Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/404053A882BE11F0ADD6D367C4F9AE02.roa
File:                     404053A882BE11F0ADD6D367C4F9AE02.roa (raw, json)
Hash identifier:          wvK2ETV8i4DCKPkGUmCmcmpFvE7SUGW/xJVm1sWIU9k=
Subject key identifier:   38:63:8C:8E:00:46:15:8C:2E:25:3B:0D:03:EA:66:6A:A3:C5:E9:42
Certificate issuer:       /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Certificate serial:       69
Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/404053A882BE11F0ADD6D367C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:14:44 +0000
ROA not before:           Tue 26 Aug 2025 20:50:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9500
IP address blocks:        47.72.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
        Validity
            Not Before: Aug 26 20:50:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42db4-1927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e8:4d:9b:23:ce:a8:a4:82:b8:90:5f:fe:54:
                    b4:f3:da:8d:47:5e:eb:4c:c1:be:a5:7b:37:e6:7f:
                    45:a6:42:9a:7c:98:8d:d7:8c:b6:cb:2a:58:d5:ba:
                    5e:7f:5f:80:4b:4e:4a:e8:19:86:0c:8c:31:54:e4:
                    72:61:f2:d8:df:6a:14:6e:c7:47:ba:4e:ca:85:0d:
                    a0:f2:a7:de:03:d9:72:4b:34:db:23:11:c7:38:6d:
                    17:a0:e2:85:34:af:04:e5:97:e4:e9:e4:fc:ff:c6:
                    26:83:ff:75:9a:04:2b:34:15:8a:ef:54:f5:51:20:
                    22:8b:46:b3:46:3c:84:38:9b:73:a2:26:56:00:f0:
                    a0:fc:7b:c4:3c:bf:c0:c4:c7:30:b6:a0:6a:3e:e2:
                    6d:cb:ce:1e:d5:40:37:e8:96:40:8e:e0:c2:d0:0c:
                    d8:03:2e:72:87:b9:41:f2:49:5c:b9:8b:69:9b:c3:
                    19:8c:74:33:03:17:9e:0f:ef:54:f4:30:64:68:58:
                    04:92:83:6b:72:25:3b:05:b3:7d:e4:2a:40:f9:e7:
                    d8:3e:77:99:f8:34:d9:0f:13:d7:2e:f1:fa:56:2d:
                    b5:35:fc:e1:87:b8:9f:aa:ac:8e:b4:fc:e1:9a:af:
                    72:d2:85:d8:43:71:1b:e0:f4:13:cd:df:12:5b:1b:
                    8c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:63:8C:8E:00:46:15:8C:2E:25:3B:0D:03:EA:66:6A:A3:C5:E9:42
            X509v3 Authority Key Identifier:
                keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/404053A882BE11F0ADD6D367C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         30:e9:74:32:e9:e4:48:3e:34:be:ea:86:1a:f5:4c:a9:97:1a:
         8b:58:22:2b:47:2b:ae:be:86:28:36:aa:7d:22:72:d1:22:6f:
         6d:01:4c:3d:a0:61:c8:04:8d:85:ff:5c:24:45:54:ca:e6:a5:
         77:84:af:de:76:af:71:ed:41:7a:40:c6:46:62:d7:11:88:66:
         23:e3:d8:61:de:bf:36:c2:af:d7:b7:1f:d1:64:50:92:77:24:
         8e:51:9f:48:17:27:61:1b:90:be:51:67:eb:20:9b:ab:ed:71:
         23:1c:db:ca:70:52:19:53:4b:27:0f:0f:04:42:5c:81:d9:e8:
         5f:cd:fb:a7:5a:9b:df:db:03:56:0d:92:3d:6d:c2:dc:cf:c3:
         7a:3e:99:ce:43:a7:4e:30:35:4b:00:42:ce:f5:84:39:0e:37:
         3f:04:ed:40:62:42:ca:f0:2c:0d:68:cb:77:ca:53:3d:81:61:
         e1:36:4e:b3:2a:4a:8b:40:62:76:d4:60:e8:0b:02:a5:64:ba:
         5e:02:f2:ad:65:a4:f3:3a:c0:d1:77:30:93:a9:29:a8:4b:01:
         4e:d0:9b:14:07:b0:14:f5:e6:85:32:f8:a4:4e:26:84:10:e3:
         db:b7:c4:54:87:c1:f1:aa:42:21:9d:b7:dc:cc:32:01:e1:13:
         3c:28:fe:5a
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NkFENzExMC8GA1UEBRMoMTdDMjA1MDAzRTJFQjkxRTNEQzQ2RUFBQzg5MEY2RDBC
NTBERTZFMjAeFw0yNTA4MjYyMDUwMDhaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTQyZGI0LTE5MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCN6E2bI86opIK4kF/+VLTz2o1HXutMwb6lezfmf0WmQpp8mI3XjLbLKljVul5/
X4BLTkroGYYMjDFU5HJh8tjfahRux0e6TsqFDaDyp94D2XJLNNsjEcc4bReg4oU0
rwTll+Tp5Pz/xiaD/3WaBCs0FYrvVPVRICKLRrNGPIQ4m3OiJlYA8KD8e8Q8v8DE
xzC2oGo+4m3Lzh7VQDfolkCO4MLQDNgDLnKHuUHySVy5i2mbwxmMdDMDF54P71T0
MGRoWASSg2tyJTsFs33kKkD559g+d5n4NNkPE9cu8fpWLbU1/OGHuJ+qrI60/OGa
r3LShdhDcRvg9BPN3xJbG4z1AgMBAAGjggJfMIICWzAdBgNVHQ4EFgQUOGOMjgBG
FYwuJTsNA+pmaqPF6UIwHwYDVR0jBBgwFoAUF8IFAD4uuR49xG6qyJD20LUN5uIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QUQ3Lzk4Q0U4ODEwN0Y3
NTExRjBCRDBGMDg2M0M0RjlBRTAyL0Y4SUZBRDR1dVI0OXhHNnF5SkQyMExVTjV1
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRjhJRkFENHV1UjQ5eEc2cXlKRDIwTFVONXVJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkFENy85OENFODgxMDdGNzUxMUYwQkQwRjA4NjNDNEY5QUUwMi80MDQwNTNBODgy
QkUxMUYwQURENkQzNjdDNEY5QUUwMi5yb2EwHgYIKwYBBQUHAQcBAf8EDzANMAsE
AgABMAUDAwAvSDANBgkqhkiG9w0BAQsFAAOCAQEAMOl0MunkSD40vuqGGvVMqZca
i1giK0crrr6GKDaqfSJy0SJvbQFMPaBhyASNhf9cJEVUyuald4Sv3navce1BekDG
RmLXEYhmI+PYYd6/NsKv17cf0WRQknckjlGfSBcnYRuQvlFn6yCbq+1xIxzbynBS
GVNLJw8PBEJcgdnoX837p1qb39sDVg2SPW3C3M/Dej6ZzkOnTjA1SwBCzvWEOQ43
PwTtQGJCyvAsDWjLd8pTPYFh4TZOsypKi0BidtRg6AsCpWS6XgLyrWWk8zrA0Xcw
k6kpqEsBTtCbFAewFPXmhTL4pE4mhBDj27fEVIfB8apCIZ233MwyAeETPCj+Wg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:05 2026 by rpki-client