Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/AE0F1BEA42AC11F1AC02065EBB833773.roa
File:                     AE0F1BEA42AC11F1AC02065EBB833773.roa (raw, json)
Hash identifier:          2exTM74mYh/WV9DBBb+PAXb3+N+2GeJ1vzkMiQM/+Ls=
Subject key identifier:   CE:76:71:11:6D:95:89:8D:90:5F:96:B0:44:BF:84:45:54:0C:78:22
Certificate issuer:       /CN=A9131667/serialNumber=A42BC1580F0BDE9211FB8C08914AA5C2C011217B
Certificate serial:       05
Authority key identifier: A4:2B:C1:58:0F:0B:DE:92:11:FB:8C:08:91:4A:A5:C2:C0:11:21:7B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/AE0F1BEA42AC11F1AC02065EBB833773.roa
Signing time:             Tue 28 Apr 2026 02:48:05 +0000
ROA not before:           Tue 28 Apr 2026 02:48:05 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     132721
IP address blocks:        162.4.0.0/23 maxlen: 23
                          162.4.0.0/24 maxlen: 24
                          162.4.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.crl
                          rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131667, serialNumber=A42BC1580F0BDE9211FB8C08914AA5C2C011217B
        Validity
            Not Before: Apr 28 02:48:05 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f01fe5-10d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0e:bf:83:29:f5:ff:e6:e9:e8:e3:c8:91:8d:
                    02:92:36:7e:68:6e:b9:43:0e:8f:da:91:34:ab:5c:
                    75:a8:04:93:10:76:75:e3:66:43:0e:fd:5d:e1:45:
                    bf:27:27:6d:ce:71:df:69:ae:73:da:e5:e1:01:c1:
                    56:91:11:3c:c9:31:cb:73:28:a8:50:0c:5d:f8:31:
                    40:ae:a0:73:2b:35:10:f4:2e:15:5b:a7:c5:4b:47:
                    47:ff:1e:9e:79:9b:fd:dd:bd:4f:04:8a:dc:59:97:
                    2f:7d:b4:1d:a6:f3:42:29:79:e2:a0:cd:41:fb:db:
                    e0:c5:55:48:77:25:3d:7f:4b:34:5c:7d:62:33:d5:
                    f9:8c:a4:25:06:f0:62:c1:d4:a6:9a:1b:dd:79:aa:
                    29:55:39:c1:a2:b7:3f:a7:9c:82:b0:75:8d:4b:a9:
                    76:d0:df:71:ac:16:ae:e6:d6:06:e8:af:d6:99:70:
                    ee:39:88:40:97:a1:f8:40:5b:50:49:07:39:58:91:
                    88:ea:dd:cd:12:3f:90:3d:3a:b5:de:d5:48:78:9d:
                    d0:d2:ca:8b:89:c4:61:44:43:c0:bf:7b:cf:cc:32:
                    97:1b:25:f0:41:f9:07:68:8c:3c:67:45:a1:90:5a:
                    f4:d4:57:88:f3:82:c0:65:95:21:33:ab:29:e0:bb:
                    5f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:76:71:11:6D:95:89:8D:90:5F:96:B0:44:BF:84:45:54:0C:78:22
            X509v3 Authority Key Identifier:
