Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/371683BAA81511F1A2613F346C11F970.roa
File:                     371683BAA81511F1A2613F346C11F970.roa (raw, json)
Hash identifier:          ZvobOfSHvKfkS0iZ8xobG9gfo4X0d2AGnndJbzDUNME=
Subject key identifier:   3A:60:75:5A:82:D2:40:4D:97:7F:DB:F8:13:13:49:15:86:8F:72:1E
Certificate issuer:       /CN=A9125AAB/serialNumber=480CD040CE90B9C10DAB84E9A47D0177B7C43BCC
Certificate serial:       05
Authority key identifier: 48:0C:D0:40:CE:90:B9:C1:0D:AB:84:E9:A4:7D:01:77:B7:C4:3B:CC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/371683BAA81511F1A2613F346C11F970.roa
Signing time:             Fri 04 Sep 2026 04:00:50 +0000
ROA not before:           Fri 04 Sep 2026 04:00:50 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     4637
IP address blocks:        80.47.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.crl
                          rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125AAB, serialNumber=480CD040CE90B9C10DAB84E9A47D0177B7C43BCC
        Validity
            Not Before: Sep  4 04:00:50 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6a9a4272-7363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e0:ba:35:df:34:3e:f6:4a:83:07:eb:d9:39:
                    8c:89:ab:2c:7c:9d:3e:36:27:c9:f4:b3:ac:43:7b:
                    60:a9:5e:4f:0d:d0:f2:af:20:5f:48:14:63:33:15:
                    f2:85:f0:9b:1d:90:75:26:00:ae:12:d0:66:31:77:
                    4e:5f:1a:b6:86:2e:ce:c0:47:bf:1f:98:39:d9:89:
                    4e:8d:d8:63:9c:0e:fb:27:53:5a:73:bc:e5:8a:79:
                    89:5d:23:dc:2f:8f:79:f4:b1:e2:93:d8:9c:1f:f3:
                    e2:29:68:93:c5:5d:51:08:a6:df:b0:74:cc:c9:cd:
                    1e:30:35:8f:e4:63:b6:1a:fb:91:c2:b8:86:77:0b:
                    39:9f:fe:09:c6:e2:61:1b:d3:73:f3:84:5b:b8:86:
                    0c:21:d5:88:d1:7c:71:49:6d:d5:b3:44:63:d4:07:
                    63:f3:a0:69:63:4d:7d:56:69:fb:21:a7:68:10:f9:
                    38:54:d6:fe:f9:dc:bf:54:87:f6:a6:d4:50:c1:f2:
                    ae:ee:c8:03:86:40:5c:0b:df:14:6e:ff:cf:a8:f8:
                    8f:e7:11:33:38:5c:9b:c6:c7:5d:6d:d8:8f:37:33:
                    47:e1:92:17:0a:26:86:f7:8e:39:4e:95:eb:0e:ed:
                    19:c9:86:83:63:09:df:5e:f6:1a:a3:b6:1d:80:89:
                    33:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:60:75:5A:82:D2:40:4D:97:7F:DB:F8:13:13:49:15:86:8F:72:1E
            X509v3 Authority Key Identifier:
                keyid:48:0C:D0:40:CE:90:B9:C1:0D:AB:84:E9:A4:7D:01:77:B7:C4:3B:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/371683BAA81511F1A2613F346C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.47.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5c:be:3c:eb:ca:3d:4b:a9:50:d1:6c:aa:3e:00:a9:f0:71:88:
         51:19:bd:6c:70:31:a3:74:26:24:29:88:a1:cb:2b:f2:72:3f:
         cd:1a:56:cc:32:d7:7a:54:d3:a8:71:a4:b5:b6:58:ef:53:57:
         f6:d5:e0:80:7d:af:48:a8:b4:ac:c4:21:f2:74:ab:84:b1:03:
         17:f1:9d:9b:9d:cc:fa:0f:cf:d4:ca:4c:e8:7a:db:e1:19:2b:
         27:ba:a9:a1:13:9b:76:7b:2e:5d:46:fa:45:b4:41:9e:e7:c6:
         a2:1d:8e:14:93:3e:34:cb:3b:cd:97:4d:95:85:17:de:9c:40:
         ed:1f:69:4b:29:2b:8f:69:b6:4b:43:73:d8:e5:92:69:8b:d3:
         8c:b4:8f:ac:14:45:4e:29:4e:3a:89:48:d9:92:1b:8d:b3:8f:
         27:21:f4:14:1d:a3:73:18:d1:0e:4c:48:0e:9e:e1:eb:31:a4:
         ba:bf:cd:a4:08:73:61:21:bc:e5:dc:c7:a3:ba:a0:e0:29:bc:
         6f:12:58:65:19:fc:b6:50:a0:20:8b:21:6a:b8:2a:8b:00:4c:
         35:fd:36:6b:96:d9:03:d6:f5:94:48:92:37:2a:b0:f5:f5:73:
         f7:6e:b9:1a:75:ec:a7:a1:4a:ee:e6:28:f7:58:a2:d4:46:76:
         30:3d:7a:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:17 2026 by rpki-client