Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/7843AE0229EA11F19F51207DA0833773.roa
File:                     7843AE0229EA11F19F51207DA0833773.roa (raw, json)
Hash identifier:          6V2DjYIx8625kqe242doUOvVQbgf+Yq45HsMphmWFZY=
Subject key identifier:   37:E4:95:04:BE:0B:D7:A3:BD:EF:9E:03:3A:6B:3D:06:6D:56:8A:59
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       015F
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/7843AE0229EA11F19F51207DA0833773.roa
Signing time:             Tue 28 Jul 2026 19:41:00 +0000
ROA not before:           Tue 28 Jul 2026 19:41:00 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     6279
IP address blocks:        65.72.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Jul 28 19:41:00 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6905cc-562c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7e:b1:01:9f:d9:5e:e2:34:14:38:74:c0:2c:
                    5b:97:e6:2f:d3:68:97:bc:3d:90:de:64:bf:27:7e:
                    ef:34:a7:9f:02:21:4f:2e:d4:64:f7:56:71:8d:07:
                    99:77:a0:0a:c0:b7:07:c1:66:63:46:cf:5c:6b:8e:
                    d3:5c:df:03:ac:aa:d6:eb:4a:53:6f:07:cf:49:59:
                    63:6b:55:fa:c2:40:6d:3b:bb:5c:5e:0c:9f:1b:e6:
                    8a:5f:3c:2e:c6:35:60:bc:6a:51:ae:48:a6:f7:8a:
                    44:7a:4a:36:da:5a:12:f8:33:eb:23:9a:a4:70:94:
                    b2:c7:f7:d7:33:ab:9f:32:7b:20:0b:28:9f:06:31:
                    3e:97:05:2e:92:89:31:23:73:7e:2b:19:95:fb:97:
                    a9:32:82:5c:ec:f9:99:d6:44:a1:9a:c5:bf:bb:63:
                    07:ba:25:fd:64:c1:25:95:1b:54:d6:b8:cf:f9:95:
                    7c:b9:4a:8a:14:f3:e0:be:cd:39:6b:21:b8:e1:3d:
                    98:a5:71:29:c1:0d:9c:7c:e5:db:84:73:e1:a4:bd:
                    3d:fe:40:ae:b4:9a:44:3b:19:e0:ad:c9:e4:8d:b9:
                    33:3a:64:69:95:5c:d5:27:6d:47:d1:85:29:4e:57:
                    bd:17:22:34:b1:e0:b9:f5:b4:4a:c6:f0:94:48:8c:
                    0b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E4:95:04:BE:0B:D7:A3:BD:EF:9E:03:3A:6B:3D:06:6D:56:8A:59
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/7843AE0229EA11F19F51207DA0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:78:97:a7:9b:19:33:86:ec:ca:9f:2e:1b:0d:eb:e4:1f:15:
         2e:46:dc:4b:b2:fb:42:2c:d7:29:93:be:92:e5:bb:4c:b2:b2:
         11:f5:26:9b:50:71:56:d1:4e:41:70:82:d0:fe:84:8d:9e:11:
         ac:23:e8:50:44:c3:0e:17:63:85:ad:af:f5:a5:3c:c7:f1:55:
         f2:f8:3d:53:37:d6:f9:c7:85:b3:2c:63:1c:2d:cf:23:bf:30:
         51:df:71:62:33:87:3f:fe:50:50:53:5b:51:db:fd:67:b9:a6:
         6b:70:35:d1:95:d6:79:e8:16:6c:16:85:65:c8:fc:3f:93:46:
         ca:58:05:bd:22:cd:69:20:be:b5:5e:5f:45:93:06:2f:3f:d8:
         05:87:7a:2c:8c:6a:23:e5:e8:60:f9:02:32:61:12:1c:0c:fc:
         59:f6:ba:c9:15:c7:f9:8b:6f:b7:27:74:56:0f:96:c2:d2:33:
         f9:e4:de:80:20:8a:c4:40:21:bb:bd:0f:a8:95:98:96:36:77:
         c6:6e:f2:97:20:49:f5:8e:ee:63:59:49:61:0d:ae:68:52:a5:
         e3:dc:8d:a6:a7:10:0d:4f:1a:d1:a7:50:57:5d:d7:dd:28:f9:
         6d:0a:01:0e:10:bc:cd:fb:ce:1e:41:2b:e3:65:7e:4f:aa:aa:
         7b:30:d4:ad
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5
MjkxRTY4M0EwHhcNMjYwNzI4MTk0MTAwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY5MDVjYy01NjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnH6xAZ/ZXuI0FDh0wCxbl+Yv02iXvD2Q3mS/J37vNKefAiFPLtRk91ZxjQeZ
d6AKwLcHwWZjRs9ca47TXN8DrKrW60pTbwfPSVlja1X6wkBtO7tcXgyfG+aKXzwu
xjVgvGpRrkim94pEeko22loS+DPrI5qkcJSyx/fXM6ufMnsgCyifBjE+lwUukokx
I3N+KxmV+5epMoJc7PmZ1kShmsW/u2MHuiX9ZMEllRtU1rjP+ZV8uUqKFPPgvs05
ayG44T2YpXEpwQ2cfOXbhHPhpL09/kCutJpEOxngrcnkjbkzOmRplVzVJ21H0YUp
Tle9FyI0seC59bRKxvCUSIwLEQIDAQABo4ICXzCCAlswHQYDVR0OBBYEFDfklQS+
C9ejve+eAzprPQZtVopZMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5
NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvNzg0M0FFMDIy
OUVBMTFGMTlGNTEyMDdEQTA4MzM3NzMucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMAQUgwDQYJKoZIhvcNAQELBQADggEBAIR4l6ebGTOG7MqfLhsN6+Qf
FS5G3Euy+0Is1ymTvpLlu0yyshH1JptQcVbRTkFwgtD+hI2eEawj6FBEww4XY4Wt
r/WlPMfxVfL4PVM31vnHhbMsYxwtzyO/MFHfcWIzhz/+UFBTW1Hb/We5pmtwNdGV
1nnoFmwWhWXI/D+TRspYBb0izWkgvrVeX0WTBi8/2AWHeiyMaiPl6GD5AjJhEhwM
/Fn2uskVx/mLb7cndFYPlsLSM/nk3oAgisRAIbu9D6iVmJY2d8Zu8pcgSfWO7mNZ
SWENrmhSpePcjaanEA1PGtGnUFdd190o+W0KAQ4QvM37zh5BK+Nlfk+qqnsw1K0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:50:54 2026 by rpki-client