Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/4EB8310C43EE11F19AC895DFAD833773.roa
File:                     4EB8310C43EE11F19AC895DFAD833773.roa (raw, json)
Hash identifier:          ZZGaP1aMdg0/Z8kpA6IgDd5lfHorn6nSTgSPV8+XGJE=
Subject key identifier:   7A:6E:BC:FA:0F:55:59:1E:09:39:F1:CD:2C:41:9E:33:0C:FB:B1:14
Certificate issuer:       /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial:       0A06
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/4EB8310C43EE11F19AC895DFAD833773.roa
Signing time:             Wed 29 Apr 2026 17:10:23 +0000
ROA not before:           Wed 29 Apr 2026 17:10:23 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     38818
IP address blocks:        49.0.128.0/19 maxlen: 19
                          49.0.168.0/21 maxlen: 21
                          203.34.37.0/24 maxlen: 24
                          203.174.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
                          rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2566 (0xa06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
        Validity
            Not Before: Apr 29 17:10:23 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69f23b7f-4c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e6:4d:76:8d:83:7f:56:3b:8a:17:ab:bc:74:
                    d1:d7:79:e0:38:42:92:4e:6d:ac:0d:4e:52:30:0b:
                    c6:ab:e8:6f:8a:92:00:a1:90:17:37:cb:b9:23:36:
                    76:9e:e9:fa:84:b0:4e:50:55:58:58:6a:7b:8d:ef:
                    6f:ec:04:e3:06:b4:6f:9f:d2:f8:9b:c2:d3:cf:f6:
                    d4:34:5b:7b:68:1d:b8:67:15:21:cc:cd:95:7a:20:
                    27:6a:23:86:8a:a4:f4:7e:aa:1a:6a:d1:bf:88:eb:
                    42:d5:4f:64:84:6c:e2:12:e0:13:53:72:6f:a4:1b:
                    be:16:19:71:cf:cb:c3:6b:ef:71:05:0f:09:f3:88:
                    44:33:70:16:00:fd:19:8a:f9:b4:43:dd:ed:f8:ba:
                    2e:41:9f:93:72:9a:28:74:9a:ac:d7:47:43:80:63:
                    d3:b5:b4:58:24:91:3a:73:81:5f:bd:90:83:18:f7:
                    b5:c9:17:b6:9e:c7:3d:13:19:d9:ba:42:b6:b6:1b:
                    df:4d:19:bf:f5:77:11:e5:f1:6f:bf:b6:17:cc:ee:
                    bf:1e:cd:f4:d0:d3:ef:f3:05:4a:39:f1:b8:40:47:
                    25:7d:82:81:5e:c4:2b:6b:7c:32:da:8e:ca:03:d5:
                    43:ef:89:d0:55:76:83:aa:99:8c:bf:94:05:89:8a:
                    65:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6E:BC:FA:0F:55:59:1E:09:39:F1:CD:2C:41:9E:33:0C:FB:B1:14
            X509v3 Authority Key Identifier:
                keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/4EB8310C43EE11F19AC895DFAD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.0.128.0/19
                  49.0.168.0/21
                  203.34.37.0/24
                  203.174.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:76:d2:d8:09:4f:94:e4:4f:e2:a3:44:32:dc:c0:d6:ca:4c:
         69:97:56:c8:f1:a7:ed:13:87:ec:70:38:2c:f5:c3:42:88:4b:
         27:e4:c1:bc:00:df:1c:11:9a:59:43:2e:91:e3:2c:33:98:ed:
         70:b3:4c:4b:1b:a0:32:f8:05:7a:3c:4f:3d:0d:3c:2b:99:20:
         7d:e1:75:08:5c:6a:2a:a3:b0:52:f8:d6:98:26:11:fb:b7:7d:
         39:c6:30:07:8d:ad:a9:2d:5a:6e:e4:5e:35:be:39:47:2f:52:
         47:10:f8:d2:02:3e:66:9e:a1:08:8a:51:8b:60:55:04:01:ab:
         41:76:a9:60:b1:be:08:74:d9:0d:e1:bb:8d:58:08:9f:84:1e:
         46:99:46:1d:9c:b2:55:5a:24:24:40:ae:c2:0f:89:23:e9:76:
         23:f1:bc:20:61:86:be:6b:33:26:50:33:78:38:f2:e7:cd:b0:
         99:3a:e3:21:ca:c0:67:5d:75:aa:c8:6e:1d:6f:6f:92:2c:64:
         26:86:df:fc:46:3e:6a:15:c4:6c:ab:63:e3:a6:71:79:70:7e:
         38:fe:30:cc:62:88:7d:7b:5b:21:06:00:59:ed:8c:98:e6:73:
         90:a9:d2:a7:85:e4:32:07:de:4d:5e:86:3d:66:ef:ad:43:56:
         51:e1:3c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:56 2026 by rpki-client