Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/5B12B2B0915511F1A8A4FE826911F970.roa
File:                     5B12B2B0915511F1A8A4FE826911F970.roa (raw, json)
Hash identifier:          HrmVhWrBT16ZorM9C2f2yDdovxpvH6JykEKOijJcSOk=
Subject key identifier:   64:3F:45:66:AF:0C:98:3D:55:DE:52:C3:F9:58:5C:E9:FA:C3:F4:02
Certificate issuer:       /CN=A915B358/serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08
Certificate serial:       47
Authority key identifier: CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/5B12B2B0915511F1A8A4FE826911F970.roa
Signing time:             Thu 06 Aug 2026 05:12:01 +0000
ROA not before:           Thu 06 Aug 2026 05:12:01 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138077
IP address blocks:        9.176.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl
                          rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Sep 2026 07:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B358, serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08
        Validity
            Not Before: Aug  6 05:12:01 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a7417a1-a3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:2f:4f:8b:8c:3d:f0:e1:54:a4:79:0a:9a:
                    08:52:f8:65:c0:a3:7c:41:e0:16:16:1e:db:8e:67:
                    16:91:a2:c0:03:8d:7a:f2:dd:cb:7f:c6:c6:f4:49:
                    6a:09:da:6e:f6:20:89:e6:ac:84:ed:d5:bf:58:12:
                    68:eb:f7:82:50:20:1f:78:35:ba:6f:7b:41:7b:15:
                    eb:05:dc:aa:34:79:97:e5:1f:ee:a5:0b:2d:f9:4d:
                    ee:80:7e:25:86:df:69:ce:da:00:02:c3:e3:a2:59:
                    22:77:45:d4:40:43:b9:5b:13:7d:0c:35:15:8d:e2:
                    ae:20:46:4b:2b:5d:29:0b:ba:cf:c8:45:cd:86:ef:
                    8f:4a:52:31:e0:a7:82:ff:09:29:fd:3f:b5:ac:9f:
                    e9:c8:fb:64:c2:b5:5f:0b:fb:2b:ab:cd:1a:9a:eb:
                    9e:2b:36:72:6c:11:1f:a5:40:16:f9:03:3e:8c:b7:
                    4d:ee:70:e6:e4:13:69:12:d4:f0:04:80:2d:1a:1c:
                    4d:53:57:47:7f:81:16:96:19:a1:cb:8b:8a:db:9b:
                    e2:a9:86:45:c1:07:16:49:de:6f:21:9f:12:1d:7f:
                    86:9c:da:6b:d7:00:7d:39:96:90:75:78:09:a9:d4:
                    ce:66:a8:53:02:5a:75:49:99:37:a5:33:2d:db:d2:
                    49:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3F:45:66:AF:0C:98:3D:55:DE:52:C3:F9:58:5C:E9:FA:C3:F4:02
            X509v3 Authority Key Identifier:
                keyid:CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/5B12B2B0915511F1A8A4FE826911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  9.176.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:b9:8c:32:ce:99:1a:db:cc:22:76:1c:0a:67:87:5e:36:3f:
         e6:6c:47:8d:5b:12:85:06:99:6f:60:77:02:7d:b7:54:08:56:
         83:49:77:b8:8c:ba:b5:b7:cd:ef:fc:a8:14:29:e2:a9:60:bc:
         90:05:ba:71:f6:59:f2:bb:06:55:b0:3e:af:b0:3d:87:dc:55:
         eb:51:45:08:a1:b3:ca:74:38:ec:7b:e7:a5:e6:09:f0:fe:1c:
         cc:4f:70:9d:92:9d:39:16:3e:ad:d7:53:76:6c:35:a0:ea:9c:
         09:2e:75:92:53:7f:4d:c4:b4:0e:ae:74:c7:24:2c:06:ec:5c:
         6b:b3:44:f8:57:2f:af:a7:6b:35:d2:26:01:d5:62:a1:3a:05:
         6f:c2:14:46:96:30:1c:fc:09:3e:8c:db:be:aa:47:fc:75:54:
         8a:80:d3:d0:7c:e2:89:24:b5:28:0d:71:3a:35:39:bf:0d:84:
         18:54:02:69:e7:47:b4:00:41:05:ab:b7:f2:fc:f3:0e:4a:4f:
         40:62:3a:e4:b8:e6:bd:80:6d:c2:58:ce:ec:ed:91:74:f6:da:
         14:98:8a:41:e9:f4:b0:a1:c4:b0:57:95:95:8e:94:6c:f8:5a:
         b2:94:e9:00:fb:de:f3:e2:13:ef:6e:83:1f:4a:e2:8e:b7:d3:
         08:89:37:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 3 05:56:11 2026 by rpki-client