Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91191B7/7B9C8E183FA511F189ABF565BD833773/F97395523FA511F1A1ABE841BE833773.roa
File:                     F97395523FA511F1A1ABE841BE833773.roa (raw, json)
Hash identifier:          3jrG87F5QHtHER3rKLENKK5WsYzCOT/AN81qv85FxUk=
Subject key identifier:   5D:D1:F5:BD:1D:0D:9C:4C:1B:CA:C1:B0:A9:99:BC:40:50:22:2F:C2
Certificate issuer:       /CN=A91191B7/serialNumber=49B96032B23E9D55071830EE9DBE39E56E85EC37
Certificate serial:       02
Authority key identifier: 49:B9:60:32:B2:3E:9D:55:07:18:30:EE:9D:BE:39:E5:6E:85:EC:37
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SblgMrI-nVUHGDDunb455W6F7Dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91191B7/7B9C8E183FA511F189ABF565BD833773/F97395523FA511F1A1ABE841BE833773.roa
Signing time:             Fri 24 Apr 2026 06:22:31 +0000
ROA not before:           Fri 24 Apr 2026 06:22:31 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     141433
IP address blocks:        162.4.34.0/24 maxlen: 24
                          162.4.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91191B7/7B9C8E183FA511F189ABF565BD833773/SblgMrI-nVUHGDDunb455W6F7Dc.crl
                          rsync://rpki.apnic.net/member_repository/A91191B7/7B9C8E183FA511F189ABF565BD833773/SblgMrI-nVUHGDDunb455W6F7Dc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SblgMrI-nVUHGDDunb455W6F7Dc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91191B7, serialNumber=49B96032B23E9D55071830EE9DBE39E56E85EC37
        Validity
            Not Before: Apr 24 06:22:31 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69eb0c27-f4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:22:48:2b:10:14:3c:e7:36:47:31:c9:02:
                    a1:d6:8a:03:69:eb:2a:00:19:0d:17:34:56:3e:c5:
                    67:b2:77:03:63:4c:a9:7a:a9:a5:da:0e:6a:68:e6:
                    63:a2:3d:54:1b:a7:59:7a:71:02:2b:52:c5:88:37:
                    de:21:4f:f8:04:a7:70:56:87:05:a6:b6:b5:ff:d2:
                    be:79:04:a9:02:34:28:47:b0:0b:01:96:69:dd:49:
                    7f:83:e1:71:b9:b1:0a:22:30:f0:ac:b0:45:7d:71:
                    37:6b:6b:32:ea:7e:fe:76:5c:e6:6a:77:0f:cf:3c:
                    d1:47:e2:90:37:53:c0:00:51:fe:06:6a:49:1b:d5:
                    3d:a8:ab:6d:87:dc:48:88:61:a4:ce:99:2e:fb:1a:
                    18:7f:c7:84:5a:ab:4e:2f:97:f9:17:0d:3a:69:ee:
                    57:51:78:e8:89:78:2c:ea:d2:b0:37:44:96:9f:f0:
                    84:6c:1e:dd:0a:c4:0f:c7:25:f2:78:fa:cd:6d:32:
                    3e:ca:3c:5f:d5:e9:ba:68:6a:70:cd:49:20:61:dd:
                    e7:74:da:76:d5:8a:a6:3d:b6:7f:fb:f3:bb:1d:45:
                    dc:c1:ca:ee:4f:9a:68:ab:2d:94:c4:e0:45:e3:4f:
                    dc:83:c7:c3:36:10:aa:14:18:39:73:5b:c8:19:20:
                    8f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D1:F5:BD:1D:0D:9C:4C:1B:CA:C1:B0:A9:99:BC:40:50:22:2F:C2
            X509v3 Authority Key Identifier:
                keyid:49:B9:60:32:B2:3E:9D:55:07:18:30:EE:9D:BE:39:E5:6E:85:EC:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91191B7/7B9C8E183FA511F189ABF565BD833773/SblgMrI-nVUHGDDunb455W6F7Dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SblgMrI-nVUHGDDunb455W6F7Dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91191B7/7B9C8E183FA511F189ABF565BD833773/F97395523FA511F1A1ABE841BE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:77:59:ff:4e:63:d1:fa:0d:e3:f9:13:d7:b0:1e:5e:4a:ae:
         dc:20:a3:0c:46:3e:69:ff:19:d1:a3:a1:4d:72:62:80:d2:5e:
         62:71:47:09:77:40:36:60:c0:61:aa:3f:17:71:21:28:fa:f5:
         ff:76:88:64:3b:f5:e9:d5:ac:13:ab:2a:7f:51:a9:62:36:27:
         8b:e7:21:87:48:f2:6b:67:46:f3:fa:d7:32:bb:cd:9d:27:2b:
         15:86:ff:88:da:a5:33:3d:2e:b0:8c:47:98:8a:29:07:68:ff:
         89:f9:64:d7:94:9e:76:ee:b5:33:36:b1:f8:eb:7b:f8:a8:36:
         a8:6c:74:ac:9e:a6:03:e3:2a:a4:37:84:cf:f9:e4:5e:af:5c:
         d8:47:2c:a5:de:62:2f:b2:04:7c:3a:18:5a:75:ec:04:09:5f:
         87:35:c6:cf:7a:c0:12:9f:03:20:e7:9e:be:45:3d:0e:1a:69:
         09:5d:23:1c:d7:0d:63:c4:a8:55:0e:e0:01:ea:a2:eb:b4:e6:
         99:3f:a8:80:2b:66:cb:15:31:22:70:7c:19:b0:87:5b:27:a3:
         21:0a:3f:5e:c1:30:9c:62:28:b1:ef:94:29:6c:8f:4f:80:f1:
         50:76:8c:95:b0:e2:17:3d:17:6a:f6:90:a1:9e:b7:b2:e1:25:
         04:6b:2a:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 03:47:59 2026 by rpki-client