Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/6473479459AF11F1B348DF32BD833773.roa
File:                     6473479459AF11F1B348DF32BD833773.roa (raw, json)
Hash identifier:          b0imGe4JAfa0rhUqVGcoxFCAzG+2FoaRzZ38y88nGu8=
Subject key identifier:   89:A8:95:CD:ED:5E:48:0A:42:80:0D:4B:9B:BA:B1:97:D8:D8:04:B2
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0C28
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/6473479459AF11F1B348DF32BD833773.roa
Signing time:             Wed 27 May 2026 09:35:27 +0000
ROA not before:           Wed 27 May 2026 09:35:27 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     46559
IP address blocks:        203.168.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 19:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3112 (0xc28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: May 27 09:35:27 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a16bade-f9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:98:e0:1b:10:33:5a:78:cd:28:9b:5a:96:d3:
                    bf:41:d9:b6:eb:e4:69:94:ec:95:f8:c3:c5:36:22:
                    15:12:79:32:0f:bc:cb:8f:48:6a:bb:48:38:0d:39:
                    7c:1e:ed:32:c3:17:99:bc:9a:cf:56:8b:7a:f3:e4:
                    ec:9e:75:04:30:ce:c7:6f:04:94:15:0d:69:92:eb:
                    0a:c8:be:d8:9e:d9:48:e3:21:a5:93:e6:bb:10:a2:
                    23:80:db:9b:6c:a6:25:a0:07:16:77:c5:25:58:0b:
                    6d:da:70:2f:a2:27:86:6e:f1:11:a4:b8:18:10:95:
                    bb:b2:ab:cb:08:d5:ff:39:ba:70:2a:a7:94:32:68:
                    5a:bd:9c:cd:8e:67:1b:08:d2:36:90:ec:c5:9f:5c:
                    b8:19:05:18:b0:11:3c:e0:51:80:b2:d9:7d:7a:bf:
                    7d:c2:ea:35:83:ab:e7:06:ad:b1:f9:c9:4c:1e:39:
                    44:49:03:96:f4:db:7f:1a:9a:d0:18:50:19:ec:80:
                    bd:8d:6e:d1:58:11:66:8c:a6:d8:7f:01:8b:8c:09:
                    4d:4b:7b:eb:47:fb:a3:52:08:9f:3e:0f:e6:72:97:
                    6d:38:6a:7e:13:98:2e:e3:a9:3b:c3:cc:ef:53:bb:
                    5d:59:f3:0f:6f:fa:0b:87:ca:35:0d:db:fb:1c:5c:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A8:95:CD:ED:5E:48:0A:42:80:0D:4B:9B:BA:B1:97:D8:D8:04:B2
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/6473479459AF11F1B348DF32BD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.168.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:60:9d:56:61:bb:e7:23:15:d4:15:a5:06:03:73:b1:c7:ca:
         53:95:96:d3:1e:9e:3f:b5:5d:01:7a:ec:92:48:e8:2f:09:3b:
         b8:1c:c6:cb:2d:da:7d:8a:de:c9:c5:93:35:c8:b5:70:0c:65:
         a1:e4:42:6c:85:d6:9d:0a:6c:a4:f5:a4:58:b7:38:1d:a9:96:
         87:89:b7:6b:f4:b4:87:c4:82:80:f3:e8:ff:55:70:eb:3e:d9:
         da:36:28:68:44:27:a8:3c:9c:b5:2d:bc:a7:eb:29:c6:92:a3:
         0f:8e:7b:d2:3c:5b:05:e6:59:1f:cb:a5:94:13:31:08:69:62:
         1c:d8:13:3b:38:b2:f2:f2:b7:78:fe:ca:5d:12:a1:66:5d:01:
         3d:d4:56:4a:81:58:2c:8a:0e:63:d0:31:89:7c:a8:48:5a:43:
         78:49:b6:e3:1c:08:f6:35:d4:06:fa:89:8a:41:f0:5c:be:b6:
         45:8a:67:70:bf:a8:05:b6:f3:97:77:b0:49:bc:71:7a:77:63:
         37:37:c7:fa:cc:2b:60:9b:c5:57:9d:1e:64:55:31:23:77:25:
         18:06:d9:e3:f4:45:7c:0b:4c:e1:74:a5:e5:1c:61:c3:71:1f:
         c3:94:6a:8d:56:48:4f:21:df:da:d8:35:45:08:b9:e2:b0:4e:
         80:3a:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:17:31 2026 by rpki-client