Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/CF834404B27511EFA614D07EC4F9AE02.roa
File:                     CF834404B27511EFA614D07EC4F9AE02.roa (raw, json)
Hash identifier:          G0E5EHoZ2m+ZP72qtXoYNfTwv7b42TsAJHsBwT4R+qI=
Subject key identifier:   8D:9F:04:F7:43:7D:E7:BC:0D:22:09:FE:64:F3:C2:0B:37:D0:5A:3D
Certificate issuer:       /CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
Certificate serial:       0120
Authority key identifier: 7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/CF834404B27511EFA614D07EC4F9AE02.roa
Signing time:             Sun 31 May 2026 19:23:09 +0000
ROA not before:           Sun 31 May 2026 19:23:09 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     17995
IP address blocks:        123.253.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl
                          rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07, serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7
        Validity
            Not Before: May 31 19:23:09 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1c8a9d-49fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:d0:61:49:c4:e8:61:a3:3b:67:56:db:7f:
                    7f:12:bb:44:f9:ba:d4:82:6e:17:12:8b:d7:1d:8d:
                    56:04:85:dd:9f:2f:d4:41:26:3b:0e:c7:7d:50:36:
                    ff:09:5c:7a:ea:31:c0:d5:0b:5a:9b:ba:b1:13:00:
                    45:77:c5:38:b4:5d:83:b7:86:d3:a4:f3:f1:7a:97:
                    fd:77:c0:30:e1:7e:a1:1b:2f:15:00:3a:db:28:9d:
                    95:38:a8:8c:73:e1:e5:8f:eb:2e:51:83:47:99:f5:
                    25:36:06:82:0e:db:1c:6c:46:06:55:d0:d0:5e:90:
                    9a:bd:88:27:0f:40:ae:61:10:2b:ae:bf:94:92:63:
                    fe:08:d3:bc:a6:ce:8b:b2:1e:73:38:94:13:be:b7:
                    e6:cd:dd:40:28:a9:b5:ed:6f:4d:17:9a:07:46:20:
                    1b:a1:f2:2a:0a:a6:9a:0d:64:74:9f:f7:15:99:12:
                    cd:79:31:aa:5c:86:95:ca:30:1e:5d:f1:37:1d:12:
                    f5:b2:96:e3:22:5b:60:74:f5:e7:f6:b6:4c:e4:7d:
                    6a:5e:9c:eb:a4:84:4d:b9:cc:f0:d9:65:ef:38:71:
                    3c:9a:00:21:cf:19:86:3c:c7:97:2a:4f:9c:ff:96:
                    ed:d7:42:2e:bd:51:8a:b9:3a:ec:a3:53:6e:e3:b3:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9F:04:F7:43:7D:E7:BC:0D:22:09:FE:64:F3:C2:0B:37:D0:5A:3D
            X509v3 Authority Key Identifier:
                keyid:7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/CF834404B27511EFA614D07EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:f2:dc:f9:77:db:9c:39:04:d6:e5:c2:f0:06:a5:13:c6:eb:
         69:94:39:af:d1:fc:19:62:fb:37:60:b1:18:54:f1:2c:fd:02:
         bf:e0:d2:a6:d9:09:0c:c1:aa:ce:d7:f1:db:bb:75:0c:ab:a6:
         45:65:8f:e0:42:8d:c3:47:8c:9a:db:da:fb:c6:e5:d4:e4:fb:
         1d:64:22:3a:d4:c1:8a:76:8d:0d:af:5e:48:ad:4e:49:fc:92:
         0c:d3:f8:53:fa:33:6c:0f:0e:e3:3d:32:88:4c:91:b0:b9:8c:
         80:70:0f:74:c7:40:15:f7:fa:25:9e:d0:7c:14:da:fa:9f:ff:
         82:52:8b:0c:7c:28:29:02:51:13:d6:12:d5:03:95:31:13:a6:
         28:f5:ed:37:f1:b0:a8:ba:9f:b6:83:0e:8a:be:db:31:f6:8e:
         f3:00:91:a9:88:75:7f:82:24:d3:d5:60:d9:a1:e5:ab:5b:a4:
         7c:e8:d8:94:67:73:a3:be:d4:3b:36:07:49:15:e2:24:21:28:
         1f:55:b7:ac:13:fe:34:cb:77:14:82:75:21:c5:03:c2:ab:2a:
         f5:86:af:ae:0c:6a:a9:21:ea:35:88:5d:75:4e:b2:1a:c5:8e:
         6c:54:8c:c3:56:d1:54:68:00:15:2d:fe:da:f6:64:16:1f:32:
         ea:1f:b9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:12:00 2026 by rpki-client