Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/47B17AE48B2911F198C4B09681EE528E.roa
File:                     47B17AE48B2911F198C4B09681EE528E.roa (raw, json)
Hash identifier:          jgMCgh6U8M9QpIXWs6QMJZGNfrnnxeAEbiLKeOOdRSk=
Subject key identifier:   7F:D7:06:B8:59:11:25:4B:2C:50:4B:5D:C0:15:57:51:54:B6:82:77
Certificate issuer:       /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial:       0A2C
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/47B17AE48B2911F198C4B09681EE528E.roa
Signing time:             Wed 02 Sep 2026 20:41:40 +0000
ROA not before:           Wed 02 Sep 2026 20:41:40 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     4755
IP address blocks:        45.117.203.0/24 maxlen: 24
                          45.126.163.0/24 maxlen: 24
                          150.107.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
                          rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2604 (0xa2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
        Validity
            Not Before: Sep  2 20:41:40 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a988a04-bb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f8:fb:09:de:41:63:af:b7:a6:03:9e:63:7b:
                    f8:91:70:cd:27:c1:32:9e:92:07:1d:d7:ea:1f:ff:
                    69:eb:b4:2b:f8:67:e3:71:20:74:33:e2:25:1d:e9:
                    16:5e:99:31:c8:b9:d3:2a:27:37:b4:f0:7f:20:94:
                    16:54:53:5b:b6:b8:31:3b:d4:96:17:5c:ec:e1:c2:
                    7f:a0:a6:b0:b5:fc:91:f0:48:1b:3a:c9:93:7a:fd:
                    2a:fb:4e:1e:1e:77:17:92:b4:b8:2f:0d:0e:69:9e:
                    f2:ec:06:65:80:f3:13:cd:31:53:fd:68:59:73:a2:
                    2e:31:9c:7f:7e:ac:a6:01:c5:c2:3e:7f:d6:d7:69:
                    41:bf:fb:c6:e4:3c:e5:76:e5:5e:79:8d:71:22:62:
                    0e:33:78:94:4f:26:a3:ec:da:63:25:e7:d6:b5:82:
                    5f:4e:21:2f:3c:c3:b6:dc:f3:40:2e:ca:b1:ab:1b:
                    44:31:07:e7:e9:9b:c2:b8:82:3d:fe:ff:40:fc:11:
                    c9:96:ce:c6:04:54:2f:cd:e8:9f:a9:b9:8d:03:44:
                    b9:a2:33:77:92:dc:60:a9:23:42:4f:eb:6f:98:5d:
                    02:5a:be:26:28:f6:b7:2b:eb:83:e3:07:15:7a:74:
                    03:7a:5c:e3:50:51:08:5c:d5:8c:9a:e2:be:19:8d:
                    b8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D7:06:B8:59:11:25:4B:2C:50:4B:5D:C0:15:57:51:54:B6:82:77
            X509v3 Authority Key Identifier:
                keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/47B17AE48B2911F198C4B09681EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.203.0/24
                  45.126.163.0/24
                  150.107.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:f1:9f:15:83:54:40:e8:4d:37:7b:36:3f:c8:d6:39:20:dc:
         c7:e1:25:38:4d:58:54:50:a9:47:1a:2c:c1:44:12:80:dd:52:
         9c:11:e2:04:68:9b:98:9f:7e:32:7e:da:9b:09:cf:c0:13:a9:
         20:23:40:32:91:76:f2:9b:bb:af:1c:e1:5d:e2:bd:ad:9e:9b:
         e7:f6:46:5e:93:47:50:1a:c7:56:a8:25:73:e3:e5:26:75:20:
         e0:d9:fb:6c:d9:b9:f2:47:47:42:0d:e7:6c:af:d9:9b:02:d6:
         d2:e8:fc:db:a9:c9:31:70:47:3a:ee:17:2b:c4:de:a5:72:67:
         ee:0f:01:cd:10:64:e9:9f:a7:67:35:1d:8b:e3:b7:8e:bf:30:
         dc:b6:7c:8f:14:7c:4f:f2:1c:08:c7:ae:06:fa:7c:ac:e5:57:
         6c:74:73:eb:41:15:b9:ba:ea:a5:49:ad:65:72:cb:55:e1:35:
         33:06:d8:70:c4:4a:ed:34:b5:d2:b8:db:db:5b:7d:48:6d:c1:
         96:40:36:59:27:40:d7:f7:22:ed:be:3b:b6:ed:ec:bd:7a:bc:
         d7:00:95:73:0a:78:5f:b3:b2:90:2a:14:22:69:e9:97:9b:73:
         fc:24:90:a0:35:df:c9:89:a5:f6:43:ec:96:dc:b9:4f:b2:ff:
         79:98:8e:ad
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICCiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0
OTQ5OTcxNjIwHhcNMjYwOTAyMjA0MTQwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4OGEwNC1iYjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5/j7Cd5BY6+3pgOeY3v4kXDNJ8EynpIHHdfqH/9p67Qr+GfjcSB0M+IlHekW
XpkxyLnTKic3tPB/IJQWVFNbtrgxO9SWF1zs4cJ/oKawtfyR8EgbOsmTev0q+04e
HncXkrS4Lw0OaZ7y7AZlgPMTzTFT/WhZc6IuMZx/fqymAcXCPn/W12lBv/vG5Dzl
duVeeY1xImIOM3iUTyaj7NpjJefWtYJfTiEvPMO23PNALsqxqxtEMQfn6ZvCuII9
/v9A/BHJls7GBFQvzeifqbmNA0S5ojN3ktxgqSNCT+tvmF0CWr4mKPa3K+uD4wcV
enQDelzjUFEIXNWMmuK+GY24MwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFH/XBrhZ
ESVLLFBLXcAVV1FUtoJ3MB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx
REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQwNEUvQkMwMzBDNzZGMURBMTFFQUFGQzZDNzBBQzRGOUFFMDIvNDdCMTdBRTQ4
QjI5MTFGMTk4QzRCMDk2ODFFRTUyOEUucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQALXXLAwQALX6jAwQAlmsKMA0GCSqGSIb3DQEBCwUAA4IBAQAk8Z8V
g1RA6E03ezY/yNY5INzH4SU4TVhUUKlHGizBRBKA3VKcEeIEaJuYn34yftqbCc/A
E6kgI0AykXbym7uvHOFd4r2tnpvn9kZek0dQGsdWqCVz4+UmdSDg2fts2bnyR0dC
Dedsr9mbAtbS6PzbqckxcEc67hcrxN6lcmfuDwHNEGTpn6dnNR2L47eOvzDctnyP
FHxP8hwIx64G+nys5VdsdHPrQRW5uuqlSa1lcstV4TUzBthwxErtNLXSuNvbW31I
bcGWQDZZJ0DX9yLtvju27ey9erzXAJVzCnhfs7KQKhQiaemXm3P8JJCgNd/JiaX2
Q+yW3LlPsv95mI6t
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:39:59 2026 by rpki-client