Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/F0E0CF60704A11F1AA917C3A69A30FBC.roa
File:                     F0E0CF60704A11F1AA917C3A69A30FBC.roa (raw, json)
Hash identifier:          T7cQPpGymV431fzOWN6uN6vQT98Cn1J8xQwSWH64Poc=
Subject key identifier:   41:0A:2C:99:7D:14:2F:40:08:CA:6F:18:A9:5E:1D:30:A1:03:98:BE
Certificate issuer:       /CN=A9167352/serialNumber=C9A7ADAEBC8DEBFCF14B30B7EF7F613B35B379A1
Certificate serial:       32
Authority key identifier: C9:A7:AD:AE:BC:8D:EB:FC:F1:4B:30:B7:EF:7F:61:3B:35:B3:79:A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yaetrryN6_zxSzC3739hOzWzeaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/F0E0CF60704A11F1AA917C3A69A30FBC.roa
Signing time:             Wed 23 Sep 2026 08:58:11 +0000
ROA not before:           Wed 23 Sep 2026 08:58:11 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     137923
IP address blocks:        198.17.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/yaetrryN6_zxSzC3739hOzWzeaE.crl
                          rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/yaetrryN6_zxSzC3739hOzWzeaE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yaetrryN6_zxSzC3739hOzWzeaE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167352, serialNumber=C9A7ADAEBC8DEBFCF14B30B7EF7F613B35B379A1
        Validity
            Not Before: Sep 23 08:58:11 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab394a3-f3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9c:34:4e:c9:b5:dc:ab:ac:0c:c9:cc:f7:13:
                    12:72:a5:83:96:76:74:ad:21:28:52:22:bf:32:a9:
                    75:57:ed:98:5e:cd:12:cb:20:a8:47:68:71:e8:6f:
                    52:b4:ea:f0:ad:08:18:39:8c:0c:44:d5:67:b1:51:
                    89:66:eb:3c:a7:a8:96:05:1c:d0:ab:c7:cf:2a:f4:
                    8d:23:a7:d2:d1:17:df:38:e1:d5:f5:c6:5e:2a:2b:
                    f5:d3:7e:9f:dc:af:06:97:c7:95:bb:cb:95:50:38:
                    b6:dc:52:13:b6:ac:5e:6c:1d:cd:98:1c:a5:c0:6e:
                    02:54:0a:9a:1d:cb:fd:16:ce:81:40:c4:30:28:23:
                    45:f1:98:bd:e2:9f:a8:1a:8a:c4:89:14:b9:cb:bd:
                    49:fb:1d:8b:b4:e2:de:f9:dc:33:cb:9d:92:54:db:
                    10:96:b8:37:d8:df:4c:35:82:5c:01:9f:00:26:cf:
                    0f:17:95:28:4d:01:2d:87:9e:18:06:3f:16:31:6c:
                    ba:62:c1:3a:bc:f1:2f:70:1c:c7:d1:18:ce:8c:1b:
                    4e:19:3a:f7:b7:bf:c5:4a:96:84:e1:9d:6a:33:ba:
                    fc:5e:31:6b:c4:5b:e3:54:09:f1:4c:10:63:a3:f8:
                    0d:be:e6:c6:3c:c8:d4:93:cd:cc:7f:be:0b:bb:1c:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0A:2C:99:7D:14:2F:40:08:CA:6F:18:A9:5E:1D:30:A1:03:98:BE
            X509v3 Authority Key Identifier:
                keyid:C9:A7:AD:AE:BC:8D:EB:FC:F1:4B:30:B7:EF:7F:61:3B:35:B3:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/yaetrryN6_zxSzC3739hOzWzeaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yaetrryN6_zxSzC3739hOzWzeaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/F0E0CF60704A11F1AA917C3A69A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:55:8b:60:0b:d2:24:cb:1a:86:68:b5:ed:38:36:59:77:ec:
         b4:c7:06:35:14:50:95:0c:aa:01:16:38:93:42:63:d3:04:be:
         86:c9:e9:d8:1a:c1:27:9f:c0:14:4a:fa:81:43:e5:e3:fa:1b:
         43:13:70:93:5e:24:e2:6f:bb:75:29:f6:fc:85:cc:d2:73:06:
         99:18:c1:c2:da:67:d6:f3:02:c1:bc:a3:c5:1a:83:d6:57:66:
         76:1a:4c:09:99:bf:90:9d:37:b1:29:1b:ef:4f:31:40:2b:05:
         e4:ed:6c:a2:5a:ae:a4:4e:cd:b2:a6:ca:56:b8:80:0e:78:37:
         b1:54:1a:22:a7:00:c4:ce:f5:dd:01:fd:0a:75:25:74:4e:0e:
         76:1d:48:c4:2a:c8:d7:aa:1c:dc:a6:ba:e4:74:58:dd:13:90:
         31:6b:9c:f0:7a:bb:68:b2:a4:e1:cd:5f:62:ba:60:77:85:19:
         dd:6e:1e:34:b7:93:d0:05:aa:29:72:86:66:92:62:7e:bd:a8:
         6a:97:48:96:89:51:54:92:62:1e:0d:8d:6a:9f:8e:55:ed:82:
         91:c9:8a:ad:4c:fc:1e:66:27:92:49:49:d6:27:17:5f:fb:91:
         1d:63:52:f6:bc:77:5e:17:bf:a7:d7:9d:43:ab:6e:fa:4c:72:
         c9:3b:32:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 27 21:18:29 2026 by rpki-client