Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/0D09F1969E4F11EA9EACCE25C4F9AE02.roa
File:                     0D09F1969E4F11EA9EACCE25C4F9AE02.roa (raw, json)
Hash identifier:          5Ibqqw3XMFQd398sEDFY7g7AmFicScMlOQ1736iRE0w=
Subject key identifier:   08:94:F9:24:58:4F:9A:BB:DC:7C:64:CB:7E:EA:E7:84:72:1D:30:2C
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0BF6
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/0D09F1969E4F11EA9EACCE25C4F9AE02.roa
Signing time:             Thu 02 Apr 2026 20:23:01 +0000
ROA not before:           Thu 02 Apr 2026 20:23:01 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     17540
IP address blocks:        203.83.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3062 (0xbf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Apr  2 20:23:01 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ced025-daca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4f:38:38:ae:6a:90:77:26:d0:de:8d:6d:7c:
                    20:c4:61:6a:ac:6e:8c:a1:e4:29:57:a5:2c:82:b7:
                    da:25:23:bc:43:fe:58:a7:e0:d2:01:e3:f2:67:ad:
                    ec:a2:2b:74:c8:43:cf:d3:86:bb:da:d5:f9:7c:a4:
                    a3:f6:e0:cc:23:09:5e:f2:3b:5f:db:4a:eb:7d:91:
                    2c:18:cc:7e:bc:dd:46:26:5e:84:00:24:de:65:a2:
                    be:a2:df:1c:18:7d:7c:1d:0a:38:a2:ce:55:0a:32:
                    a8:e6:18:0b:f3:9a:39:4c:cd:ca:a7:0e:79:22:c5:
                    58:00:0d:da:02:bc:fb:24:9c:03:a8:19:e8:1a:21:
                    83:f6:d7:4d:5a:7d:77:3e:fa:d1:0b:63:40:67:aa:
                    e6:48:e7:84:1f:38:14:a5:e0:47:03:69:54:89:f5:
                    b8:e3:e9:e2:39:11:a8:59:8e:02:f0:80:26:ea:44:
                    19:40:c8:e1:ba:89:db:4e:d8:80:35:38:8c:70:70:
                    b4:55:81:32:8b:d7:2b:b4:44:fe:37:1e:e9:fd:41:
                    f2:0f:e5:f7:2f:33:42:7a:10:07:2b:9f:96:ff:38:
                    0f:ff:ca:a4:bf:71:9d:9b:e8:7d:d1:0d:13:4a:f0:
                    e4:fc:0b:80:63:4d:d6:0e:ff:39:72:04:46:6f:3f:
                    d0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:94:F9:24:58:4F:9A:BB:DC:7C:64:CB:7E:EA:E7:84:72:1D:30:2C
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/0D09F1969E4F11EA9EACCE25C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.83.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:32:43:e4:f6:78:77:3a:e7:1d:69:45:7f:54:ad:fd:20:e6:
         12:39:7d:78:81:ee:cd:58:bc:70:40:30:8e:0d:4c:d2:16:c7:
         76:3b:ad:1f:cc:0f:c9:47:06:11:79:7d:61:fb:76:35:06:66:
         01:a0:45:a9:7b:3f:7a:f4:93:0b:42:47:06:04:75:14:2d:c2:
         04:fb:98:92:cf:35:73:f3:ef:7d:8e:59:c5:11:a0:5c:70:42:
         68:f6:74:32:23:3d:a0:ed:15:e8:35:db:b2:31:f9:aa:05:a9:
         ba:e0:3f:e2:f4:83:fa:dc:a9:5b:3a:af:81:37:73:fa:6b:a6:
         fe:5e:70:4d:e1:56:55:e4:42:4c:3f:57:9b:c4:93:ef:7a:ce:
         0a:62:5d:ae:b5:c8:b7:26:13:45:96:d1:88:39:93:cb:58:61:
         3b:a3:d4:6e:10:32:45:ed:fc:ed:e6:f0:88:ec:60:c9:50:87:
         cb:74:13:f4:e2:c7:f1:76:78:ae:16:a8:28:59:32:09:65:e1:
         01:12:bb:61:fa:a8:37:ed:b2:3d:7e:be:41:a4:f1:d2:15:69:
         14:5c:44:ef:db:10:3e:b0:25:36:42:6f:5a:55:80:ee:83:b2:
         c0:fa:8f:1b:3f:f3:e4:a6:53:21:df:a4:a4:9e:f1:b8:d6:00:
         06:3c:9b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:43:25 2026 by rpki-client