Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/A668211C79AB11F1870FA39595A30FBC.roa
File:                     A668211C79AB11F1870FA39595A30FBC.roa (raw, json)
Hash identifier:          bMn1My/eGVHQu+9YF4NOAoOsKQU7m5hZjyTX5JuRqWw=
Subject key identifier:   78:EC:80:17:83:C4:DD:95:64:8F:1A:19:3B:65:33:FB:D6:F7:14:25
Certificate issuer:       /CN=A91A9E90/serialNumber=BB88866FFBEB4CDEE95311E6209F76A501BC1B8F
Certificate serial:       08
Authority key identifier: BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/A668211C79AB11F1870FA39595A30FBC.roa
Signing time:             Sun 12 Jul 2026 05:59:17 +0000
ROA not before:           Sun 12 Jul 2026 05:59:17 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     154689
IP address blocks:        162.4.170.0/23 maxlen: 23
                          162.4.170.0/24 maxlen: 24
                          162.4.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E90, serialNumber=BB88866FFBEB4CDEE95311E6209F76A501BC1B8F
        Validity
            Not Before: Jul 12 05:59:17 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a532d35-420d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:7b:79:6d:66:57:8f:f2:83:ea:8b:bd:d5:
                    fb:51:19:e3:eb:1f:b9:dc:9b:34:e6:a9:38:d4:e0:
                    db:b9:6e:bb:0b:f6:8f:fd:3f:95:01:b7:52:5e:01:
                    ae:f8:72:d7:0f:91:c9:92:12:c9:53:ed:e4:d4:7e:
                    c3:97:1a:07:ce:65:b2:c1:fe:a8:d3:eb:0b:77:ce:
                    2b:fe:cf:d4:9f:c2:fc:83:e7:85:48:9d:55:3b:b1:
                    2d:51:57:91:82:5c:50:af:ac:1f:38:2d:a6:3b:e2:
                    1f:88:4c:e7:1a:83:35:d6:5b:10:0b:77:44:3e:eb:
                    4a:99:69:5c:75:2c:4b:e3:39:74:2d:a6:b2:c5:93:
                    a5:f3:99:19:04:b2:2b:ec:76:81:e2:cd:00:7d:e0:
                    3d:71:df:8d:13:6d:34:99:43:0e:97:00:6c:9b:a9:
                    79:ab:13:35:76:25:e5:4e:ca:7b:87:6c:d8:c4:04:
                    97:c2:ad:98:f8:85:12:1b:16:93:8f:83:56:ce:35:
                    55:58:69:fc:f1:ef:2b:d2:fb:a0:a5:31:3f:3d:57:
                    56:17:44:e6:9d:d0:27:bc:fb:a3:cc:d9:75:1d:05:
                    14:ea:bc:2d:31:46:8a:90:b4:70:ff:29:cd:d8:f6:
                    37:6e:00:7f:38:19:df:22:0c:9e:33:7e:da:88:4e:
                    59:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EC:80:17:83:C4:DD:95:64:8F:1A:19:3B:65:33:FB:D6:F7:14:25
            X509v3 Authority Key Identifier:
                keyid:BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/A668211C79AB11F1870FA39595A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:8d:49:f1:75:7f:27:8b:f2:fd:00:82:ed:1b:73:05:bd:1c:
         9a:63:42:14:c4:f2:f5:4e:e6:60:4a:de:07:48:c4:df:0f:60:
         59:88:eb:2e:6e:0d:53:46:b6:61:8e:ad:cd:ea:83:ec:a0:b7:
         e1:12:d9:c7:aa:d9:8f:73:56:0d:d6:90:02:a7:da:06:bb:05:
         7d:29:21:0c:4a:5c:28:69:6d:e0:b2:5f:d4:5c:a5:a6:af:bd:
         d7:1b:94:d9:3c:12:d1:d9:4c:06:ea:08:d9:ca:94:e5:99:19:
         a9:cc:df:c6:04:06:f5:71:2a:08:8c:f8:37:c5:18:35:5a:ab:
         06:5b:64:96:79:62:37:93:a9:02:af:8a:10:b4:a4:a8:f6:94:
         df:0a:1e:04:ff:eb:55:dd:b0:e0:de:ed:45:06:e5:a3:fa:c9:
         c2:bb:80:74:ac:1d:c5:6b:86:f5:3b:02:1a:76:fb:e0:81:f0:
         19:62:4d:27:60:ee:68:93:e5:e7:d4:6e:41:05:0d:e0:b1:4c:
         5c:93:d2:a8:d3:bb:ce:bd:fa:e2:9f:9d:b7:7a:c4:66:d3:86:
         51:a4:fd:c3:7d:4d:3d:1d:e3:58:e9:64:9d:35:fb:72:8c:17:
         c4:f0:80:f8:43:db:9f:99:98:c1:a3:b5:74:aa:6a:01:dc:52:
         fe:a7:7a:e2
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
OUU5MDExMC8GA1UEBRMoQkI4ODg2NkZGQkVCNENERUU5NTMxMUU2MjA5Rjc2QTUw
MUJDMUI4RjAeFw0yNjA3MTIwNTU5MTdaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNTMyZDM1LTQyMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkzXt5bWZXj/KD6ou91ftRGePrH7ncmzTmqTjU4Nu5brsL9o/9P5UBt1JeAa74
ctcPkcmSEslT7eTUfsOXGgfOZbLB/qjT6wt3ziv+z9SfwvyD54VInVU7sS1RV5GC
XFCvrB84LaY74h+ITOcagzXWWxALd0Q+60qZaVx1LEvjOXQtprLFk6XzmRkEsivs
doHizQB94D1x340TbTSZQw6XAGybqXmrEzV2JeVOynuHbNjEBJfCrZj4hRIbFpOP
g1bONVVYafzx7yvS+6ClMT89V1YXROad0Ce8+6PM2XUdBRTqvC0xRoqQtHD/Kc3Y
9jduAH84Gd8iDJ4zftqITln7AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUeOyAF4PE
3ZVkjxoZO2Uz+9b3FCUwHwYDVR0jBBgwFoAUu4iGb/vrTN7pUxHmIJ92pQG8G48w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5RTkwLzUzNzNBNUVFNzlB
QjExRjE4MTQzQURCMjk0QTMwRkJDL3U0aUdiX3ZyVE43cFV4SG1JSjkycFFHOEc0
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdTRpR2JfdnJUTjdwVXhIbUlKOTJwUUc4RzQ4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUU5MC81MzczQTVFRTc5QUIxMUYxODE0M0FEQjI5NEEzMEZCQy9BNjY4MjExQzc5
QUIxMUYxODcwRkEzOTU5NUEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGiBKowDQYJKoZIhvcNAQELBQADggEBACCNSfF1fyeL8v0Agu0bcwW9
HJpjQhTE8vVO5mBK3gdIxN8PYFmI6y5uDVNGtmGOrc3qg+ygt+ES2ceq2Y9zVg3W
kAKn2ga7BX0pIQxKXChpbeCyX9RcpaavvdcblNk8EtHZTAbqCNnKlOWZGanM38YE
BvVxKgiM+DfFGDVaqwZbZJZ5YjeTqQKvihC0pKj2lN8KHgT/61XdsODe7UUG5aP6
ycK7gHSsHcVrhvU7Ahp2++CB8BliTSdg7miT5efUbkEFDeCxTFyT0qjTu869+uKf
nbd6xGbThlGk/cN9TT0d41jpZJ01+3KMF8TwgPhD25+ZmMGjtXSqagHcUv6neuI=
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:28:53 2026 by rpki-client