Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/B3DE083CBE9011F196E0CE2D3C11F970.roa
File:                     B3DE083CBE9011F196E0CE2D3C11F970.roa (raw, json)
Hash identifier:          3m0YrPkkjOWHqxNcp3W36Q+CLPfJ0wKfkEe7etWVrUA=
Subject key identifier:   78:A9:95:1A:E6:F1:10:AB:8C:09:FC:DC:7B:24:BE:77:CE:28:78:45
Certificate issuer:       /CN=A9125AAB/serialNumber=480CD040CE90B9C10DAB84E9A47D0177B7C43BCC
Certificate serial:       17
Authority key identifier: 48:0C:D0:40:CE:90:B9:C1:0D:AB:84:E9:A4:7D:01:77:B7:C4:3B:CC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/B3DE083CBE9011F196E0CE2D3C11F970.roa
Signing time:             Fri 02 Oct 2026 18:40:14 +0000
ROA not before:           Fri 02 Oct 2026 18:40:14 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     5111
IP address blocks:        80.47.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.crl
                          rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125AAB, serialNumber=480CD040CE90B9C10DAB84E9A47D0177B7C43BCC
        Validity
            Not Before: Oct  2 18:40:14 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6abffa8d-100d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:77:e1:33:d2:20:48:09:c7:70:ed:ad:a7:fe:
                    9a:3b:90:e5:da:51:78:c8:6e:5a:06:d7:d6:0d:92:
                    fe:b9:a6:c7:f3:78:f2:2e:de:4e:2e:0c:d1:5e:54:
                    06:7a:60:2e:87:ac:7f:df:3c:f8:5f:a4:49:2f:49:
                    74:03:77:a4:dd:6a:c6:c4:95:94:4b:8d:22:69:43:
                    0d:27:cd:23:23:7f:9f:f7:71:c4:d8:85:17:3a:fb:
                    f0:19:f3:69:a9:12:63:20:64:aa:a8:cb:48:79:1c:
                    86:ea:b3:cc:42:f7:2f:37:d2:09:6c:60:5b:1d:67:
                    a5:c5:66:6d:b1:19:be:f3:de:34:1c:90:3a:f0:2d:
                    27:8b:f5:8e:68:ca:22:50:82:ec:3c:e6:44:2c:cf:
                    ee:47:d7:90:ec:dd:31:fb:a2:5a:94:02:ca:d6:db:
                    58:63:11:91:47:14:bf:ae:6c:16:61:cf:69:97:0a:
                    92:4a:f0:a2:b2:d3:43:51:0e:3f:27:a0:28:2a:20:
                    c6:21:73:a2:fe:e6:a7:24:a4:07:ae:61:71:60:af:
                    2d:bd:94:98:41:0b:4a:e3:cf:e1:e2:58:9d:33:65:
                    7b:9a:2d:4a:f3:7f:5a:c1:20:fa:ef:95:3a:d9:e0:
                    07:2a:68:c3:7a:ac:ef:35:93:e5:99:ec:59:38:72:
                    8b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A9:95:1A:E6:F1:10:AB:8C:09:FC:DC:7B:24:BE:77:CE:28:78:45
            X509v3 Authority Key Identifier:
                keyid:48:0C:D0:40:CE:90:B9:C1:0D:AB:84:E9:A4:7D:01:77:B7:C4:3B:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/SAzQQM6QucENq4TppH0Bd7fEO8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SAzQQM6QucENq4TppH0Bd7fEO8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AAB/0C7AC5F2A7E911F1B6AD1A4BA6EE528E/B3DE083CBE9011F196E0CE2D3C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.47.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:b2:29:73:de:3e:21:82:2c:f1:a5:56:2f:85:25:ed:46:bc:
         08:51:ee:38:72:8a:ca:dd:cc:df:ed:0c:13:19:c0:0b:5e:5c:
         7a:5a:29:b9:63:1c:7a:16:6f:2f:c5:79:a0:d7:cc:5c:dc:e9:
         94:f3:8b:27:07:73:f2:3d:59:0a:9e:8c:d1:50:d8:8f:58:70:
         00:0d:c3:11:d6:38:a9:7f:1c:e6:a2:23:d0:2a:88:0d:b2:3c:
         20:06:fb:30:0a:11:e4:a2:13:4c:d3:0c:9d:12:2f:55:76:39:
         27:57:57:86:3d:a6:b2:c5:44:20:2b:2a:9d:e5:6b:45:27:27:
         a6:34:ab:27:06:5f:be:27:c4:67:89:17:a0:e8:f7:48:d9:c4:
         ff:72:fe:49:c3:fe:4b:e9:fb:40:d2:b9:2b:cb:e0:8c:7a:21:
         86:30:bc:f1:4a:9c:d4:dc:20:cf:74:20:64:dc:8e:15:69:b1:
         05:2d:eb:fb:cb:09:c7:f5:20:7e:a6:05:7a:86:ee:a3:d2:48:
         40:5d:10:24:06:b9:c0:c0:3c:ec:8e:0f:c6:03:14:f2:7d:5c:
         a0:d7:49:d2:e6:13:8c:9f:73:76:12:e8:a8:2a:14:73:9b:65:
         81:db:91:c9:d6:a6:c3:bc:dc:5d:57:95:a6:52:04:3f:70:3c:
         b7:65:d8:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 22 17:39:03 2026 by rpki-client