Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/36ACD53E49FE11F1B48580CBBD833773.roa
File:                     36ACD53E49FE11F1B48580CBBD833773.roa (raw, json)
Hash identifier:          2h8Ac5NQWyyJjC325JvGwENZEWd/12mzHWYCD7GMM3Q=
Subject key identifier:   D7:F3:1B:30:D7:3A:EA:7C:09:DB:EE:55:FD:05:8C:89:D3:F7:72:84
Certificate issuer:       /CN=A91E0727/serialNumber=E49D63201867A91FB2E995002A7CCB53F341E75B
Certificate serial:       04
Authority key identifier: E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/36ACD53E49FE11F1B48580CBBD833773.roa
Signing time:             Thu 07 May 2026 10:20:06 +0000
ROA not before:           Thu 07 May 2026 10:20:06 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     154658
IP address blocks:        162.4.94.0/23 maxlen: 23
                          162.4.94.0/24 maxlen: 24
                          162.4.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl
                          rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0727, serialNumber=E49D63201867A91FB2E995002A7CCB53F341E75B
        Validity
            Not Before: May  7 10:20:06 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=69fc6756-86a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:26:4e:63:78:c9:0c:87:89:1b:43:67:1c:
                    95:cb:df:23:18:15:3f:e7:a2:f4:9b:ce:84:3a:55:
                    85:35:78:66:c6:a6:47:54:9f:ae:ef:03:bc:26:b5:
                    db:ba:6c:87:b6:11:d2:27:ee:7a:3a:60:c8:cb:e0:
                    3e:4e:78:53:22:a1:14:89:fc:81:d3:f6:db:17:39:
                    1a:5f:19:3a:e0:49:c5:60:4e:b6:f2:71:98:ce:fa:
                    0c:43:c0:71:ec:4c:e4:d0:be:e9:08:cf:d4:60:0c:
                    9f:ae:e1:19:9b:a0:da:15:e0:40:e9:eb:e2:95:c2:
                    45:02:ff:b7:97:b3:97:c5:5e:b1:30:4a:3d:0a:c9:
                    02:05:a8:4f:53:dd:61:d7:33:9a:d1:81:81:64:54:
                    a9:13:5f:b8:98:ca:5f:ff:18:2f:73:cb:c5:ae:15:
                    4a:22:f8:d0:3b:1d:a1:90:f0:68:ee:ea:16:ac:ac:
                    75:53:d6:d0:00:ea:f6:6b:45:dd:a7:f8:87:83:53:
                    ed:c8:73:4b:81:eb:44:14:cc:1b:cb:f6:67:12:46:
                    4d:f3:9e:62:a0:20:bd:37:52:77:57:6c:34:86:70:
                    80:97:11:75:9f:cc:2a:ed:33:0f:40:fc:68:0a:46:
                    e4:b8:a8:a8:33:ee:82:b2:05:06:4c:21:5f:1d:3f:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F3:1B:30:D7:3A:EA:7C:09:DB:EE:55:FD:05:8C:89:D3:F7:72:84
            X509v3 Authority Key Identifier:
                keyid:E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/36ACD53E49FE11F1B48580CBBD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:c2:76:03:f7:68:00:3b:a8:88:d5:d0:25:65:2c:dd:77:0f:
         7a:79:e8:b9:18:68:d4:59:6a:5e:32:1f:dc:87:e2:ec:37:d7:
         fc:64:01:b6:0f:f9:8b:38:84:8c:0e:46:e7:26:72:01:c3:b2:
         9a:95:14:59:b1:40:d8:79:28:aa:8b:c8:64:8f:e8:cc:18:69:
         c9:67:a8:05:16:80:e8:82:6f:91:87:d3:a1:4f:5c:bf:99:9f:
         59:57:b3:33:4d:68:bb:6b:ec:9e:99:58:ef:fa:4e:71:d0:62:
         05:37:d0:9c:44:a3:00:d1:8d:59:b8:82:6f:a1:6e:26:b3:42:
         c2:4e:a8:99:c2:ea:31:02:e5:a5:d9:47:d0:17:81:4f:2f:3d:
         bc:a1:dc:ee:cd:b1:f2:61:e3:78:ad:79:84:6c:56:22:cf:e3:
         c4:3f:fd:89:e3:69:cc:9c:20:5d:a6:d2:cc:07:cc:58:60:42:
         05:8f:f0:d1:90:b9:75:1f:b3:24:62:6c:75:0b:ee:46:7d:76:
         8f:1d:72:60:e4:52:53:15:78:9b:29:b4:23:75:e9:a0:14:09:
         63:e8:aa:f9:28:36:14:fb:c9:0a:2d:43:00:c8:b9:15:a7:1b:
         b6:b3:8b:c2:8b:44:47:4e:2b:f7:be:3e:7f:cf:30:1c:dc:40:
         66:27:d8:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 08:25:07 2026 by rpki-client