Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/A53F1E96647311F1BC2A35D47947A888.roa
File:                     A53F1E96647311F1BC2A35D47947A888.roa (raw, json)
Hash identifier:          aWkLi47uIb9GIJOKXHkRTH7Cyo2StRxOnkwZBq2MqlE=
Subject key identifier:   82:89:0D:54:C1:04:AA:70:D7:76:1D:C1:53:AC:50:F8:E0:64:29:84
Certificate issuer:       /CN=A9172999/serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
Certificate serial:       13
Authority key identifier: CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/A53F1E96647311F1BC2A35D47947A888.roa
Signing time:             Wed 10 Jun 2026 02:25:28 +0000
ROA not before:           Wed 10 Jun 2026 02:25:28 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     4907
IP address blocks:        186.240.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl
                          rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172999, serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
        Validity
            Not Before: Jun 10 02:25:28 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a28cb18-e7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:56:2b:fa:fe:59:1b:de:11:f2:d9:60:78:ce:
                    ba:3e:10:08:73:b4:05:7e:f2:9d:25:32:95:8a:a8:
                    54:45:ef:5b:f5:18:e6:98:ef:86:c4:06:e3:75:d6:
                    64:5a:ec:4b:18:20:02:94:ec:95:98:89:fb:9f:ff:
                    4c:29:29:7e:db:48:5b:e9:fa:8f:35:e7:d5:f8:f1:
                    df:a9:35:00:c1:ee:ff:dd:34:5a:ed:4c:fe:cb:d5:
                    e6:73:dc:39:b2:eb:bb:17:7c:18:a9:5a:5e:19:85:
                    73:c2:5e:7f:79:bd:cc:4e:ae:c4:3a:3f:b6:28:99:
                    7b:e0:30:b2:a2:d7:50:ce:db:4a:08:94:f6:a4:34:
                    c6:ba:d6:ca:6b:4e:47:b6:5e:7a:6b:c2:af:a3:65:
                    e8:f3:e6:98:88:ad:e1:8e:ee:6d:a1:47:a6:62:18:
                    f7:66:c7:be:1b:a2:43:07:80:c8:a8:b9:40:4c:c7:
                    1e:8e:1b:6c:b0:9f:5a:f8:b5:ca:3d:d9:b5:7d:94:
                    32:78:f6:d2:79:86:5c:22:a6:f4:d3:d0:b1:f4:dd:
                    af:e7:c9:8b:38:33:32:28:b9:51:2e:86:e8:d2:20:
                    de:37:dc:c1:af:9a:c6:6e:53:8e:18:50:8a:05:33:
                    9a:86:74:77:90:74:3a:34:e3:91:cd:66:9d:cd:ea:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:89:0D:54:C1:04:AA:70:D7:76:1D:C1:53:AC:50:F8:E0:64:29:84
            X509v3 Authority Key Identifier:
                keyid:CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/A53F1E96647311F1BC2A35D47947A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.240.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         27:70:fe:26:5c:32:68:9e:d0:c1:85:89:09:1f:7a:97:9c:49:
         cb:88:4f:36:59:00:44:59:78:b3:46:c7:92:9e:c6:12:f3:27:
         d2:a3:10:0e:34:69:bf:0c:53:ea:ca:e0:bc:60:30:e7:fc:ad:
         56:74:cb:6f:f4:47:df:57:1a:48:3c:a2:2d:c0:9c:cb:45:21:
         18:fb:24:ec:0b:6f:c3:4a:c1:18:29:3e:b5:ad:50:81:fd:bb:
         41:08:66:9c:d1:e7:69:be:f8:a3:cc:c1:24:eb:3e:a8:0e:1f:
         87:ff:3a:ed:82:7f:58:e6:b0:80:c8:ec:64:55:a6:1e:4b:de:
         13:55:6f:a1:b4:c5:e3:11:28:f1:f4:15:8a:80:40:58:34:34:
         c2:ee:f1:f6:72:31:03:66:6d:4e:5c:cb:34:d0:28:91:5a:be:
         09:b4:04:3e:98:01:68:3e:99:1c:8a:af:18:91:39:a1:a3:d2:
         ea:9d:42:5a:b7:4c:ac:db:f7:2f:31:75:76:3e:5d:95:49:0d:
         1f:d3:9f:b2:e7:5d:2a:ad:7d:e4:61:58:12:f3:49:57:6b:60:
         1c:c7:52:01:5b:9e:81:90:40:dd:a8:b1:44:81:f2:d2:af:38:
         99:58:66:29:f5:f1:da:e9:97:9c:10:c5:c7:8e:bb:ea:0b:ac:
         63:da:5d:d2
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
Mjk5OTExMC8GA1UEBRMoQ0Q0NDU0QjI0RTNGRjdEQzc1Q0JCRTkxOUJEREE3OUM0
N0I5NUVBNzAeFw0yNjA2MTAwMjI1MjhaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMjhjYjE4LWU3Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDkViv6/lkb3hHy2WB4zro+EAhztAV+8p0lMpWKqFRF71v1GOaY74bEBuN11mRa
7EsYIAKU7JWYifuf/0wpKX7bSFvp+o8159X48d+pNQDB7v/dNFrtTP7L1eZz3Dmy
67sXfBipWl4ZhXPCXn95vcxOrsQ6P7YomXvgMLKi11DO20oIlPakNMa61sprTke2
Xnprwq+jZejz5piIreGO7m2hR6ZiGPdmx74bokMHgMiouUBMxx6OG2ywn1r4tco9
2bV9lDJ49tJ5hlwipvTT0LH03a/nyYs4MzIouVEuhujSIN433MGvmsZuU44YUIoF
M5qGdHeQdDo045HNZp3N6ndhAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUgokNVMEE
qnDXdh3BU6xQ+OBkKYQwHwYDVR0jBBgwFoAUzURUsk4/99x1y76Rm92nnEe5Xqcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOTk5L0FFRkM1NUIwNEZG
MjExRjE5QjEyN0RGMTlFRUU1MjhFL3pVUlVzazRfOTl4MXk3NlJtOTJubkVlNVhx
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG
RDFGRjIvelVSVXNrNF85OXgxeTc2Um05Mm5uRWU1WHFjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Mjk5OS9BRUZDNTVCMDRGRjIxMUYxOUIxMjdERjE5RUVFNTI4RS9BNTNGMUU5NjY0
NzMxMUYxQkMyQTM1RDQ3OTQ3QTg4OC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAa68MAwDQYJKoZIhvcNAQELBQADggEBACdw/iZcMmie0MGFiQkfepec
ScuITzZZAERZeLNGx5KexhLzJ9KjEA40ab8MU+rK4LxgMOf8rVZ0y2/0R99XGkg8
oi3AnMtFIRj7JOwLb8NKwRgpPrWtUIH9u0EIZpzR52m++KPMwSTrPqgOH4f/Ou2C
f1jmsIDI7GRVph5L3hNVb6G0xeMRKPH0FYqAQFg0NMLu8fZyMQNmbU5cyzTQKJFa
vgm0BD6YAWg+mRyKrxiROaGj0uqdQlq3TKzb9y8xdXY+XZVJDR/Tn7LnXSqtfeRh
WBLzSVdrYBzHUgFbnoGQQN2osUSB8tKvOJlYZin18drpl5wQxceOu+oLrGPaXdI=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:44 2026 by rpki-client