Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5E7453DEF28911F0A11FA9356B6F56BC.roa
File:                     5E7453DEF28911F0A11FA9356B6F56BC.roa (raw, json)
Hash identifier:          ESaLbn4GrsbC84+sF2l6KUmnEVQ4FDEGRNBB+s4Butw=
Subject key identifier:   A0:6D:82:B9:7B:89:C4:84:03:0C:75:4C:A8:1E:65:AA:5E:2A:05:A4
Certificate issuer:       /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
Certificate serial:       0105
Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5E7453DEF28911F0A11FA9356B6F56BC.roa
Signing time:             Tue 13 Oct 2026 07:55:46 +0000
ROA not before:           Tue 13 Oct 2026 07:55:46 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     9419
IP address blocks:        155.69.0.0/16 maxlen: 16
                          155.69.1.0/24 maxlen: 24
                          155.69.64.0/19 maxlen: 19
                          155.69.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl
                          rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 06:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
        Validity
            Not Before: Oct 13 07:55:46 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6acde402-a1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:37:d9:9c:bb:3a:90:01:17:ab:ff:48:49:0f:
                    83:b2:06:df:59:1d:2f:1e:3b:3e:48:b3:ea:1a:62:
                    90:01:0f:ed:38:22:7d:ba:73:44:e9:07:0d:26:d7:
                    e0:48:2c:ba:58:63:55:a8:3c:8a:86:25:0c:65:f5:
                    86:0e:f5:c5:51:11:84:a3:4b:30:95:48:55:40:30:
                    47:85:4d:79:58:e7:61:e3:2b:b3:54:45:62:30:18:
                    05:4e:0b:45:a7:21:ae:48:ae:44:68:bd:a5:d4:c6:
                    eb:f8:7b:24:6d:85:57:a3:9b:2d:e9:2c:4d:75:ac:
                    86:b2:a3:0c:62:7d:0a:1f:c3:22:69:2e:be:78:f4:
                    f3:c6:e7:a0:62:c1:7e:db:82:05:ef:61:d2:f7:a0:
                    62:97:7a:51:01:3a:23:7f:02:40:8a:1c:96:34:95:
                    93:34:1c:e6:18:8c:ae:8f:84:2a:cf:c1:4e:bb:88:
                    a4:18:69:99:ca:d7:a1:d6:60:00:22:5e:59:5c:34:
                    d4:d3:8e:8c:37:84:f1:ab:ce:07:4f:8d:1a:d5:ee:
                    61:b2:93:e4:e7:65:54:a2:79:f8:c6:3d:79:e6:a5:
                    21:51:42:ba:40:4c:67:7f:04:8e:b4:18:6e:ab:8f:
                    f8:e0:27:a6:67:57:a9:48:a3:d7:62:72:e5:6d:1e:
                    8f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6D:82:B9:7B:89:C4:84:03:0C:75:4C:A8:1E:65:AA:5E:2A:05:A4
            X509v3 Authority Key Identifier:
                keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5E7453DEF28911F0A11FA9356B6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.69.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0d:5c:45:10:80:c5:52:c6:89:b3:eb:3c:e6:9d:a0:d3:5a:91:
         33:e1:6f:9f:87:9f:5b:b0:24:e2:8a:65:02:66:3a:df:dc:0a:
         22:c0:dd:bd:22:07:0a:fc:b7:4b:06:d7:2e:17:4e:0c:79:6c:
         53:89:38:e3:d0:3a:e8:39:bb:ec:61:c8:70:fc:b1:e5:c3:41:
         ab:71:a3:b3:4a:ef:f2:07:89:f3:57:e7:91:c3:64:41:61:30:
         38:fb:f8:3c:ad:41:2e:56:45:b6:65:2a:6c:70:83:be:08:2c:
         6e:71:b6:2d:80:e2:2a:d5:a3:2e:ea:c5:21:43:3e:15:6a:9d:
         dd:f7:c1:e6:32:2f:68:ef:43:36:17:91:74:81:4f:d1:c2:00:
         25:66:83:cc:09:2c:2c:11:d1:1b:97:f2:d8:b3:d6:66:1f:c9:
         84:69:eb:69:a5:04:96:5a:30:2d:00:a7:5d:39:dc:40:5f:2f:
         6d:cb:79:fa:da:a1:af:2d:8b:6f:b3:82:a3:92:51:3d:a5:ad:
         b5:23:76:59:fa:15:51:b9:68:6b:2a:aa:53:73:89:df:96:94:
         38:3b:b8:c4:25:d1:29:15:e1:0d:c5:dc:93:77:7a:7c:94:da:
         98:e2:de:57:67:46:4f:40:4c:6e:89:ce:1f:04:2d:76:84:78:
         e2:71:c4:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:04:48 2026 by rpki-client