Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/73464EBCB0F311E5AB30F151C4F9AE02.roa
File:                     73464EBCB0F311E5AB30F151C4F9AE02.roa (raw, json)
Hash identifier:          SmJ6FxhhV9EYvFLazFlLe8iePao8TNlk40vXQKMqlF0=
Subject key identifier:   91:36:24:5E:1D:52:1D:13:23:1B:06:74:85:8E:E6:ED:EB:57:D9:D8
Certificate issuer:       /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial:       2976
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/73464EBCB0F311E5AB30F151C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:25:18 +0000
ROA not before:           Tue 02 Sep 2025 16:03:52 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     58809
IP address blocks:        125.5.16.0/24 maxlen: 24
                          125.5.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
                          rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10614 (0x2976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
        Validity
            Not Before: Sep  2 16:03:52 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4929e-a7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:aa:87:89:c3:dd:0b:46:79:74:82:29:2b:
                    e0:55:e5:37:eb:e6:9a:08:db:18:57:b5:8d:e4:f1:
                    cb:6e:71:c0:81:e3:df:6b:fb:c0:78:f1:41:eb:2d:
                    48:e0:b8:51:90:b8:03:70:5c:cc:55:30:27:bd:4f:
                    ed:8c:9a:96:02:fc:c8:18:28:72:a0:c8:ac:fa:29:
                    c0:e3:8c:ff:6a:b3:a0:ec:36:4e:cd:a5:0b:e6:d8:
                    fd:14:84:88:69:8b:61:1d:e6:dc:28:86:47:8e:d3:
                    42:12:02:fd:be:bd:9a:98:d7:15:bc:c0:8a:be:7e:
                    02:7b:a6:eb:86:be:4a:d5:02:5d:10:c4:23:35:a9:
                    a6:da:a5:eb:ce:58:ce:3f:a1:af:fc:e6:a5:8e:56:
                    bf:17:cc:70:d2:ce:c6:62:04:15:b6:1f:52:39:96:
                    d6:f3:30:15:d4:e5:2d:c2:39:ff:3f:c2:54:10:62:
                    2d:94:94:86:78:a8:a4:a6:82:36:44:de:30:34:0f:
                    24:1e:b0:e0:e7:a4:9b:fc:90:88:b4:5a:b4:9c:54:
                    81:90:6c:9a:1d:1b:52:67:1b:2a:2e:08:fc:67:0d:
                    25:61:ed:2b:ec:03:e8:f1:f7:c2:9e:b4:a6:1c:94:
                    c4:19:09:61:6a:84:c9:2e:5b:fd:b8:20:d3:47:15:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:36:24:5E:1D:52:1D:13:23:1B:06:74:85:8E:E6:ED:EB:57:D9:D8
            X509v3 Authority Key Identifier:
                keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/73464EBCB0F311E5AB30F151C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.5.16.0/24
                  125.5.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:15:b4:6b:cd:bc:a6:9e:4f:d1:cd:1f:29:1f:43:d9:10:
         a3:cb:9f:77:f1:0d:3c:62:8c:d1:37:d5:35:c8:9b:ba:70:30:
         c9:c4:1b:9b:22:03:1f:4f:bd:fc:3c:29:b2:f6:15:f8:c5:bc:
         3c:8f:8c:e4:22:02:09:70:6e:5d:f0:fa:c7:ba:c5:28:b5:27:
         c8:be:57:67:5d:69:9d:fe:a0:b5:c2:8f:49:ea:33:6b:43:18:
         39:91:cd:91:2a:35:5e:b7:2e:e9:4a:5e:ee:27:08:1e:33:27:
         07:b1:4a:90:48:41:12:db:19:51:48:2d:a7:46:81:87:c7:42:
         5e:f7:67:6a:fa:e0:90:71:50:f2:4d:81:75:d0:55:87:9c:95:
         11:5b:ec:54:ac:2b:73:e5:ab:35:54:a5:a2:71:84:7c:72:75:
         39:f0:51:77:4b:ac:f6:8d:ac:d8:bf:a3:08:c2:88:3e:78:3c:
         50:c4:15:ad:8b:9c:51:ec:40:ee:08:e5:80:99:84:44:d8:af:
         e5:37:a1:fa:c0:13:8f:7f:90:32:72:e9:32:32:81:e0:2e:5b:
         9d:ea:14:74:50:dc:e9:9a:02:ef:da:4a:1b:dd:cd:5f:9e:40:
         03:7a:f5:5a:15:52:ee:60:b5:f7:df:22:ec:d9:1d:8f:37:44:
         79:20:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:31:02 2026 by rpki-client