Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/F9B1B1167E3F11F0B7941020C4F9AE02.roa
File:                     F9B1B1167E3F11F0B7941020C4F9AE02.roa (raw, json)
Hash identifier:          /kdBSH4Dgad8EIH6wkzde7xGC9S6ncoKQ6wbaAL9T8k=
Subject key identifier:   10:AE:B4:FD:3C:C7:EC:92:02:AA:D2:F5:AA:4D:0B:C5:86:0F:06:EE
Certificate issuer:       /CN=A9127760/serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F
Certificate serial:       C5
Authority key identifier: CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/F9B1B1167E3F11F0B7941020C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 07:56:54 +0000
ROA not before:           Thu 03 Sep 2026 07:56:54 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154158
IP address blocks:        155.35.46.0/23 maxlen: 23
                          155.35.46.0/24 maxlen: 24
                          155.35.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl
                          rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127760, serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F
        Validity
            Not Before: Sep  3 07:56:54 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a992846-8090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:c5:bc:eb:85:37:8f:eb:9f:ae:38:ac:b3:
                    db:f1:e6:1b:1d:03:f8:de:75:96:0d:5a:b5:22:44:
                    04:5e:dc:ce:d5:80:e0:1c:e4:a2:16:07:9e:44:a9:
                    5b:b5:dc:82:74:a6:10:74:a4:6d:c8:e6:85:72:d8:
                    f4:a1:8f:ae:30:cb:35:70:13:8e:a9:3e:23:fb:df:
                    ab:74:cb:e7:04:74:cd:6b:b4:35:47:62:53:89:a2:
                    63:2f:36:bf:69:4d:d4:45:4e:6d:30:ef:bc:4b:fe:
                    cc:14:ad:2b:04:57:a5:6d:52:2b:83:87:93:2c:79:
                    8e:d0:9d:0f:c7:8b:3f:a4:fa:59:9a:50:e1:4a:09:
                    12:f1:4d:50:19:9e:27:b7:be:27:eb:fb:42:26:f2:
                    f9:9e:de:28:65:0e:a1:2a:54:bb:fe:a9:08:92:bf:
                    e6:ed:4e:67:ed:82:58:aa:2e:3d:95:43:cc:d4:29:
                    ea:a8:d2:e5:8f:e6:e0:b4:0d:1d:f3:dc:40:4a:04:
                    d8:29:31:a1:56:62:52:41:17:8d:cf:2c:1f:ff:b1:
                    76:ff:3b:2e:ee:7f:55:c9:47:95:6c:55:40:71:df:
                    3f:2e:36:b4:a9:64:a3:a1:d6:19:e0:24:a8:52:d0:
                    d5:04:a2:cb:a0:b6:5a:07:2d:cd:d8:2f:29:35:1d:
                    7b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AE:B4:FD:3C:C7:EC:92:02:AA:D2:F5:AA:4D:0B:C5:86:0F:06:EE
            X509v3 Authority Key Identifier:
                keyid:CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/F9B1B1167E3F11F0B7941020C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.35.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:92:bb:26:86:87:2a:a8:7e:66:21:21:67:70:9d:40:f5:d8:
         5d:4a:a3:95:04:d9:ca:a5:db:de:9e:06:84:f5:f9:b4:bb:25:
         ea:95:52:0b:2b:ac:a6:19:8c:82:5b:09:f2:80:f6:d3:73:f1:
         4a:13:bd:9f:26:e1:54:16:42:4e:6f:ff:a7:17:5c:5d:ca:d8:
         12:92:49:3e:b6:06:0a:b0:0b:e3:59:61:97:e7:92:4c:d4:f2:
         30:1b:b0:c6:76:24:4e:92:03:d5:6b:84:2f:8e:4a:23:29:fc:
         85:41:87:45:30:e8:17:0b:16:f9:81:98:b1:63:b3:36:9f:b7:
         8a:88:ba:21:c6:c1:5b:d5:53:a9:53:7f:31:9d:8d:40:ef:13:
         5a:d6:70:48:b5:7d:93:a1:d1:10:d6:cc:53:cc:4f:d6:4c:b8:
         81:ba:e6:22:f4:75:0f:5b:60:84:5a:7d:d7:ec:ad:1d:a5:7b:
         cb:a4:52:aa:0e:68:75:6b:55:9f:84:b7:c7:0c:96:f2:d1:e3:
         4e:36:eb:f6:ff:6c:c8:e1:53:cd:14:74:27:bc:83:ec:3c:b0:
         9e:23:bf:86:a6:9c:70:91:38:e2:49:46:b9:3d:8c:26:a8:55:
         74:e0:78:e5:25:7c:b3:e8:b1:e5:9c:f1:c6:d7:05:32:78:ae:
         a7:23:c2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:38:57 2026 by rpki-client