Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/783957EA31BF11F1BC4C9C57C1833773.roa
File:                     783957EA31BF11F1BC4C9C57C1833773.roa (raw, json)
Hash identifier:          DoB27+5uTyjT+GpZ+8s5WP7HzASd3cgOpWixwpFDv7M=
Subject key identifier:   A9:3F:15:AB:00:70:4C:B1:AF:F3:AB:F8:DA:D0:8B:DF:C8:68:A0:4E
Certificate issuer:       /CN=A9141B4C/serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
Certificate serial:       22
Authority key identifier: 2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/783957EA31BF11F1BC4C9C57C1833773.roa
Signing time:             Mon 06 Apr 2026 13:49:45 +0000
ROA not before:           Mon 06 Apr 2026 13:49:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154499
IP address blocks:        163.128.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl
                          rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141B4C, serialNumber=2D77B331D832912B61BE0A50A6D8634B8E2AA79C
        Validity
            Not Before: Apr  6 13:49:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d3b9f9-e952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:3c:d4:d1:41:05:49:a4:08:95:7b:c7:de:
                    9c:54:1e:7d:96:ff:bc:18:d7:e9:16:35:fb:27:d5:
                    2f:1a:bd:b3:b5:ed:68:03:73:27:36:22:20:17:82:
                    d0:7f:f6:ba:71:d8:d2:d4:60:01:e7:91:5d:19:f2:
                    16:73:41:3d:62:bb:8a:2d:50:bd:c0:ba:a5:64:7e:
                    f0:93:17:d8:d2:f9:23:93:a1:0c:9f:52:b0:84:a0:
                    fa:ab:8f:f9:0e:0e:68:ae:89:14:38:a2:18:3f:c1:
                    9a:50:43:1e:11:81:29:28:85:e4:88:67:25:44:bf:
                    92:f9:e1:9e:61:91:d4:96:9b:57:a4:6a:ae:97:85:
                    92:7e:ba:d2:2b:56:92:e6:95:82:0a:f5:3e:fa:f0:
                    87:da:ff:de:14:12:e5:5f:50:92:f4:3b:2e:4d:4e:
                    c0:04:91:22:89:d1:13:48:c2:5f:d7:7f:ce:c0:99:
                    b4:e5:63:0d:01:5f:b5:32:5a:0e:b9:d8:c0:24:f1:
                    02:20:ea:e2:d1:f3:5a:60:ce:3b:97:02:4d:97:8c:
                    b8:50:48:7e:68:eb:0f:2c:23:5d:57:a5:70:3a:cd:
                    fe:d7:2d:02:88:80:a1:fd:5a:89:f7:45:ba:7d:fd:
                    cf:70:37:28:3c:7a:83:d4:a3:46:b7:24:90:84:d7:
                    b9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3F:15:AB:00:70:4C:B1:AF:F3:AB:F8:DA:D0:8B:DF:C8:68:A0:4E
            X509v3 Authority Key Identifier:
                keyid:2D:77:B3:31:D8:32:91:2B:61:BE:0A:50:A6:D8:63:4B:8E:2A:A7:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/LXezMdgykSthvgpQpthjS44qp5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXezMdgykSthvgpQpthjS44qp5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A942B16207E211F18C562569213D8C67/783957EA31BF11F1BC4C9C57C1833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:c8:d8:1d:6a:a2:85:65:31:46:37:55:e7:18:9a:51:26:51:
         af:de:5c:c7:ba:03:82:ed:db:3d:c0:a2:a2:fd:3b:17:ee:b8:
         e7:d1:cb:eb:3d:e9:30:c2:69:83:d8:a4:39:69:fa:3d:34:be:
         c5:6b:81:a8:d7:c5:b6:bb:1a:59:21:74:f3:7f:f5:d5:04:f2:
         35:eb:9a:8a:a0:b7:7f:ab:db:b9:69:86:fe:fc:8e:da:d8:d3:
         a7:f7:b0:58:8c:da:16:37:43:93:f6:46:98:b2:70:1e:54:d3:
         02:3f:46:95:a5:4c:55:5a:f5:1b:a9:70:04:90:5d:22:9b:b6:
         25:dd:4b:a5:e1:9e:9a:26:f3:6c:49:ce:bd:03:1a:f1:71:e8:
         ea:e7:82:aa:f7:b9:b0:a5:f4:ee:ca:ac:9d:b9:4e:93:16:46:
         c3:1a:ae:2d:41:77:22:2c:2b:ab:af:81:bf:15:5f:fb:eb:b3:
         0a:8b:82:2b:78:8e:20:b5:05:33:bc:bb:76:9f:c8:03:ab:29:
         1a:cc:07:85:26:9f:59:a3:e5:c4:16:48:26:72:af:e4:ef:53:
         e8:80:8c:99:c7:95:de:13:76:56:9c:fb:5a:77:04:0f:54:7f:
         03:49:e8:b9:6b:e2:d7:d4:28:97:b7:9d:46:57:b7:20:e5:98:
         22:6a:0d:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:16 2026 by rpki-client