                keyid:A4:2B:C1:58:0F:0B:DE:92:11:FB:8C:08:91:4A:A5:C2:C0:11:21:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/AE0F1BEA42AC11F1AC02065EBB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:bf:45:1f:8b:f0:56:6b:86:af:00:73:fa:bb:4e:04:0b:92:
         2e:5f:98:a3:74:71:5c:69:6e:72:a9:34:77:bc:c8:d8:82:57:
         cc:6c:e4:59:46:a2:6b:7d:68:63:2d:bf:76:47:96:0e:17:35:
         02:a1:a3:38:0c:a3:60:df:95:12:1e:e6:f3:a0:88:99:da:d4:
         99:55:a4:f2:16:bc:9d:66:5b:34:ce:0f:64:7b:d4:79:23:57:
         cc:65:c7:ad:72:56:2d:21:d8:c1:47:c3:cf:5d:1e:00:34:3f:
         c6:8d:77:50:25:0d:9c:2a:75:6d:1f:e8:2d:8e:3a:ba:a5:62:
         87:c0:16:69:14:2e:b0:be:9d:53:14:45:a8:30:a5:d9:de:a8:
         ef:1e:2f:37:f6:0b:4a:c0:dc:75:4d:ce:7b:0f:4f:ca:2a:b0:
         26:42:d4:95:12:d2:3e:77:95:13:ab:4f:77:5b:cd:e0:7d:24:
         60:ca:6c:1a:94:45:28:c9:24:ef:79:38:dc:72:7b:b4:bb:2a:
         dd:3b:31:1a:b1:8f:06:18:8b:d2:b0:11:18:9d:66:26:b7:d2:
         ce:36:6a:d7:b9:14:1e:a9:b7:03:e5:c2:e5:9b:e7:aa:27:56:
         6e:f4:10:ad:c8:84:89:63:f2:26:65:4d:ed:93:04:6c:f8:3f:
         69:4a:c6:a2
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MTY2NzExMC8GA1UEBRMoQTQyQkMxNTgwRjBCREU5MjExRkI4QzA4OTE0QUE1QzJD
MDExMjE3QjAeFw0yNjA0MjgwMjQ4MDVaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZjAxZmU1LTEwZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXDr+DKfX/5uno48iRjQKSNn5obrlDDo/akTSrXHWoBJMQdnXjZkMO/V3hRb8n
J23Ocd9prnPa5eEBwVaRETzJMctzKKhQDF34MUCuoHMrNRD0LhVbp8VLR0f/Hp55
m/3dvU8EitxZly99tB2m80IpeeKgzUH72+DFVUh3JT1/SzRcfWIz1fmMpCUG8GLB
1KaaG915qilVOcGitz+nnIKwdY1LqXbQ33GsFq7m1gbor9aZcO45iECXofhAW1BJ
BzlYkYjq3c0SP5A9OrXe1Uh4ndDSyouJxGFEQ8C/e8/MMpcbJfBB+QdojDxnRaGQ
WvTUV4jzgsBllSEzqyngu1+9AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUznZxEW2V
iY2QX5awRL+ERVQMeCIwHwYDVR0jBBgwFoAUpCvBWA8L3pIR+4wIkUqlwsARIXsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxNjY3L0Q3RTk5MkNDNDI5
QTExRjFBRUZDOTA4NUI1ODMzNzczL3BDdkJXQThMM3BJUi00d0lrVXFsd3NBUklY
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcEN2QldBOEwzcElSLTR3SWtVcWx3c0FSSVhzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTY2Ny9EN0U5OTJDQzQyOUExMUYxQUVGQzkwODVCNTgzMzc3My9BRTBGMUJFQTQy
QUMxMUYxQUMwMjA2NUVCQjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGiBAAwDQYJKoZIhvcNAQELBQADggEBALe/RR+L8FZrhq8Ac/q7TgQL
ki5fmKN0cVxpbnKpNHe8yNiCV8xs5FlGomt9aGMtv3ZHlg4XNQKhozgMo2DflRIe
5vOgiJna1JlVpPIWvJ1mWzTOD2R71HkjV8xlx61yVi0h2MFHw89dHgA0P8aNd1Al
DZwqdW0f6C2OOrqlYofAFmkULrC+nVMURagwpdneqO8eLzf2C0rA3HVNznsPT8oq
sCZC1JUS0j53lROrT3dbzeB9JGDKbBqURSjJJO95ONxye7S7Kt07MRqxjwYYi9Kw
ERidZia30s42ate5FB6ptwPlwuWb56onVm70EK3IhIlj8iZlTe2TBGz4P2lKxqI=
-----END CERTIFICATE-----
Generated at Wed May 13 10:07:23 2026 by rpki-client