Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/EE4B240C4FAD11F18C9C7FA09E833773.roa
File:                     EE4B240C4FAD11F18C9C7FA09E833773.roa (raw, json)
Hash identifier:          7j+pBOA35nqlT2BY/OZfxcspQDx7FOPDqN/C36ZFQ94=
Subject key identifier:   5B:E0:A2:94:D3:57:D4:F2:44:AF:6F:8A:E5:CC:6C:B1:88:7F:E1:5C
Certificate issuer:       /CN=A9165C34/serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D
Certificate serial:       02
Authority key identifier: 91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/EE4B240C4FAD11F18C9C7FA09E833773.roa
Signing time:             Thu 14 May 2026 15:59:47 +0000
ROA not before:           Thu 14 May 2026 15:59:47 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     142529
IP address blocks:        162.4.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl
                          rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165C34, serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D
        Validity
            Not Before: May 14 15:59:47 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a05f173-6fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:51:9b:ba:94:cf:c8:11:b1:70:9d:c5:23:
                    b0:8d:ae:c9:4a:5e:48:f3:50:bb:e0:9b:3a:a9:44:
                    92:a1:10:77:0c:15:22:0f:57:e3:a1:87:fd:4c:1f:
                    3b:b7:ab:93:8f:43:94:2f:25:91:b5:0b:64:04:3b:
                    ec:6b:a7:f4:06:db:57:49:bd:65:03:bd:94:a1:af:
                    c9:8d:8b:89:7d:fc:d7:bc:10:06:f1:d8:8b:21:ab:
                    1d:95:2a:f5:38:6d:17:43:90:d7:f1:e5:6c:37:7e:
                    5f:fa:85:18:34:1b:2b:cf:e4:7e:af:f0:79:2c:c2:
                    90:a3:2d:17:05:9b:f3:0b:5c:03:70:9e:a0:52:a0:
                    5b:53:92:ca:b2:29:38:7f:85:16:01:28:eb:7a:1f:
                    58:70:39:b6:c2:1d:ea:ba:2b:30:8c:97:75:d0:12:
                    d2:3f:26:f7:66:e7:bb:e7:de:5e:fa:38:e4:be:dc:
                    78:c5:e9:30:89:b9:f5:87:a8:63:ee:99:0b:50:15:
                    44:ae:d3:37:2a:8c:27:73:66:f1:e9:f1:45:83:5f:
                    f5:92:df:76:4b:d1:65:97:67:7b:65:f9:57:5b:e3:
                    40:f4:46:98:c5:ed:da:47:4d:ec:a8:35:d7:5d:18:
                    f0:d0:63:e3:58:1c:ab:e8:48:24:49:7d:6f:f5:53:
                    06:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E0:A2:94:D3:57:D4:F2:44:AF:6F:8A:E5:CC:6C:B1:88:7F:E1:5C
            X509v3 Authority Key Identifier:
                keyid:91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/EE4B240C4FAD11F18C9C7FA09E833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:06:11:4f:e1:d8:54:27:df:de:e9:9c:89:0f:a0:32:79:bf:
         27:71:ae:ee:b9:de:48:16:ff:5e:57:08:0e:5d:26:95:19:33:
         f6:7a:69:41:77:3c:ea:d4:06:4e:fa:b7:ad:b4:6b:d0:07:73:
         7c:8b:0d:a1:4e:57:4c:44:dc:b3:7e:f4:d8:d0:3f:25:65:65:
         d6:48:62:39:aa:a5:87:ed:4d:87:64:28:3a:df:f4:7e:52:96:
         d6:d4:8c:f6:02:79:9f:c2:f3:56:cd:97:cb:da:6f:ce:bc:85:
         34:14:56:6b:9d:ab:1e:e4:ad:2c:53:f5:74:9d:88:94:20:6b:
         eb:5c:fe:0c:85:6e:c4:29:9d:32:d4:c8:f7:f1:d7:97:ef:d7:
         2c:08:05:e7:91:b5:65:b3:5b:b5:8d:ac:32:6b:14:44:35:59:
         d5:6c:d8:43:8b:80:9a:a4:9b:f4:c8:fa:67:af:f1:9c:0f:74:
         56:f2:f2:99:c8:c9:e3:ca:1d:70:4f:78:2b:f2:98:bf:5e:83:
         fc:db:85:d0:89:c1:15:ce:ce:ba:18:06:ad:c1:17:d9:50:c0:
         c2:da:3d:fa:db:8d:96:ce:b8:8c:28:ec:20:b3:cc:7a:6e:cb:
         46:c9:72:f0:ef:5b:16:70:2d:d0:25:db:bf:27:d9:22:4a:29:
         41:2e:43:d9
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NUMzNDExMC8GA1UEBRMoOTExNTJBMjFFMDJFQTkxQUZBQjZDQURDMUQ3NzlGOTI2
NzUxNTIwRDAeFw0yNjA1MTQxNTU5NDdaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMDVmMTczLTZmYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7a1GbupTPyBGxcJ3FI7CNrslKXkjzULvgmzqpRJKhEHcMFSIPV+Ohh/1MHzu3
q5OPQ5QvJZG1C2QEO+xrp/QG21dJvWUDvZShr8mNi4l9/Ne8EAbx2Ishqx2VKvU4
bRdDkNfx5Ww3fl/6hRg0GyvP5H6v8HkswpCjLRcFm/MLXANwnqBSoFtTksqyKTh/
hRYBKOt6H1hwObbCHeq6KzCMl3XQEtI/Jvdm57vn3l76OOS+3HjF6TCJufWHqGPu
mQtQFUSu0zcqjCdzZvHp8UWDX/WS33ZL0WWXZ3tl+Vdb40D0RpjF7dpHTeyoNddd
GPDQY+NYHKvoSCRJfW/1Uwb9AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUW+CilNNX
1PJEr2+K5cxssYh/4VwwHwYDVR0jBBgwFoAUkRUqIeAuqRr6tsrcHXefkmdRUg0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QzM0LzIwRUQxMkI0NEZB
QzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJyNnRzcmNIWGVma21kUlVn
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIva1JVcUllQXVxUnI2dHNyY0hYZWZrbWRSVWcwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NUMzNC8yMEVEMTJCNDRGQUMxMUYxOTE2NDMyOTc5RTgzMzc3My9FRTRCMjQwQzRG
QUQxMUYxOEM5QzdGQTA5RTgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGiBIQwDQYJKoZIhvcNAQELBQADggEBAF8GEU/h2FQn397pnIkPoDJ5
vydxru653kgW/15XCA5dJpUZM/Z6aUF3POrUBk76t620a9AHc3yLDaFOV0xE3LN+
9NjQPyVlZdZIYjmqpYftTYdkKDrf9H5SltbUjPYCeZ/C81bNl8vab868hTQUVmud
qx7krSxT9XSdiJQga+tc/gyFbsQpnTLUyPfx15fv1ywIBeeRtWWzW7WNrDJrFEQ1
WdVs2EOLgJqkm/TI+mev8ZwPdFby8pnIyePKHXBPeCvymL9eg/zbhdCJwRXOzroY
Bq3BF9lQwMLaPfrbjZbOuIwo7CCzzHpuy0bJcvDvWxZwLdAl278n2SJKKUEuQ9k=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:22 2026 by rpki-client