Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/C4E57D9EE55A11ED98D38780C4F9AE02.roa
File:                     C4E57D9EE55A11ED98D38780C4F9AE02.roa (raw, json)
Hash identifier:          y0+JvtMZneyLAkeZYh9VrzkklhQ0hdBbhaIghcfRRoY=
Subject key identifier:   DB:78:AC:81:70:6E:6A:13:FF:2A:F2:05:D1:0D:12:43:92:49:0F:F4
Certificate issuer:       /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial:       0792
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/C4E57D9EE55A11ED98D38780C4F9AE02.roa
Signing time:             Sat 04 Jul 2026 22:23:30 +0000
ROA not before:           Sat 04 Jul 2026 22:23:30 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     45201
IP address blocks:        202.125.168.0/24 maxlen: 24
                          203.56.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
                          rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 22:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1938 (0x792)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
        Validity
            Not Before: Jul  4 22:23:30 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4987e2-a0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:08:a8:da:80:7f:73:16:93:93:14:7c:5d:
                    3d:be:ec:9a:e5:97:25:37:fe:ae:10:20:8a:57:89:
                    c7:4b:f4:c2:71:72:b0:49:94:4c:46:c2:17:4a:73:
                    c8:82:01:82:eb:8b:be:5c:ba:4e:c1:56:63:3f:21:
                    46:03:4c:11:44:bc:c3:eb:a5:3a:94:91:a3:e2:05:
                    56:5e:8d:94:3b:fb:a0:3d:47:48:6e:02:c6:6b:12:
                    24:80:d4:fc:d1:64:69:18:b4:29:8d:32:c4:f0:08:
                    b1:d9:ae:1f:67:40:10:68:4c:e1:8b:45:ad:0f:a9:
                    4e:a2:3b:77:66:33:85:f3:ac:d3:c7:8f:89:9d:64:
                    8e:40:a8:43:ff:21:8d:20:a9:e2:2b:fe:40:20:30:
                    e7:b1:47:10:25:e4:52:c7:74:96:b9:de:c0:11:67:
                    31:a2:b7:a0:7b:24:06:3c:f2:9c:61:fd:1b:53:5a:
                    3b:98:a6:78:72:d4:a9:e8:b2:8a:9b:36:5d:15:42:
                    98:3d:28:93:dd:4b:66:f9:5a:59:60:ee:e4:93:64:
                    90:d9:72:20:80:8b:da:48:70:ab:51:d6:23:44:d5:
                    4b:eb:01:35:e0:ad:02:09:7a:0a:1e:bf:8a:b1:97:
                    a5:da:d6:64:38:76:8a:b7:dc:af:5e:2b:74:75:1d:
                    e1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:78:AC:81:70:6E:6A:13:FF:2A:F2:05:D1:0D:12:43:92:49:0F:F4
            X509v3 Authority Key Identifier:
                keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/C4E57D9EE55A11ED98D38780C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.125.168.0/24
                  203.56.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:1a:f3:ea:1a:ff:1c:c4:56:06:97:b4:2c:a2:cc:9b:43:83:
         4e:d7:ec:fb:be:bf:f1:6c:bd:c5:d4:1a:e2:19:0a:0f:92:af:
         08:72:d2:0f:36:c2:9a:2d:da:9d:b9:b6:00:81:75:1a:ce:7f:
         b5:95:f2:eb:39:31:eb:a8:53:a1:25:02:16:d4:0e:4e:6c:08:
         72:ad:cb:78:6e:79:cd:f4:45:57:f9:f8:d1:f1:20:46:63:ec:
         09:28:5f:f1:0a:87:fb:e0:fd:5c:3d:85:92:6c:ec:dd:d5:39:
         35:66:94:c5:16:7d:03:f3:0b:5b:5c:29:7a:5a:f1:5c:08:ac:
         3c:3b:6c:bd:24:34:ca:87:9e:7c:94:67:af:24:4f:fe:d1:3e:
         7c:0b:ee:11:03:3f:cc:46:c3:3e:d4:fd:10:16:04:a3:7f:fa:
         8b:d3:60:d3:bb:c3:75:d5:f7:19:3d:16:34:d0:be:a8:7b:6d:
         17:be:f6:4f:44:5d:26:69:61:57:ee:95:b2:4b:55:7b:38:4f:
         d8:4a:6f:24:3d:3b:3e:20:8a:f3:73:ae:c1:14:5e:d3:51:31:
         e2:e9:e5:e5:10:90:b2:78:c5:ba:39:5e:29:37:12:ae:c1:b2:
         ad:c3:8c:6b:e9:3b:0b:63:11:be:7d:01:f1:ef:af:7b:2d:86:
         ed:1e:3c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:47:53 2026 by rpki-client