Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/A90FC92A4D9A11F1BFB1418A8AEE528E.roa
File:                     A90FC92A4D9A11F1BFB1418A8AEE528E.roa (raw, json)
Hash identifier:          sfEKhljyiurdTvs6lU81cu1hjcxg7WjshhxCIa196fs=
Subject key identifier:   07:17:34:31:F7:D7:CE:E2:44:E6:8F:94:0E:D7:79:FE:27:55:05:BF
Certificate issuer:       /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
Certificate serial:       01BF
Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/A90FC92A4D9A11F1BFB1418A8AEE528E.roa
Signing time:             Fri 17 Jul 2026 05:31:39 +0000
ROA not before:           Fri 17 Jul 2026 05:31:39 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151847
IP address blocks:        103.168.172.0/24 maxlen: 24
                          202.12.124.0/24 maxlen: 24
                          2402:5d60::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl
                          rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 05:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
        Validity
            Not Before: Jul 17 05:31:39 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a59be3b-fb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3c:58:19:19:10:f3:32:a7:6d:c8:57:74:50:
                    12:74:b6:18:fb:cc:ea:bb:a6:9c:87:a9:08:ad:d9:
                    21:63:0e:64:39:18:39:9b:51:88:ea:73:ca:cd:0f:
                    3b:45:24:d2:70:fd:b3:46:52:75:2e:fd:cc:81:3b:
                    0c:b3:68:91:ff:41:a7:c4:d2:b4:f7:c8:ad:d3:29:
                    3d:7d:dd:ac:79:d0:4a:43:0c:10:a6:66:a9:16:c2:
                    95:fe:bb:32:86:13:90:25:78:90:47:1e:69:5f:64:
                    13:e5:d6:5c:54:ee:40:a0:14:19:cd:ed:25:9d:e0:
                    f0:99:3c:1e:15:7a:3c:29:ff:9a:49:f9:d8:c5:1f:
                    a2:4b:f7:80:74:95:44:99:ed:db:11:cb:2a:f7:c4:
                    0c:bc:f7:7e:7d:c1:6f:48:3c:e1:98:c7:5b:2c:0c:
                    82:3b:19:ce:b3:60:fe:cd:87:19:a5:b6:80:76:3e:
                    47:d3:b7:e3:b8:e5:50:62:f2:fc:8a:e3:c3:1c:4a:
                    69:74:d4:c7:60:0b:1e:90:9d:e9:3d:a4:2e:c7:30:
                    8f:49:69:b4:c4:15:b1:19:44:b5:8c:72:70:85:0d:
                    82:d9:e6:47:94:0e:70:49:09:4c:ae:52:9c:6f:b2:
                    a8:0b:ee:b7:40:f3:13:c8:8a:b0:be:59:6b:d8:3c:
                    3e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:17:34:31:F7:D7:CE:E2:44:E6:8F:94:0E:D7:79:FE:27:55:05:BF
            X509v3 Authority Key Identifier:
                keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/A90FC92A4D9A11F1BFB1418A8AEE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.172.0/24
                  202.12.124.0/24
                IPv6:
                  2402:5d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:54:52:21:bd:27:6a:c9:a1:e3:ae:39:52:13:c9:9f:41:6f:
         34:f7:73:6c:17:96:bb:77:9a:9f:bf:fd:e9:07:83:b1:ac:a9:
         04:dc:af:99:6c:13:24:66:88:32:a0:ce:da:00:41:82:9d:9f:
         24:ea:d5:f6:d2:1d:8b:94:16:48:13:3a:e7:7c:76:27:1c:c7:
         b9:fd:f4:66:c4:70:6b:47:e6:57:58:70:8d:55:2e:1e:d5:9a:
         21:05:6c:26:17:51:a8:58:91:e7:92:20:a8:b0:24:db:da:f6:
         71:c1:ec:5b:13:a1:10:8d:aa:80:b0:bb:fa:b0:18:fc:5b:28:
         e3:58:0e:19:47:24:26:07:df:89:a7:2d:97:e7:f7:53:3e:45:
         54:84:f8:20:93:eb:7b:ab:85:3e:dc:7b:ff:ca:ef:3b:1b:57:
         b8:20:c2:76:30:b9:89:15:06:83:c6:57:78:7d:72:c8:04:90:
         05:60:98:d3:f0:f4:61:7c:a5:00:78:02:d4:42:07:fc:f4:d3:
         f5:fd:2e:e6:6d:f0:3d:ce:c8:63:aa:a1:85:33:e6:55:ee:b1:
         a6:b4:bd:73:28:0a:8b:f9:1a:92:61:99:81:3b:19:82:a4:5b:
         79:81:90:40:b0:a8:6c:36:69:c6:1e:df:6f:c4:f4:24:fc:71:
         89:21:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:21:50 2026 by rpki-client