Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9AA7950249DF11F19EB53673AE833773.roa
File:                     9AA7950249DF11F19EB53673AE833773.roa (raw, json)
Hash identifier:          MXOd0+px7q6CDq9o//y8e1NvceuUbaOrM8lBbyHhUFg=
Subject key identifier:   6A:B7:9F:33:E4:FB:78:17:33:2D:14:A0:B8:20:E8:3D:D1:47:29:E2
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2DEA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9AA7950249DF11F19EB53673AE833773.roa
Signing time:             Thu 07 May 2026 06:40:15 +0000
ROA not before:           Thu 07 May 2026 06:40:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154650
IP address blocks:        162.4.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11754 (0x2dea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  7 06:40:15 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69fc33cf-ebe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:28:b0:96:83:8c:cb:11:22:fe:ea:4d:6f:5e:
                    2c:cf:11:d7:a1:a4:bd:8a:83:3d:dc:5a:a4:fc:08:
                    23:3e:5a:1a:a5:c4:c8:a4:07:15:35:f5:f8:87:bc:
                    ea:41:42:f9:e8:df:8c:04:b2:b5:ea:02:9c:61:ae:
                    17:20:75:e9:b9:bf:1e:55:2b:42:73:9e:bc:a2:05:
                    f1:45:ff:90:8f:3a:88:64:6c:16:b8:9c:07:5d:50:
                    6d:9f:28:f0:79:34:1a:5a:54:9b:cb:ad:9f:d3:d3:
                    09:a6:d3:ad:0d:8d:c8:af:16:99:a4:71:4d:87:17:
                    85:da:9d:47:c8:f5:0d:d0:58:ac:81:10:49:c5:b8:
                    42:42:1d:b3:92:62:e3:fd:38:a0:12:f9:61:2d:23:
                    45:52:7f:5a:4b:ce:b1:b2:18:cd:db:8e:ef:7a:fe:
                    f4:e5:22:5f:10:37:98:7f:8b:5b:3f:6b:10:f7:cf:
                    b3:c9:12:14:bf:99:9f:88:21:83:d2:6a:7e:75:90:
                    49:fb:0d:74:14:30:7b:94:ba:80:1c:d7:2f:d8:c8:
                    46:4b:6f:65:d3:49:4a:5c:0c:41:c2:c8:14:af:92:
                    6d:fe:51:06:11:2e:97:4a:bf:fb:6f:0a:9b:82:d1:
                    d1:55:ca:3b:9e:02:60:66:f9:a0:52:c6:de:52:aa:
                    5e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B7:9F:33:E4:FB:78:17:33:2D:14:A0:B8:20:E8:3D:D1:47:29:E2
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9AA7950249DF11F19EB53673AE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:14:6a:09:b6:8c:2e:d2:be:bb:26:6f:c2:43:c1:c0:0b:07:
         ea:cc:31:db:a9:df:88:64:d3:aa:f2:ce:f2:59:11:4b:ea:41:
         76:18:e3:3e:b3:aa:55:e1:a9:50:67:b6:da:f6:3e:64:c3:9f:
         c4:43:91:c4:9e:51:1d:62:ff:13:5c:2e:77:3b:72:6c:1a:9a:
         82:54:0c:73:f5:12:c2:8d:8f:3f:83:59:58:21:5c:66:1d:19:
         44:5c:14:1e:21:55:d6:45:01:fe:68:b1:56:f5:ce:27:08:30:
         d7:d9:a5:2f:bd:b2:c1:83:38:25:95:8f:1d:d4:bf:db:e6:06:
         83:36:2d:bb:28:76:fc:ab:20:b2:2e:b7:70:6e:df:b0:7f:6e:
         39:8d:49:da:56:6b:cf:9b:8e:88:bc:d9:51:8c:89:09:1a:8b:
         7f:81:a1:e4:d8:ab:29:5b:38:0f:2b:72:d0:4a:5d:78:e6:8d:
         13:d0:5e:97:12:96:28:7b:b7:27:9e:5b:27:cd:c7:7d:a7:3f:
         3d:07:80:3b:5d:69:82:87:e3:1d:dc:3e:f5:8b:0c:e3:21:74:
         9c:cf:a0:4c:82:95:5a:0f:d2:7a:13:b3:32:e7:37:d3:0e:d1:
         ef:1a:0d:74:4e:cb:12:eb:83:ee:81:77:26:17:6b:2e:91:57:
         ef:7c:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:30 2026 by rpki-client