Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/FAA05C1E57EA11F1850E3A8D93833773.roa
File:                     FAA05C1E57EA11F1850E3A8D93833773.roa (raw, json)
Hash identifier:          EhC0uehK9atplVY2H7sxubg42UzW+RldO5jjtPhRdMI=
Subject key identifier:   FF:28:CB:83:60:44:78:8C:EA:1F:E1:8D:BD:67:B9:3B:B2:FD:04:F7
Certificate issuer:       /CN=A91FB95D/serialNumber=50CDF86C05FEF4FCE4D248DDB75AB00DB1FB17E8
Certificate serial:       04
Authority key identifier: 50:CD:F8:6C:05:FE:F4:FC:E4:D2:48:DD:B7:5A:B0:0D:B1:FB:17:E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/FAA05C1E57EA11F1850E3A8D93833773.roa
Signing time:             Mon 25 May 2026 03:41:29 +0000
ROA not before:           Mon 25 May 2026 03:41:29 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     137493
IP address blocks:        162.4.178.0/24 maxlen: 24
                          162.4.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl
                          rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB95D, serialNumber=50CDF86C05FEF4FCE4D248DDB75AB00DB1FB17E8
        Validity
            Not Before: May 25 03:41:29 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a13c4e9-8125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:ec:f7:9b:87:87:3f:61:2f:84:6a:91:73:
                    37:8f:a6:49:d7:18:56:fb:98:b7:2b:c3:e3:bb:6b:
                    d0:63:e5:2b:e1:28:09:76:4a:87:55:d5:d0:c7:ba:
                    66:c2:63:b5:5a:89:69:28:4c:68:d4:da:d1:7a:84:
                    67:52:01:98:22:0f:6f:c9:36:7e:66:9b:f0:38:7d:
                    69:81:60:70:20:83:45:53:97:c9:04:b3:e9:ec:ce:
                    c8:ca:24:db:59:1f:82:eb:70:70:ee:7b:00:da:a7:
                    28:97:32:1e:b7:80:82:6c:ff:e8:a1:e9:7b:30:d3:
                    e0:33:10:97:74:54:23:1e:c6:dc:15:60:75:f5:d0:
                    29:d3:26:a0:d5:ad:54:91:14:a9:90:01:49:ad:a4:
                    f0:0a:43:b1:bb:3c:3c:c4:4b:90:26:b7:d6:fd:16:
                    77:43:17:97:5d:20:3e:5f:f4:95:ae:b9:01:fc:20:
                    9b:e0:91:82:2e:1e:df:f1:53:d6:ac:b9:c5:4a:2b:
                    2b:57:92:83:18:72:4b:94:e0:bb:e1:9c:78:07:97:
                    df:eb:98:b3:99:88:8d:2a:78:f1:2a:13:69:e9:0c:
                    23:9d:f8:5c:fd:34:4f:c4:61:4b:9b:66:21:0a:fa:
                    ca:e7:89:2f:eb:ec:7f:b4:db:ef:84:64:97:f6:17:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:28:CB:83:60:44:78:8C:EA:1F:E1:8D:BD:67:B9:3B:B2:FD:04:F7
            X509v3 Authority Key Identifier:
                keyid:50:CD:F8:6C:05:FE:F4:FC:E4:D2:48:DD:B7:5A:B0:0D:B1:FB:17:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/FAA05C1E57EA11F1850E3A8D93833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:88:bd:39:d1:e7:a1:6d:18:6f:1e:dd:f4:2c:c7:30:74:cf:
         98:1d:82:a9:39:ca:3e:35:dd:f8:0f:df:27:6b:71:70:6a:6a:
         b8:2f:d1:74:85:12:dd:26:4a:43:8a:2e:e1:da:b3:39:47:0e:
         04:c2:dc:06:16:6e:23:02:9d:00:11:c4:f0:fd:fd:0b:be:dc:
         f8:35:74:f8:90:57:d8:0d:2c:85:0b:76:c5:4f:b7:3d:0c:69:
         42:9d:a2:88:07:a8:88:10:d0:1a:ef:55:6d:60:52:e6:7f:8d:
         d3:c6:05:db:ab:91:11:ce:a9:d0:de:59:24:b1:ab:0f:d6:27:
         85:1c:2d:f6:36:32:6d:c2:af:49:5b:97:b2:80:f5:74:b0:eb:
         d3:26:9f:9a:48:7b:a7:6e:3f:74:f0:1b:49:c5:c4:60:72:ff:
         be:98:9f:f6:07:b4:a0:2f:b3:c7:84:9c:81:e6:b2:c2:1d:4f:
         99:99:12:69:54:87:b4:dc:5e:29:cd:8d:70:f2:8d:10:39:f5:
         da:8b:96:6b:a1:3a:b5:57:94:fd:97:db:31:a5:e9:ad:a8:c4:
         b9:6e:cd:43:69:99:cb:ca:d9:60:7f:da:a2:69:43:fc:7d:19:
         4d:0e:db:f2:bb:76:19:dd:0d:b5:0b:8b:00:c0:3f:51:f0:8e:
         e4:14:e2:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:08 2026 by rpki-client