Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A26B4/750F6CAE55A911F18E92BC479B833773/8D2B90D45B0C11F1A290872FAE833773.roa
File:                     8D2B90D45B0C11F1A290872FAE833773.roa (raw, json)
Hash identifier:          3g8vxdl0E+pjh0ca+KYIT3et7IT5oSzzWNnxWK+ucys=
Subject key identifier:   1C:6F:82:A3:AD:EC:1E:5F:9D:74:31:F4:F0:31:00:9B:73:69:B6:E5
Certificate issuer:       /CN=A91A26B4/serialNumber=98474492F027DF5E7D6CBBCF23777513AC4CC198
Certificate serial:       06
Authority key identifier: 98:47:44:92:F0:27:DF:5E:7D:6C:BB:CF:23:77:75:13:AC:4C:C1:98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mEdEkvAn3159bLvPI3d1E6xMwZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A26B4/750F6CAE55A911F18E92BC479B833773/8D2B90D45B0C11F1A290872FAE833773.roa
Signing time:             Fri 29 May 2026 03:14:49 +0000
ROA not before:           Fri 29 May 2026 03:14:49 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     154690
IP address blocks:        162.4.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A26B4/750F6CAE55A911F18E92BC479B833773/mEdEkvAn3159bLvPI3d1E6xMwZg.crl
                          rsync://rpki.apnic.net/member_repository/A91A26B4/750F6CAE55A911F18E92BC479B833773/mEdEkvAn3159bLvPI3d1E6xMwZg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mEdEkvAn3159bLvPI3d1E6xMwZg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A26B4, serialNumber=98474492F027DF5E7D6CBBCF23777513AC4CC198
        Validity
            Not Before: May 29 03:14:49 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a1904a9-2023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:10:b9:4f:20:f0:7d:39:e7:0e:28:8f:89:
                    bb:de:50:f4:94:42:11:5f:11:fb:f8:be:fa:be:44:
                    9a:06:d8:14:45:b5:9c:a9:33:29:f9:39:96:8f:b4:
                    96:9c:f1:f9:03:be:a3:db:43:ce:2a:4d:16:8f:9e:
                    55:ce:7d:34:31:c8:de:5d:cf:f3:d0:c1:c8:92:97:
                    97:b4:6b:f5:e3:ef:ae:ed:5c:65:b9:14:b9:80:b0:
                    43:b2:7f:d7:ee:77:0d:69:60:4a:e8:87:f8:b5:03:
                    06:71:b2:84:11:e0:a5:64:93:79:d2:67:71:47:93:
                    98:f1:3f:19:91:c7:56:aa:93:a4:c6:ba:43:4a:81:
                    81:e8:60:5e:ee:e3:94:f4:3c:81:2c:92:d0:66:75:
                    2b:a8:93:89:dc:5a:71:a2:86:04:d4:64:74:27:da:
                    78:9e:ad:ac:01:b2:b9:48:3b:3d:98:53:6a:66:f9:
                    a5:10:49:01:c0:23:57:21:c6:f5:c8:56:d3:2b:55:
                    cc:85:3f:81:80:71:40:77:02:eb:2e:92:ac:d9:0b:
                    8b:53:c6:2e:1c:32:9b:e6:27:18:a5:87:03:c5:53:
                    c4:04:ab:42:d1:b3:5f:98:84:b0:16:f4:11:59:66:
                    8a:e7:f2:66:d3:69:02:fe:c4:9c:1a:50:be:87:be:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6F:82:A3:AD:EC:1E:5F:9D:74:31:F4:F0:31:00:9B:73:69:B6:E5
            X509v3 Authority Key Identifier:
                keyid:98:47:44:92:F0:27:DF:5E:7D:6C:BB:CF:23:77:75:13:AC:4C:C1:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A26B4/750F6CAE55A911F18E92BC479B833773/mEdEkvAn3159bLvPI3d1E6xMwZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mEdEkvAn3159bLvPI3d1E6xMwZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A26B4/750F6CAE55A911F18E92BC479B833773/8D2B90D45B0C11F1A290872FAE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:c9:1c:c1:cf:ef:d0:eb:b9:db:6c:a2:63:e8:f3:b9:b7:7b:
         fb:6c:f1:64:00:d4:9b:03:9d:ba:c2:83:93:6b:1c:cb:12:61:
         41:67:51:04:9e:78:a6:96:41:4a:51:ee:93:2a:31:0a:d5:f0:
         df:c7:ce:25:1b:fb:62:2d:3e:0e:83:1a:5b:00:31:69:05:f5:
         82:f6:9b:3c:a1:35:b8:67:ab:31:d0:55:a3:98:e2:91:c3:fc:
         ad:20:a8:59:23:1c:52:ba:34:c9:2d:35:d1:25:9b:5d:1f:5d:
         90:fa:54:57:65:a5:5d:7e:10:ba:c9:7f:a4:b8:85:0f:d5:ef:
         e1:34:e8:fc:78:80:0e:ed:ba:8d:a3:2f:61:70:45:ea:ed:26:
         d9:6c:6b:60:21:64:51:51:d7:bc:b8:be:d7:57:c5:a9:0f:12:
         d1:98:a0:97:0b:e8:d9:3e:06:ac:83:2f:d2:d3:db:23:3b:15:
         47:9a:2b:01:8f:97:20:ab:b1:ad:f3:ad:81:f2:94:07:eb:52:
         29:e8:3a:29:3f:83:b9:70:a8:50:8b:cb:9f:a9:00:e5:df:8a:
         7f:99:91:f3:82:00:6a:6d:62:fe:55:40:df:e0:d7:f2:b6:d9:
         c4:f7:c1:2c:33:15:8b:98:03:82:f4:1e:1d:31:8d:8a:6b:3b:
         12:4c:8a:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:14 2026 by rpki-client