Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/9166F61638E511EF803AF660C4F9AE02.roa
File:                     9166F61638E511EF803AF660C4F9AE02.roa (raw, json)
Hash identifier:          KxQFpzpoosNuGePL0OCDu0Wnx4bnznIe59MLAgWCeJc=
Subject key identifier:   72:10:FF:5A:68:05:A7:9F:75:31:1C:23:52:73:C4:9A:21:BC:D0:EA
Certificate issuer:       /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Certificate serial:       0144
Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/9166F61638E511EF803AF660C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 05:45:31 +0000
ROA not before:           Tue 03 Mar 2026 05:45:31 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     4764
IP address blocks:        2001:df0:201::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl
                          rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 04:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
        Validity
            Not Before: Mar  3 05:45:31 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a6757b-e02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:5e:03:cc:9e:62:e1:02:bd:4e:7b:63:9c:
                    7d:2f:a3:e2:ea:e2:a5:40:7f:fb:28:58:61:17:e0:
                    b9:ba:e9:cc:22:5f:fe:b6:41:80:4e:bc:b4:56:44:
                    aa:43:9b:6d:06:9f:0d:48:3d:c5:02:0b:e0:89:8c:
                    03:77:92:75:6b:d1:97:12:18:ab:2b:7a:43:a1:ab:
                    60:92:4c:9b:34:a0:2f:ad:f1:4e:8e:74:9a:c0:70:
                    bd:a0:b6:10:58:66:4c:96:ac:01:a3:a1:bd:a1:dc:
                    9d:b0:ee:47:31:f1:64:e1:8b:d4:89:6e:e0:65:c4:
                    79:ea:34:6c:4a:ed:e0:6a:5f:07:3e:26:31:95:37:
                    8b:b6:9e:6f:67:c9:a6:b3:33:5e:f5:ef:99:42:9c:
                    f8:32:f1:eb:02:8c:cc:38:02:97:75:20:ab:5d:4f:
                    a9:87:d5:9f:cd:6b:37:4f:e4:c9:94:bd:e9:8e:83:
                    a9:1f:67:ab:c3:3d:86:1f:bc:80:b7:9b:f9:cc:63:
                    7b:56:04:3d:86:16:0f:c1:79:51:6a:20:f1:f9:0b:
                    bc:68:4e:b0:50:b9:bd:fa:c9:93:0e:bc:ed:39:b8:
                    ca:e0:6f:92:3a:07:d0:04:cc:91:0e:78:17:87:41:
                    5c:d5:8d:6b:0e:dd:46:7e:9c:c4:f1:ca:d7:01:45:
                    8c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:10:FF:5A:68:05:A7:9F:75:31:1C:23:52:73:C4:9A:21:BC:D0:EA
            X509v3 Authority Key Identifier:
                keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/9166F61638E511EF803AF660C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:201::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:b4:f9:a6:65:4c:39:8c:68:78:c6:7e:1f:68:d3:f2:df:b4:
         b0:3a:c9:1d:2b:42:c6:7a:7b:4a:76:e8:9e:9b:63:07:2c:b7:
         4f:a1:c0:b1:2c:be:95:fd:54:63:a6:77:22:f3:ee:6a:86:87:
         8b:0f:8e:31:f5:d0:a1:c4:7f:ed:40:5f:1e:7b:8a:8a:8f:35:
         03:c3:94:c5:00:eb:a9:08:6d:ae:62:bc:dc:54:50:d0:a7:d9:
         ea:fd:84:1a:2d:49:99:3d:02:6a:46:28:8e:3c:22:61:82:24:
         45:ad:2b:2f:09:63:28:78:fd:bd:9b:be:41:94:79:ca:d8:b0:
         80:69:9e:47:e0:88:79:f7:11:6e:04:6f:1f:44:35:e0:86:56:
         1f:10:8c:88:21:f6:9b:c0:06:5a:3a:c9:94:6a:88:65:ca:37:
         2e:7a:ea:8e:c9:12:13:a5:f8:39:92:46:75:5c:3a:71:d0:7b:
         02:c8:08:ea:84:bb:04:ed:24:32:68:4b:23:15:5f:2a:3b:ed:
         11:fc:67:a3:d3:8a:9c:fc:92:a4:8f:a1:61:26:a5:9f:c7:ad:
         e1:8d:b7:dc:26:f9:02:86:b1:06:9c:2a:ba:14:ac:37:eb:fe:
         0e:ad:9e:4b:06:83:41:b9:f0:65:a9:10:62:fe:3c:3d:d2:9a:
         40:5e:2a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:04:43 2026 by rpki-client