Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/78321A66068D11EF92608943C4F9AE02.roa
File:                     78321A66068D11EF92608943C4F9AE02.roa (raw, json)
Hash identifier:          5UiyGeebz2scg4gBW5wMGNarCtgnSEGr0R8BVofACP0=
Subject key identifier:   89:CA:84:B7:7B:66:B8:EA:C3:62:5C:2F:97:E2:FC:DD:FC:3B:97:11
Certificate issuer:       /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372
Certificate serial:       01C1
Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/78321A66068D11EF92608943C4F9AE02.roa
Signing time:             Sun 03 May 2026 04:36:16 +0000
ROA not before:           Sun 03 May 2026 04:36:16 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        202.14.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl
                          rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372
        Validity
            Not Before: May  3 04:36:16 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f6d0c0-3b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:35:fb:bb:dc:d6:42:e2:97:d4:98:26:2f:6a:
                    68:8f:70:f9:47:ae:0f:65:30:c3:19:38:e9:98:bb:
                    69:9a:0e:eb:68:3e:88:c3:0c:0c:2d:36:c7:e0:d5:
                    06:e4:d0:31:7d:c2:b6:50:97:58:e9:cc:2f:eb:2b:
                    70:23:3d:8d:27:63:7e:e4:ee:b8:95:f0:07:d9:ae:
                    b1:46:29:b8:f3:5b:80:b5:02:65:e3:b3:86:c1:14:
                    f7:d0:96:c9:80:5c:33:e0:a1:00:58:cc:52:7c:ae:
                    73:bc:00:f2:76:58:42:79:78:32:60:cb:bf:78:dc:
                    92:9f:b8:39:ce:4b:bf:8c:dc:31:34:03:03:8d:0d:
                    f9:c9:e6:28:e0:a1:0a:1c:a6:84:ca:bf:c9:ab:ca:
                    0d:53:ab:3b:1e:2d:6b:ec:d7:52:79:d5:00:0d:c5:
                    45:54:72:2b:a5:53:e9:74:36:23:60:9d:32:c7:63:
                    0e:a2:4f:b1:4c:49:69:0e:3a:23:cd:e2:76:36:0b:
                    d4:04:ea:97:c0:04:fa:2d:e6:2f:89:15:5a:f7:29:
                    cc:64:3c:ed:86:30:0b:05:8f:eb:70:0c:20:44:ac:
                    4f:90:7a:bd:3b:c0:8c:23:e7:f3:19:89:e0:41:46:
                    5a:41:dc:b7:0b:b1:3a:f7:bf:6d:45:3c:b8:db:50:
                    b7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CA:84:B7:7B:66:B8:EA:C3:62:5C:2F:97:E2:FC:DD:FC:3B:97:11
            X509v3 Authority Key Identifier:
                keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/78321A66068D11EF92608943C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.14.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:b8:70:0b:eb:41:f1:5f:93:93:25:7e:a4:cd:73:a3:08:b4:
         9a:e4:2e:c7:0e:86:46:8b:bb:75:14:7a:9c:cb:48:a0:2e:f3:
         66:8f:fa:b3:08:64:1f:64:f9:42:ef:85:5b:c3:61:df:8b:f8:
         bd:3f:58:06:40:d9:2c:c5:89:84:c1:ca:d3:27:aa:04:5a:1a:
         cd:20:43:72:d7:1b:88:ab:4c:f4:4d:22:66:12:f6:0a:5e:61:
         63:4a:60:75:17:98:ad:4d:33:56:74:f9:89:18:a1:31:28:dc:
         3d:d6:74:d2:5c:12:ee:72:f5:28:55:ee:e5:73:b4:05:8e:cc:
         11:26:44:44:5a:72:8c:96:08:ef:7c:bc:ec:c4:c8:a3:e1:e5:
         1b:70:67:4e:3e:42:60:48:02:6b:4e:f6:9f:4a:fc:d8:50:d2:
         5f:ff:27:4f:32:f1:c9:c1:e7:e6:33:d0:3f:7b:d0:56:32:46:
         bb:4e:50:a0:4b:11:2e:44:70:cc:00:74:44:fc:01:ed:00:88:
         cd:49:ce:b2:ee:67:dc:c3:ae:5f:12:58:51:02:98:98:44:28:
         8c:11:e2:c7:61:67:09:df:a8:8a:91:e0:67:0b:e8:e6:75:16:
         d5:5f:a9:3d:63:69:71:7f:23:73:01:ad:a2:14:0a:a2:ad:58:
         99:c9:26:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:42:40 2026 by rpki-client