject key identifier:   0A:8F:6A:B0:28:BA:A7:17:25:B2:A8:82:A5:3A:89:A5:15:EB:A7:C2
Certificate issuer:       /CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF
Certificate serial:       0577
Authority key identifier: D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/233E4D90309811ECAED04B4AC4F9AE02.roa
Signing time:             Tue 02 Jun 2026 23:28:08 +0000
ROA not before:           Tue 02 Jun 2026 23:28:08 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     45753
IP address blocks:        110.173.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl
                          rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399 (0x577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A0B8, serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF
        Validity
            Not Before: Jun  2 23:28:08 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a1f6708-887a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:30:47:01:8f:74:64:fc:52:e8:95:b4:d7:cd:
                    25:2d:70:05:b1:15:d4:34:c6:83:3b:4e:8b:23:84:
                    27:d6:c0:5b:3b:54:b7:5c:3f:f0:30:11:ed:8d:59:
                    02:fa:df:bc:46:cb:6f:01:da:fb:ef:1f:e8:19:e1:
                    12:7c:6a:76:4e:28:da:af:fd:de:c7:e0:80:64:e9:
                    6b:f7:76:c6:d1:62:a4:1c:bb:ba:0b:ec:47:f6:40:
                    62:8b:0e:cc:90:7e:b5:c0:51:28:25:72:04:c7:24:
                    48:de:d8:aa:db:e5:db:c3:43:4e:37:1e:91:a2:d1:
                    2a:97:7c:a3:7e:c5:ef:0e:bf:52:37:a3:28:c2:b8:
                    30:d5:91:82:4a:70:02:95:b8:74:3a:25:b5:e8:81:
                    d4:81:2b:96:78:2c:75:89:bf:92:4e:71:05:4d:61:
                    74:bc:07:94:63:15:7b:18:11:99:69:61:6c:0b:0a:
                    0d:32:b8:78:a7:6e:37:4b:00:d8:75:54:db:3d:33:
                    76:58:24:30:f5:0e:4f:e0:e9:e3:73:cf:53:c5:4a:
                    26:e1:90:5d:78:59:6f:93:4b:83:14:2a:b9:ee:16:
                    3f:49:ae:3b:91:be:24:e9:29:cd:b8:09:ba:40:e7:
                    6e:a6:a9:67:e2:22:17:2f:22:47:57:0a:37:bb:e1:
                    7d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8F:6A:B0:28:BA:A7:17:25:B2:A8:82:A5:3A:89:A5:15:EB:A7:C2
            X509v3 Authority Key Identifier:
                keyid:D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/233E4D90309811ECAED04B4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.173.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:e7:3b:54:99:a9:f6:5f:b7:bf:47:0d:e5:3e:86:27:4a:3a:
         58:85:d6:d9:1f:40:72:52:b3:6f:75:db:fd:26:20:73:d3:73:
         b9:68:4a:f4:a3:19:13:ac:75:b7:2a:14:ba:ba:f5:de:1f:8d:
         66:c8:42:26:77:f8:94:1e:2b:21:77:35:99:cc:8b:79:74:d9:
         40:78:e1:a8:84:70:34:5c:a9:a2:30:88:e3:97:c7:e8:86:5c:
         81:13:f2:b2:c0:aa:b2:7a:b7:43:61:02:c9:af:24:4a:7d:83:
         af:06:b5:03:d9:b6:c1:3e:e1:e2:e6:57:bf:ea:42:4f:59:45:
         4a:61:a5:7e:7e:19:36:ff:42:4a:be:06:16:bb:80:67:b4:a8:
         0d:80:67:c1:39:b4:7e:d4:3f:99:39:34:50:bf:0d:42:1a:d4:
         02:40:75:7b:ad:53:98:8c:49:dc:fe:73:08:d8:5b:b8:c2:79:
         a7:51:bc:bf:f8:91:a1:1f:28:dc:a6:c5:87:6c:b0:07:66:64:
         1b:e3:fa:4a:85:66:83:56:ab:5b:e2:6d:a5:3d:55:6a:ec:04:
         b3:dc:43:3f:6a:96:a2:2d:27:9a:34:c1:22:ce:c3:5e:a5:49:
         0d:90:c8:b3:06:5a:64:c5:35:4e:7f:a4:54:5b:1d:86:84:fb:
         40:86:2a:fb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEwQjgxMTAvBgNVBAUTKEQ3REMwNDkwRDhFRTczRUI5NjUzRThFMjQ3NkZGQ0ZC
ODk3NEFBREYwHhcNMjYwNjAyMjMyODA4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFmNjcwOC04ODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2TBHAY90ZPxS6JW0180lLXAFsRXUNMaDO06LI4Qn1sBbO1S3XD/wMBHtjVkC
+t+8RstvAdr77x/oGeESfGp2Tijar/3ex+CAZOlr93bG0WKkHLu6C+xH9kBiiw7M
kH61wFEoJXIExyRI3tiq2+Xbw0NONx6RotEql3yjfsXvDr9SN6Mowrgw1ZGCSnAC
lbh0OiW16IHUgSuWeCx1ib+STnEFTWF0vAeUYxV7GBGZaWFsCwoNMrh4p243SwDY
dVTbPTN2WCQw9Q5P4Onjc89TxUom4ZBdeFlvk0uDFCq57hY/Sa47kb4k6SnNuAm6
QOdupqln4iIXLyJHVwo3u+F9NwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAqParAo
uqcXJbKogqU6iaUV66fCMB8GA1UdIwQYMBaAFNfcBJDY7nPrllPo4kdv/PuJdKrf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTBCOC8xN0RFRkYxNDJG
RjYxMUVDOTA0N0EyNDNDNEY5QUUwMi8xOXdFa05qdWMtdVdVLWppUjJfOC00bDBx
dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE5d0VrTmp1Yy11V1UtamlSMl84LTRsMHF0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEEwQjgvMTdERUZGMTQyRkY2MTFFQzkwNDdBMjQzQzRGOUFFMDIvMjMzRTREOTAz
MDk4MTFFQ0FFRDA0QjRBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQEbq0wMA0GCSqGSIb3DQEBCwUAA4IBAQB+5ztUman2X7e/Rw3lPoYn
SjpYhdbZH0ByUrNvddv9JiBz03O5aEr0oxkTrHW3KhS6uvXeH41myEImd/iUHish
dzWZzIt5dNlAeOGohHA0XKmiMIjjl8fohlyBE/KywKqyerdDYQLJryRKfYOvBrUD
2bbBPuHi5le/6kJPWUVKYaV+fhk2/0JKvgYWu4BntKgNgGfBObR+1D+ZOTRQvw1C
GtQCQHV7rVOYjEnc/nMI2Fu4wnmnUby/+JGhHyjcpsWHbLAHZmQb4/pKhWaDVqtb
4m2lPVVq7ASz3EM/apaiLSeaNMEizsNepUkNkMizBlpkxTVOf6RUWx2GhPtAhir7
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:10:33 2026 by rpki-client