Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/5EFDD3C4641511EF92F73520C4F9AE02.roa
File:                     5EFDD3C4641511EF92F73520C4F9AE02.roa (raw, json)
Hash identifier:          qEfH7eQ/C2gOZPU1jxCU+fijhvqs0pReImF1DTY96Jg=
Subject key identifier:   33:BB:F0:EC:A1:41:1F:14:A5:65:4A:20:52:EC:FC:4C:EE:15:B6:D2
Certificate issuer:       /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial:       09F7
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/5EFDD3C4641511EF92F73520C4F9AE02.roa
Signing time:             Thu 02 Apr 2026 20:23:33 +0000
ROA not before:           Thu 02 Apr 2026 20:23:33 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     38818
IP address blocks:        49.0.128.0/19 maxlen: 19
                          49.0.168.0/21 maxlen: 21
                          49.0.176.0/22 maxlen: 22
                          203.34.37.0/24 maxlen: 24
                          203.174.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
                          rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 19:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2551 (0x9f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
        Validity
            Not Before: Apr  2 20:23:33 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69ced045-b431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:69:7e:de:f0:1a:45:6f:38:b8:ef:96:59:7e:
                    1a:05:17:f5:81:47:1c:42:cb:2b:06:3f:27:a4:bf:
                    5d:da:0a:55:c8:11:d6:66:2c:50:6f:a2:b6:4b:ca:
                    fb:2e:10:54:8e:8c:55:23:16:16:9a:d4:f0:0d:f4:
                    d9:a4:e6:29:b5:72:c0:6d:b0:dc:4a:eb:e0:4e:ed:
                    6e:b7:49:79:da:1c:35:4b:6b:b6:ca:17:c9:7c:69:
                    39:39:9b:57:ff:5f:1c:de:9d:f0:97:55:b9:ca:96:
                    3f:03:ce:4a:40:c0:5a:98:b4:ae:2c:3f:7f:77:95:
                    a8:4b:00:ac:f5:8f:82:78:c1:04:f8:cc:3e:9f:94:
                    ef:64:84:cf:8e:1b:9c:26:78:4e:c5:c6:29:e4:61:
                    c8:12:83:2e:96:ca:99:a2:13:ed:8b:ae:3b:bb:12:
                    27:d0:78:f8:47:2b:b2:5d:7c:38:41:e7:21:c8:2b:
                    31:af:04:75:50:98:07:fd:3b:35:ec:fc:50:5c:6a:
                    1f:2b:96:b4:95:ff:a1:0f:90:b8:93:70:c9:19:e3:
                    49:fc:37:ff:93:a0:fd:42:17:32:02:59:1d:d5:44:
                    2d:77:8e:7c:8a:29:1d:33:85:f7:fd:07:ec:c8:ed:
                    94:e9:17:29:4f:ea:71:d0:96:23:cd:5c:9c:3f:85:
                    55:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BB:F0:EC:A1:41:1F:14:A5:65:4A:20:52:EC:FC:4C:EE:15:B6:D2
            X509v3 Authority Key Identifier:
                keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/5EFDD3C4641511EF92F73520C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.0.128.0/19
                  49.0.168.0-49.0.179.255
                  203.34.37.0/24
                  203.174.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:89:26:aa:b4:2c:2c:e6:9b:91:94:f5:5c:ce:f3:cf:fe:13:
         4b:54:bc:1e:ae:18:b7:5a:42:3c:59:24:5c:d0:fa:22:20:eb:
         6a:e0:e0:2c:22:06:c7:ea:58:fa:50:01:b0:ff:6a:48:e6:c8:
         b8:2b:df:49:7d:34:90:d3:c9:bb:c2:fb:75:03:c8:b9:19:c0:
         f7:1f:f8:42:4d:7a:bb:98:b6:15:12:3d:82:ed:79:b8:b4:e1:
         55:c9:96:6c:54:89:84:9e:d3:8f:aa:b5:63:4a:79:06:04:c0:
         f2:b5:5a:97:55:d5:a1:fa:b6:bd:4c:71:a7:81:8d:39:ef:01:
         eb:0d:6a:56:ee:3b:29:5a:4e:67:25:f4:7b:57:e1:f4:91:fd:
         5b:de:5d:58:be:79:44:9b:db:47:6a:31:1c:28:9d:44:72:c2:
         9a:f5:be:82:58:7f:41:28:5c:89:d4:20:5c:50:ab:45:73:be:
         c0:4c:1b:0e:b8:5c:b1:f7:2b:9a:98:4a:51:9a:73:63:38:76:
         f0:b8:fe:89:12:20:a2:af:2e:94:64:ef:78:c3:02:a9:d5:59:
         5e:e4:c7:0e:cd:29:ce:b9:59:05:9f:27:dd:68:07:02:4c:ce:
         1a:b4:ce:e4:e6:05:04:93:11:7c:42:63:26:a5:6b:0f:77:41:
         bc:9b:68:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:39:17 2026 by rpki-client