Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/81DF53EC15E711F19073865B1E3D8C67.roa
File:                     81DF53EC15E711F19073865B1E3D8C67.roa (raw, json)
Hash identifier:          lz72KD358vKfCGIFwoY/wR/If6t4s5fk8otmTQAsnWM=
Subject key identifier:   0F:9F:3C:58:4F:0D:30:3B:00:73:C5:01:C9:9D:9F:68:97:78:7B:C9
Certificate issuer:       /CN=A917972C/serialNumber=869799BA0ABF60DDF2C1AD8FC0C1F6600496A916
Certificate serial:       27
Authority key identifier: 86:97:99:BA:0A:BF:60:DD:F2:C1:AD:8F:C0:C1:F6:60:04:96:A9:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/81DF53EC15E711F19073865B1E3D8C67.roa
Signing time:             Tue 05 May 2026 09:42:06 +0000
ROA not before:           Tue 05 May 2026 09:42:05 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     4851
IP address blocks:        202.128.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.crl
                          rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917972C, serialNumber=869799BA0ABF60DDF2C1AD8FC0C1F6600496A916
        Validity
            Not Before: May  5 09:42:05 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f9bb6d-2299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:55:fc:3a:20:b6:1c:36:f2:2b:12:69:dd:
                    94:4f:a5:88:dc:91:45:c5:48:25:64:31:e0:cd:61:
                    87:e3:ca:cd:86:7e:b9:d2:9f:64:2a:e7:bf:84:e8:
                    b3:20:24:52:15:aa:47:23:51:57:85:bc:58:9c:85:
                    b4:e5:cf:de:16:fe:27:5c:dc:6c:a5:2b:ee:2e:45:
                    b9:54:8f:c5:d1:76:43:92:d5:05:96:42:0c:24:ee:
                    23:d3:2a:7b:bd:56:83:02:fe:e9:a1:68:61:b1:63:
                    99:4d:7d:cf:59:04:5c:4f:64:5e:fe:69:b6:45:1b:
                    1f:38:1f:68:30:ec:6c:7e:2a:de:44:20:ee:ce:70:
                    e8:6d:02:a2:3d:93:53:ca:9d:89:33:0b:b6:a1:74:
                    bf:9b:da:16:01:51:70:d4:66:5f:a8:bb:a2:e4:d6:
                    02:65:53:cf:34:1a:49:ea:76:3e:40:26:b4:ef:74:
                    2b:85:b8:d0:98:93:ef:76:27:f2:29:49:cd:7f:5f:
                    18:36:91:bd:71:0d:d1:b4:3b:dc:0a:c5:82:90:63:
                    f8:f4:f4:a3:f9:be:2a:a4:20:cd:ae:d3:42:d0:ca:
                    73:99:b7:1e:64:7c:31:5f:43:a8:9e:37:61:cb:c0:
                    5a:37:3d:90:97:8c:69:e1:76:e2:83:65:f5:55:5f:
                    92:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9F:3C:58:4F:0D:30:3B:00:73:C5:01:C9:9D:9F:68:97:78:7B:C9
            X509v3 Authority Key Identifier:
                keyid:86:97:99:BA:0A:BF:60:DD:F2:C1:AD:8F:C0:C1:F6:60:04:96:A9:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/81DF53EC15E711F19073865B1E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.128.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:ac:9b:b4:c2:e5:a9:27:a8:12:70:a3:c4:b7:45:50:da:1b:
         99:b3:93:29:cc:c5:01:bf:de:4e:25:c4:80:b0:f3:c6:cf:85:
         a5:e7:39:f3:e2:45:13:38:46:c1:1f:3b:fa:dc:66:30:cf:c0:
         19:c8:a7:7d:07:2a:a8:dc:13:2f:ba:d5:c9:a7:0c:db:54:54:
         47:e2:05:a5:0e:1c:2d:0f:8a:18:b5:70:5f:a9:62:ab:75:3a:
         f4:99:68:8f:58:77:31:2a:cd:0c:05:14:a5:82:eb:a9:bf:7c:
         1a:6a:56:84:80:d9:22:8a:34:43:6f:4a:9f:a2:03:3d:2c:c8:
         12:38:8e:82:51:7b:0f:5c:0d:cd:ac:1b:c8:02:34:bf:6f:f5:
         8c:e2:1d:59:08:9a:de:eb:99:72:f7:2c:c2:c4:c1:d9:bb:6d:
         03:31:6b:4b:26:5e:b1:2b:19:31:0e:76:26:44:d3:57:5e:cd:
         fa:8a:95:23:00:fb:0d:9f:90:88:20:de:8c:2e:b2:b6:fa:95:
         70:30:f5:44:5a:89:37:77:36:d7:81:de:f8:14:15:e8:c5:42:
         c6:29:2b:f2:78:69:3a:66:c2:66:9b:40:d7:95:f5:f2:97:d4:
         28:c9:6c:f1:ce:d9:85:be:f3:8f:89:c1:97:9a:48:4f:7a:19:
         83:ae:86:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 07:21:03 2026 by rpki-client