Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/3987426E53AC11F1A96C853AB4833773.roa
File:                     3987426E53AC11F1A96C853AB4833773.roa (raw, json)
Hash identifier:          1fcsU1JakugdZ+b2jMGMeoHuQorFf/tI7vFtaxcZV3o=
Subject key identifier:   9A:9B:6F:07:33:16:89:A0:1B:68:D1:82:FC:B4:E8:DF:30:1D:AC:6F
Certificate issuer:       /CN=A9184FC8/serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858
Certificate serial:       27
Authority key identifier: 96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/3987426E53AC11F1A96C853AB4833773.roa
Signing time:             Tue 19 May 2026 17:57:39 +0000
ROA not before:           Tue 19 May 2026 17:57:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29802
IP address blocks:        163.128.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl
                          rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 09:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184FC8, serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858
        Validity
            Not Before: May 19 17:57:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a0ca493-6ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:05:ad:85:30:92:8b:ed:60:22:1e:6f:e8:
                    28:0b:fb:fc:aa:db:85:28:2b:0f:cd:39:43:ef:72:
                    80:5b:c0:2f:f7:86:94:fc:80:31:f9:be:68:2e:8f:
                    df:a9:0b:f6:ac:fe:6d:61:69:9c:6a:99:f8:6a:c4:
                    8d:5d:13:38:02:8b:e6:99:6e:38:8b:f9:80:5a:61:
                    75:40:38:53:22:5c:fd:8f:1f:e6:d7:fd:23:c8:4a:
                    b2:fb:e9:eb:d0:41:51:01:0e:ac:8e:4a:9d:9d:de:
                    fc:e2:e7:15:ef:13:9d:d4:5b:ff:09:a6:5d:db:10:
                    f5:7f:98:3c:cc:d3:59:9b:92:24:5b:34:1c:ce:91:
                    ff:f5:ee:59:1d:29:5e:27:87:eb:e0:02:13:29:1d:
                    fa:50:27:5e:1e:b0:95:c2:3a:40:a9:3f:6d:63:52:
                    d7:1d:5c:dd:5c:ac:e2:84:c4:28:9b:c2:45:ca:ad:
                    5a:c8:af:ec:b7:e5:52:d7:8c:a0:5c:73:9e:71:23:
                    fb:cc:88:16:4c:d3:cc:24:d5:6f:c5:bc:a2:11:06:
                    5b:c5:63:e1:e1:e7:66:13:1e:a0:bd:78:ab:8a:5b:
                    8a:24:ae:97:9f:7d:f8:bd:f2:67:77:09:df:5d:99:
                    ea:c5:49:af:3c:5a:fb:fc:b1:95:7f:21:5f:64:4d:
                    ed:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9B:6F:07:33:16:89:A0:1B:68:D1:82:FC:B4:E8:DF:30:1D:AC:6F
            X509v3 Authority Key Identifier:
                keyid:96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/3987426E53AC11F1A96C853AB4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ed:fd:6e:c0:d3:97:db:74:71:7f:f4:f4:0d:7d:da:4e:3a:
         80:16:da:7a:5e:28:b4:6e:2b:1a:e3:e1:64:9b:d5:fb:11:eb:
         2e:04:13:6d:38:5a:98:d3:98:f6:b3:ed:59:b7:ca:74:2b:31:
         80:8f:60:38:4c:05:3e:2c:68:ba:ea:13:34:3d:1b:d2:9b:8a:
         7b:90:c9:e0:5d:9d:d6:db:32:f9:ab:74:c3:eb:a1:93:28:e8:
         57:4d:e1:f3:cc:c3:2b:86:51:61:0d:69:2d:41:ba:5e:3c:3d:
         bd:c1:b2:0b:80:93:b7:78:20:d6:ec:89:1e:2b:ce:cf:eb:b0:
         52:ab:23:b0:7d:97:3b:17:d0:b9:bd:91:97:92:43:f5:45:7b:
         5e:28:b5:34:f5:e8:d5:09:8b:17:1b:b7:65:69:ea:8c:61:18:
         95:04:e0:18:aa:80:17:1d:80:cd:44:14:3e:21:96:b1:ce:b5:
         83:af:2b:95:7b:ae:e3:90:c5:47:4b:2f:66:01:fe:f9:c1:31:
         83:3c:cf:5f:ba:ee:da:f7:c7:18:30:a0:bb:1b:21:a8:f1:ed:
         38:f0:c8:53:48:79:58:b1:35:2d:83:44:71:72:d8:cb:48:5c:
         6d:66:c5:b9:b1:d8:02:70:0c:f6:f9:88:2b:29:18:37:e4:d8:
         63:56:c6:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 11:12:06 2026 by rpki-client