Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/03C24D0680E611F1A15EA29461A30FBC.roa
File:                     03C24D0680E611F1A15EA29461A30FBC.roa (raw, json)
Hash identifier:          Ljl0b7Hfr1nD+FJCyRaFPhc4I08zWA4eYVbJN5h+JTA=
Subject key identifier:   F6:25:CB:DE:98:1C:A8:40:7D:69:6A:EC:00:3F:1E:38:E4:17:80:6B
Certificate issuer:       /CN=A9198A90/serialNumber=DC7A7D0B9A01BF85E89A2717F3B966D99E45F7E7
Certificate serial:       07
Authority key identifier: DC:7A:7D:0B:9A:01:BF:85:E8:9A:27:17:F3:B9:66:D9:9E:45:F7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/03C24D0680E611F1A15EA29461A30FBC.roa
Signing time:             Thu 16 Jul 2026 07:14:42 +0000
ROA not before:           Thu 16 Jul 2026 07:14:42 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     132698
IP address blocks:        162.4.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.crl
                          rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198A90, serialNumber=DC7A7D0B9A01BF85E89A2717F3B966D99E45F7E7
        Validity
            Not Before: Jul 16 07:14:42 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a5884e2-3c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:c7:f8:92:6c:46:07:a7:c8:a1:15:90:9f:
                    b9:fe:ab:5e:49:2b:d8:aa:35:1a:b9:bd:82:05:97:
                    89:ad:f8:4a:5b:9c:d4:51:6f:7c:b8:9b:d4:63:07:
                    1a:84:48:dc:8a:37:16:9b:11:a4:56:f9:4b:4a:67:
                    aa:c4:d3:d7:e1:1d:75:87:04:89:6c:ab:b9:5c:d9:
                    15:58:df:e0:31:3f:94:50:38:17:b2:bc:ee:b7:2e:
                    c4:85:3f:b0:3d:ac:c7:2f:c0:50:e6:19:44:10:45:
                    c1:73:bf:b1:c3:bf:1e:ae:04:c1:c9:34:db:34:a2:
                    b3:1b:f2:7e:a3:38:4b:9d:ce:e4:0f:2c:17:d7:d0:
                    7c:f6:a1:17:06:9c:1e:49:d5:be:18:33:9c:9c:42:
                    16:0e:29:a1:34:c0:f5:90:6a:32:cf:e4:90:01:43:
                    64:8c:3a:74:cf:4b:cc:b9:2e:c9:e4:a4:42:19:91:
                    4a:ee:bd:fe:08:01:ba:7b:e5:ea:e7:63:be:9a:9b:
                    fd:b4:ad:0b:f5:10:db:fc:b8:36:7e:ef:77:4b:1f:
                    fd:98:38:88:66:2a:45:e9:60:d7:86:e2:de:cc:5e:
                    15:5b:48:5a:05:8a:68:bf:50:37:b3:ad:d5:bf:94:
                    64:71:22:f5:6d:5f:71:f2:06:62:46:c0:32:73:32:
                    98:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:25:CB:DE:98:1C:A8:40:7D:69:6A:EC:00:3F:1E:38:E4:17:80:6B
            X509v3 Authority Key Identifier:
                keyid:DC:7A:7D:0B:9A:01:BF:85:E8:9A:27:17:F3:B9:66:D9:9E:45:F7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/03C24D0680E611F1A15EA29461A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:a2:f9:ba:c9:b6:00:c7:c8:81:52:fe:2e:0d:a6:8f:28:04:
         db:02:d6:5d:cb:c0:c4:d8:29:11:f1:17:49:e5:2a:d7:54:dc:
         02:d7:ce:bf:07:48:ef:6d:1f:ef:98:1d:d0:7c:85:0f:7c:2b:
         d2:99:6b:eb:71:5b:00:c3:7a:b6:a8:68:53:65:a4:56:3a:19:
         e1:32:d7:63:f7:02:32:e9:2a:81:90:4d:f9:0b:73:9d:c5:25:
         b5:4d:59:b7:d5:b4:51:99:1e:52:30:0f:77:1d:3a:86:ab:2b:
         0a:1f:95:8a:99:d0:11:13:2e:bf:6e:42:16:e9:ec:d6:51:70:
         38:ce:cd:26:a8:27:bd:bc:aa:10:2f:80:67:4d:1c:0b:54:65:
         92:3f:a6:a1:7d:da:04:d0:a0:f4:b0:f3:c2:f2:ee:b7:5d:b7:
         ca:4f:15:1b:6c:d8:f9:ee:0e:01:18:9e:26:87:4a:3f:92:79:
         f6:a8:10:ec:1c:c5:69:7e:11:6c:7d:2e:4e:d8:bb:5c:2c:35:
         9c:21:38:31:c6:be:ae:b6:f8:e4:e4:18:ca:bd:23:81:ed:c2:
         b5:95:a6:61:e1:8b:0a:b7:25:4d:b7:e0:0a:6d:ac:f5:28:3f:
         cc:be:38:64:47:bf:eb:9b:b7:df:49:6e:83:0b:4f:72:f5:5d:
         f4:8c:e6:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:18:40 2026 by rpki-client