Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/15E32A7E624F11F19BDACA0A7F47A888.roa
File:                     15E32A7E624F11F19BDACA0A7F47A888.roa (raw, json)
Hash identifier:          f+BLQcaOqMt4rYqZW7bp/2oqh0zJPb7OZ8Oeu/bHU0E=
Subject key identifier:   DB:22:CF:DE:54:53:B2:96:82:6B:DB:CF:B4:40:44:C1:02:07:97:CC
Certificate issuer:       /CN=A9118A92/serialNumber=A5386187C2E61C97E644609CB2A737B530388D7A
Certificate serial:       05
Authority key identifier: A5:38:61:87:C2:E6:1C:97:E6:44:60:9C:B2:A7:37:B5:30:38:8D:7A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pThhh8LmHJfmRGCcsqc3tTA4jXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/15E32A7E624F11F19BDACA0A7F47A888.roa
Signing time:             Sun 07 Jun 2026 08:58:43 +0000
ROA not before:           Sun 07 Jun 2026 08:58:43 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139825
IP address blocks:        162.4.208.0/23 maxlen: 23
                          162.4.208.0/24 maxlen: 24
                          162.4.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.crl
                          rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pThhh8LmHJfmRGCcsqc3tTA4jXo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118A92, serialNumber=A5386187C2E61C97E644609CB2A737B530388D7A
        Validity
            Not Before: Jun  7 08:58:43 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a2532c3-07ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:b4:27:95:87:38:8a:b3:ae:3b:75:60:ec:
                    09:bd:b7:8f:bb:5c:cf:47:73:d0:94:4f:2f:4f:b5:
                    98:4d:ac:05:05:f6:9f:ce:be:8c:17:24:5e:f4:79:
                    18:18:56:16:d7:53:bd:57:8c:75:5c:db:d7:7c:88:
                    d9:a8:98:76:b5:4a:8b:5f:f7:48:3c:0b:33:32:a9:
                    ac:4c:32:f5:9c:1f:dc:8a:90:ba:d0:05:95:55:10:
                    48:6c:9d:82:1f:67:90:3a:67:ae:a3:7f:9c:72:14:
                    b5:f4:a2:61:3a:94:4b:1e:b7:b2:0b:9e:ea:72:dd:
                    7b:66:d7:ce:2b:68:0e:1d:02:63:b1:09:6a:ff:a0:
                    a0:e7:8d:b6:6a:09:59:5a:60:68:71:33:a4:92:4d:
                    0e:d6:91:b7:cd:3b:bc:0f:ea:7d:b0:27:5c:9a:b6:
                    d4:f9:21:ad:c2:81:16:9c:4e:ea:fa:5d:a1:8b:90:
                    c6:3c:59:a3:fb:34:23:12:53:97:77:c6:97:17:b4:
                    b3:47:fa:28:eb:3b:81:f1:bb:7f:c1:0a:46:3f:63:
                    7d:df:41:3b:45:27:1e:c1:47:66:2c:52:61:9b:cb:
                    eb:f7:73:90:0e:c5:fb:ed:45:a0:1b:44:90:0d:6d:
                    c6:99:b9:b0:0b:ef:f6:cf:d7:96:af:1f:7c:55:82:
                    a6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:22:CF:DE:54:53:B2:96:82:6B:DB:CF:B4:40:44:C1:02:07:97:CC
            X509v3 Authority Key Identifier:
                keyid:A5:38:61:87:C2:E6:1C:97:E6:44:60:9C:B2:A7:37:B5:30:38:8D:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/pThhh8LmHJfmRGCcsqc3tTA4jXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pThhh8LmHJfmRGCcsqc3tTA4jXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A92/872E7EBE608C11F19AE295F36F47A888/15E32A7E624F11F19BDACA0A7F47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:c1:7f:3b:4d:82:2b:ae:d6:44:3f:e1:35:57:35:44:85:c6:
         89:03:e0:e8:f5:07:aa:7c:46:57:f1:f9:c2:16:79:4e:9e:99:
         40:9a:2d:40:84:12:a7:59:3c:b8:38:dd:ef:4a:e5:a8:40:10:
         fc:d9:7b:ec:e6:c9:64:67:a2:e1:a0:5b:e6:c8:fe:53:6b:1b:
         28:60:49:ae:48:16:e7:e1:2a:c7:b7:86:df:83:71:e8:ad:13:
         ef:80:30:59:9c:79:ac:e3:d9:5d:2b:65:19:71:75:76:00:c3:
         19:ac:c1:c0:3c:b4:88:fa:d2:ca:19:f1:1e:86:03:ea:a7:84:
         f3:b9:37:f4:39:4b:4f:64:d5:f7:7e:75:28:ab:ea:7a:15:0d:
         65:c7:8a:63:1d:d8:a6:7b:1d:d3:15:81:44:d2:55:ee:64:d8:
         67:ec:44:df:8d:59:59:34:e7:e7:81:68:e1:be:36:83:4c:8f:
         2e:60:2d:bc:9f:33:3b:a3:3d:a6:63:45:25:5d:06:e3:32:05:
         38:f6:8a:84:f8:ca:ee:47:12:8d:c3:ae:46:cd:65:99:9e:6a:
         92:04:d8:71:55:3a:38:e9:65:77:50:9a:df:e1:90:d7:17:1f:
         29:9f:3b:9c:22:5e:08:9c:50:a8:ce:9e:a4:5c:26:46:be:f3:
         20:49:7c:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:28:25 2026 by rpki-client