Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/72EFC76C9F7C11F1ADDC3D1C3B11F970.roa
File:                     72EFC76C9F7C11F1ADDC3D1C3B11F970.roa (raw, json)
Hash identifier:          stcwTILI7jYqbP/8Ad56tb/Lm2uiKLB+57zQTKtqH80=
Subject key identifier:   20:48:C9:16:AB:8B:04:E7:37:F7:8B:E9:B0:F2:90:B2:AD:37:F0:6B
Certificate issuer:       /CN=A911B432/serialNumber=2A79B91486E87D2D75EBD910BD6E719737DD8259
Certificate serial:       02
Authority key identifier: 2A:79:B9:14:86:E8:7D:2D:75:EB:D9:10:BD:6E:71:97:37:DD:82:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Knm5FIbofS1169kQvW5xlzfdglk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/72EFC76C9F7C11F1ADDC3D1C3B11F970.roa
Signing time:             Mon 24 Aug 2026 05:27:08 +0000
ROA not before:           Mon 24 Aug 2026 05:27:08 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154839
IP address blocks:        163.52.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/Knm5FIbofS1169kQvW5xlzfdglk.crl
                          rsync://rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/Knm5FIbofS1169kQvW5xlzfdglk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Knm5FIbofS1169kQvW5xlzfdglk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 08:53:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B432, serialNumber=2A79B91486E87D2D75EBD910BD6E719737DD8259
        Validity
            Not Before: Aug 24 05:27:08 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a8bd62c-0ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:52:bf:f5:c5:4e:48:4c:8e:83:1e:5a:3a:92:
                    3e:3b:3e:f3:db:2f:ea:87:44:f5:0a:1f:d0:0d:18:
                    8e:fc:28:7e:b2:7c:6d:2c:a8:5e:8f:78:0e:79:34:
                    10:97:fd:5a:0e:d0:31:b9:7d:29:74:c0:af:59:ea:
                    ee:fd:f9:46:f5:3f:27:67:fa:56:d9:63:fa:5d:41:
                    00:a6:50:12:d8:ed:a7:8d:26:23:d4:fc:0b:e5:fa:
                    26:f9:9d:55:f2:31:b4:83:09:41:5a:fa:0a:ef:09:
                    99:65:80:38:d0:93:45:b3:72:4d:86:2c:1d:b2:99:
                    82:f3:ef:ef:b6:41:81:c4:52:be:3e:cd:98:42:a4:
                    8e:f8:f2:f2:dd:43:b7:bd:58:7d:d2:d3:c9:64:22:
                    de:e7:4f:cc:9e:f0:65:1d:23:b5:35:f5:17:9d:89:
                    e0:e8:ce:1b:2e:e1:ef:5c:d7:4c:29:6f:10:b2:10:
                    aa:f7:20:40:01:4e:a3:f3:cf:29:bb:00:9a:ff:f0:
                    63:44:60:2d:b7:76:e4:c9:b8:5c:28:67:fd:55:76:
                    c0:fc:0d:90:6a:67:a5:f5:c0:93:c8:7d:eb:07:49:
                    d3:77:30:02:89:62:ab:9d:cc:33:32:4c:28:0e:b7:
                    78:56:99:da:96:30:47:67:fa:f7:30:b1:83:e6:e4:
                    7c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:48:C9:16:AB:8B:04:E7:37:F7:8B:E9:B0:F2:90:B2:AD:37:F0:6B
            X509v3 Authority Key Identifier:
                keyid:2A:79:B9:14:86:E8:7D:2D:75:EB:D9:10:BD:6E:71:97:37:DD:82:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/Knm5FIbofS1169kQvW5xlzfdglk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Knm5FIbofS1169kQvW5xlzfdglk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B432/E24B99C69F7A11F1AA09E1F63A11F970/72EFC76C9F7C11F1ADDC3D1C3B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:a3:20:1d:b1:5c:af:2b:3a:0d:ca:6e:fc:55:26:50:3d:5c:
         e3:60:af:ba:2c:30:62:9c:f3:23:2d:38:e5:17:f0:39:7b:34:
         0f:18:2f:cb:8e:da:ff:66:e7:fc:e0:66:cd:ef:77:66:df:9b:
         99:d2:54:e8:78:12:ee:f1:9b:c0:67:46:3d:58:8c:7d:47:41:
         6d:dd:cc:f8:12:78:d7:e3:60:55:1b:4c:47:73:24:1c:85:25:
         fa:cc:d8:b7:ae:22:f8:d9:8c:9f:2b:66:d4:ca:be:b3:3e:d7:
         e2:2d:04:be:20:46:21:39:0d:ed:4b:f9:9f:04:4d:d5:21:f5:
         6b:10:ad:36:22:54:94:60:01:49:86:04:d0:5a:2f:90:a6:54:
         93:16:00:d1:2c:27:21:0f:b7:c0:8b:50:42:36:13:77:96:d6:
         2d:58:38:5e:0d:c2:e8:83:3b:f3:9f:00:c6:26:94:2e:62:34:
         dc:07:f6:6c:96:38:f0:8a:d7:b4:38:29:fb:a4:e4:b3:f4:72:
         88:b1:ce:e8:de:43:7c:bd:1f:32:02:7f:6f:7f:f8:bb:eb:38:
         69:ad:22:85:b8:c2:c5:af:cf:da:94:fa:56:40:fd:48:09:df:
         97:44:54:64:cc:b7:c7:cf:c5:c2:7e:9d:47:72:eb:19:9d:d1:
         ec:53:b4:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 19:30:41 2026 by rpki-client