Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/E550A654A87411F1A927229E4A11F970.roa
File:                     E550A654A87411F1A927229E4A11F970.roa (raw, json)
Hash identifier:          oc/TKsyHzzWMYT3IVnUL38CFiVDo4LqwhQVtEiYOenw=
Subject key identifier:   99:59:9E:D3:B8:EA:13:6A:D9:A5:E2:67:DD:E0:54:44:E1:45:C5:B0
Certificate issuer:       /CN=A9192BA7/serialNumber=626F8CA4A4EC3CB998F6EA24A8E556F920A19048
Certificate serial:       05
Authority key identifier: 62:6F:8C:A4:A4:EC:3C:B9:98:F6:EA:24:A8:E5:56:F9:20:A1:90:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym-MpKTsPLmY9uokqOVW-SChkEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/E550A654A87411F1A927229E4A11F970.roa
Signing time:             Fri 04 Sep 2026 15:25:45 +0000
ROA not before:           Fri 04 Sep 2026 15:25:45 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     4907
IP address blocks:        163.52.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/Ym-MpKTsPLmY9uokqOVW-SChkEg.crl
                          rsync://rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/Ym-MpKTsPLmY9uokqOVW-SChkEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym-MpKTsPLmY9uokqOVW-SChkEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 09:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192BA7, serialNumber=626F8CA4A4EC3CB998F6EA24A8E556F920A19048
        Validity
            Not Before: Sep  4 15:25:45 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6a9ae2f8-9665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:0c:f4:3a:f9:4c:37:6a:47:6c:26:33:b2:
                    e1:56:f8:8f:4a:8d:13:9a:75:f9:00:8a:8d:f0:fa:
                    17:5a:81:a4:9a:35:2b:82:99:b1:dd:df:c1:15:cf:
                    b9:26:03:88:de:05:6a:be:da:68:04:aa:4f:86:dc:
                    0f:71:9f:5d:f4:5e:1e:a3:34:73:bc:1c:58:cc:1a:
                    e6:c8:1c:d8:fc:95:11:89:00:e6:37:f5:83:a9:33:
                    38:4f:d4:41:87:fd:4e:bd:53:37:a4:73:54:cd:10:
                    1d:46:f9:1b:f7:da:6a:be:45:31:c6:83:eb:5d:15:
                    a9:df:1a:f6:b2:62:41:42:03:c4:1e:ec:b1:42:2c:
                    f8:1c:55:fd:8a:ac:9c:f8:91:ac:90:86:ab:3b:03:
                    be:84:ac:50:16:96:bd:89:aa:69:fd:d0:50:b9:3b:
                    be:f0:8b:fd:dc:98:fd:7e:a3:a3:da:48:e0:ba:95:
                    ae:01:69:8a:85:81:cf:a6:ba:e3:b6:7a:76:2c:4a:
                    63:be:0e:3b:56:e6:6c:5a:43:99:6e:db:1a:cd:3b:
                    98:cc:bc:46:b4:5a:05:f0:86:db:af:cc:68:29:4f:
                    69:fb:dc:f6:f6:49:90:eb:9e:3e:fd:c8:f7:90:f6:
                    17:da:d0:c0:1d:59:07:77:ec:22:a5:80:47:cc:89:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:59:9E:D3:B8:EA:13:6A:D9:A5:E2:67:DD:E0:54:44:E1:45:C5:B0
            X509v3 Authority Key Identifier:
                keyid:62:6F:8C:A4:A4:EC:3C:B9:98:F6:EA:24:A8:E5:56:F9:20:A1:90:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/Ym-MpKTsPLmY9uokqOVW-SChkEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym-MpKTsPLmY9uokqOVW-SChkEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BA7/5B1DA934A83111F181E817AC3511F970/E550A654A87411F1A927229E4A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:4d:cf:7a:2f:3d:8c:5a:45:36:8b:ab:84:15:09:3e:2a:bc:
         a9:71:1d:e2:38:9c:96:d2:40:57:83:49:87:6d:48:0e:5a:e5:
         15:36:d1:ce:85:44:f7:05:54:e8:2e:8a:07:4f:76:25:0b:55:
         44:85:a7:d6:e7:0e:48:9d:9a:d9:03:86:d8:4b:31:4f:32:92:
         2c:66:61:e5:e0:fe:6b:8c:01:ea:2a:b1:21:86:34:4d:66:3a:
         59:04:5f:42:9d:9f:e3:91:79:e4:ec:27:8d:5c:46:92:de:4a:
         eb:d3:9c:85:f2:e3:29:ca:5a:6e:49:39:b5:9b:02:68:15:57:
         4d:4c:7d:03:26:8c:9c:ed:66:37:b1:8d:1f:e7:2e:c7:78:10:
         1a:28:c5:8e:a7:ad:b8:db:eb:78:1b:78:22:2a:4c:d6:ba:79:
         2d:91:7d:58:59:e5:00:d8:9d:ca:4c:3a:85:3a:8e:a2:02:74:
         a0:67:76:c5:6d:6e:ad:70:62:08:47:93:20:09:ae:cc:16:6e:
         2f:71:9c:67:23:a9:3d:60:42:da:f5:db:2b:80:ee:24:cb:a4:
         70:e8:d8:81:8a:91:72:c0:fa:5d:20:19:38:a1:f2:d1:21:17:
         6e:6b:37:f9:b9:94:9b:b6:87:5d:f1:c6:23:cf:6e:df:4f:e2:
         00:b5:80:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 27 05:11:27 2026 by rpki-client