Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/F896075A67F011F19C24B38C7747A888.roa
File:                     F896075A67F011F19C24B38C7747A888.roa (raw, json)
Hash identifier:          hydwazcN1/022MJLhqV/lGME1YA76TdGnK0cCGRZjm0=
Subject key identifier:   87:0A:CD:82:91:8C:E5:3C:AC:4F:0A:11:98:FD:1B:AF:CE:30:95:45
Certificate issuer:       /CN=A9182C55/serialNumber=9B8BD21F8D92BE165E2CFBC1817C21B2A5CB4E3D
Certificate serial:       03
Authority key identifier: 9B:8B:D2:1F:8D:92:BE:16:5E:2C:FB:C1:81:7C:21:B2:A5:CB:4E:3D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m4vSH42SvhZeLPvBgXwhsqXLTj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/F896075A67F011F19C24B38C7747A888.roa
Signing time:             Sun 14 Jun 2026 13:00:09 +0000
ROA not before:           Sun 14 Jun 2026 13:00:09 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     141767
IP address blocks:        162.4.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/m4vSH42SvhZeLPvBgXwhsqXLTj0.crl
                          rsync://rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/m4vSH42SvhZeLPvBgXwhsqXLTj0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m4vSH42SvhZeLPvBgXwhsqXLTj0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182C55, serialNumber=9B8BD21F8D92BE165E2CFBC1817C21B2A5CB4E3D
        Validity
            Not Before: Jun 14 13:00:09 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a2ea5d9-e0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:b1:7c:67:1d:29:0a:17:14:29:13:ca:f1:
                    25:1a:79:61:b1:4d:a0:7b:cd:23:c3:6a:a9:0d:81:
                    92:57:b7:81:f1:9e:a7:94:a8:ed:88:07:d0:24:6e:
                    c9:01:c4:db:05:9b:46:28:6a:46:3b:5e:40:fb:c8:
                    a5:5d:47:a0:eb:20:81:35:b2:d2:d7:7a:7b:72:3e:
                    7c:52:c1:5d:9e:b1:67:6d:9d:4c:3d:d7:84:fc:7c:
                    6a:7b:00:04:0c:d9:6f:7b:3f:c5:1e:6f:2f:d2:c4:
                    62:fe:3b:00:23:9a:13:65:e2:9f:22:4e:f8:f4:6f:
                    c0:87:70:f1:40:54:05:4d:75:72:02:6c:be:c6:46:
                    80:6d:3c:d1:5c:11:10:c0:22:c5:82:73:f9:19:f1:
                    1f:33:8d:52:8e:c4:a6:d4:8b:51:7c:3d:5f:22:10:
                    86:1c:30:b9:77:88:3d:92:80:78:80:32:c0:bd:cc:
                    be:25:9c:10:f6:81:32:1c:45:3a:f0:9b:54:0a:d3:
                    89:fb:2e:77:d0:ac:b7:44:c7:01:0d:36:3c:83:58:
                    29:41:88:12:d3:c9:59:6b:8f:17:36:36:7c:52:3a:
                    14:4c:d0:d8:86:60:f7:a5:3b:52:65:d3:a2:ac:68:
                    58:ab:db:53:20:9b:e7:16:79:1c:80:08:79:83:cc:
                    bf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0A:CD:82:91:8C:E5:3C:AC:4F:0A:11:98:FD:1B:AF:CE:30:95:45
            X509v3 Authority Key Identifier:
                keyid:9B:8B:D2:1F:8D:92:BE:16:5E:2C:FB:C1:81:7C:21:B2:A5:CB:4E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/m4vSH42SvhZeLPvBgXwhsqXLTj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m4vSH42SvhZeLPvBgXwhsqXLTj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182C55/A87C02A067C911F19D78BEF56847A888/F896075A67F011F19C24B38C7747A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:d5:c0:e7:55:68:9d:13:cb:b7:20:a2:4a:99:fc:79:23:0d:
         bd:2b:6b:7f:ee:96:a9:dc:77:27:cf:47:d5:29:78:24:58:15:
         de:9e:13:4e:ef:2b:1c:14:4e:d8:f1:2d:dc:1a:cb:21:94:c4:
         bc:5f:26:d8:fc:05:00:2e:30:ed:a1:7b:0f:7c:bf:94:87:a3:
         5c:14:cd:50:4a:fa:d7:89:c2:ac:38:e1:e4:36:db:25:63:6c:
         54:3e:f5:0c:0c:32:f0:43:0b:67:06:ea:f7:31:d5:ef:97:c1:
         5e:a3:b7:80:13:ab:b9:6c:9c:dc:17:46:58:cc:1b:fb:08:b5:
         b1:a0:bd:32:dd:e9:6d:70:b9:f7:97:9f:ec:b7:ed:ed:3d:a0:
         a9:c6:46:5c:f8:9d:b3:36:53:1a:5c:5c:26:51:bb:f0:61:4b:
         5a:45:2f:82:80:c7:a8:2b:34:a8:3a:ab:44:de:36:50:c4:17:
         6e:c7:3c:01:86:2f:f5:52:d5:2d:a5:e2:8b:46:99:67:16:5f:
         c1:72:81:73:72:ac:29:68:0a:e1:6c:7f:7c:70:93:80:47:0b:
         85:3d:bd:d3:86:89:bf:15:04:d2:70:94:ba:41:c2:b1:7a:4c:
         73:18:a3:6e:7b:cc:fe:a8:f6:38:de:65:04:32:ce:91:75:a0:
         94:09:47:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:18:39 2026 by rpki-client