Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/9EE84698489A11F1AF98834FB4833773.roa
File:                     9EE84698489A11F1AF98834FB4833773.roa (raw, json)
Hash identifier:          HyVMau6tP4Gxadmevajmg0fDJUTUHCH9joRR5GgFIHM=
Subject key identifier:   B4:2C:47:69:0B:B7:75:C9:57:C9:17:52:F4:C8:EE:1D:02:DB:D7:89
Certificate issuer:       /CN=A913284A/serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Certificate serial:       21
Authority key identifier: A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/9EE84698489A11F1AF98834FB4833773.roa
Signing time:             Tue 05 May 2026 15:53:55 +0000
ROA not before:           Tue 05 May 2026 15:53:55 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     141198
IP address blocks:        163.128.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
                          rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913284A, serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
        Validity
            Not Before: May  5 15:53:55 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69fa1293-0c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:37:ae:9e:c8:a7:0b:e0:15:0e:ea:3a:65:
                    98:ff:1e:e1:44:5e:cd:15:36:fa:b5:a3:b6:e9:0d:
                    7f:33:d5:db:97:5e:67:e5:67:dd:2e:a3:86:f1:f5:
                    af:18:07:5e:a7:42:fe:92:fd:ea:08:77:f8:80:99:
                    e7:6d:7f:44:0b:5c:e7:cc:cb:80:da:61:1e:73:32:
                    52:6b:6d:4a:2c:d5:5d:8e:e9:3e:f4:64:c3:57:f1:
                    80:0d:b8:a7:ca:38:02:f5:d2:2e:7a:95:47:22:fe:
                    6d:41:e8:ae:d7:85:f1:4d:ca:fd:0c:e3:13:84:00:
                    5b:a0:d7:72:ff:49:aa:1f:bb:2c:54:d2:9d:82:27:
                    6b:90:96:c8:71:0c:00:45:b4:ab:41:d8:2e:28:c1:
                    dd:b1:36:de:6f:e2:9a:3d:37:1e:d5:63:3b:62:e2:
                    1d:88:6c:7c:2e:f2:c2:2c:71:30:20:1b:c4:cc:8e:
                    ad:f8:db:e7:f3:32:42:b0:07:97:d1:6a:ae:ad:d4:
                    b6:e1:64:25:24:b7:95:2b:ec:23:ad:2d:61:57:65:
                    1d:63:a1:f3:45:66:82:d6:b3:c1:ee:d2:ce:cc:a7:
                    9d:ac:79:a4:0c:9e:b5:7e:7e:90:23:43:49:d8:46:
                    74:30:07:e8:69:65:c6:ae:6d:da:b2:6b:0d:59:eb:
                    74:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2C:47:69:0B:B7:75:C9:57:C9:17:52:F4:C8:EE:1D:02:DB:D7:89
            X509v3 Authority Key Identifier:
                keyid:A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/9EE84698489A11F1AF98834FB4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:d6:ff:84:cc:f0:30:21:a6:6f:4c:3d:c7:8d:45:e9:6e:3b:
         11:12:30:bf:45:37:7e:70:fe:4a:4c:b4:c3:4b:0f:79:d0:b3:
         ad:da:62:5c:e3:05:34:ab:01:c4:8b:83:bd:04:a5:bc:23:65:
         97:91:4a:27:32:12:52:bb:4d:7d:21:1b:87:8f:e8:37:b8:18:
         9a:aa:ff:77:b6:d0:66:66:61:55:be:e1:77:f1:87:17:e5:4b:
         0e:58:77:b7:18:b0:6b:00:25:f7:ce:70:b4:bb:f1:0b:28:a9:
         3e:11:f2:bd:66:d2:e9:f8:fc:07:6c:0b:e7:39:56:ad:9e:2a:
         2e:4d:e5:e5:c9:67:4c:8e:73:8a:23:76:ff:88:9f:d0:e1:76:
         5b:7f:c5:ab:2e:ed:ef:d6:52:b0:9d:4e:4e:1b:df:2c:29:8d:
         f3:fe:92:e3:12:92:d4:47:db:d4:f1:dc:56:65:ad:51:76:3f:
         db:97:5a:a3:e0:21:6c:24:17:8a:8a:8c:8f:c2:21:34:a8:5f:
         9b:6b:20:3d:98:22:39:07:08:84:2c:6f:8b:15:18:72:f8:73:
         d3:67:9d:41:fd:c3:70:d3:40:db:53:1b:b8:b4:5b:61:6d:bc:
         0c:7b:84:74:fb:68:f2:74:21:e2:6c:45:bf:4b:a7:ec:07:d4:
         a9:f2:15:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 10:23:38 2026 by rpki-client