Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/872AD682B01011F1B04156A36C11F970.roa
File:                     872AD682B01011F1B04156A36C11F970.roa (raw, json)
Hash identifier:          jm/+G31po+MJ2sktkg8jDrLvytQSl9uDM6fJdHyue+U=
Subject key identifier:   80:50:ED:6C:73:99:3F:58:C9:1D:1A:AA:35:78:7F:4A:09:5A:9E:20
Certificate issuer:       /CN=A915D584/serialNumber=0ECE33F3C281666D01E28B927895C2DDF6ACD844
Certificate serial:       04
Authority key identifier: 0E:CE:33:F3:C2:81:66:6D:01:E2:8B:92:78:95:C2:DD:F6:AC:D8:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ds4z88KBZm0B4ouSeJXC3fas2EQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/872AD682B01011F1B04156A36C11F970.roa
Signing time:             Mon 14 Sep 2026 07:59:38 +0000
ROA not before:           Mon 14 Sep 2026 07:59:38 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154911
IP address blocks:        163.52.168.0/24 maxlen: 24
                          2001:df7:81c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.crl
                          rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ds4z88KBZm0B4ouSeJXC3fas2EQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D584, serialNumber=0ECE33F3C281666D01E28B927895C2DDF6ACD844
        Validity
            Not Before: Sep 14 07:59:38 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa7a96a-cd05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5a:27:5b:54:d0:3e:6d:89:ed:66:81:bc:2d:
                    64:8b:7a:0c:26:e6:a8:34:43:64:c7:99:57:b7:26:
                    50:13:44:7d:ca:47:4d:6c:61:ae:35:16:fa:7b:fe:
                    fb:97:59:cd:07:d5:c6:41:25:b5:ad:39:c1:12:3d:
                    2c:ff:f1:0b:91:4b:86:56:a9:97:a0:c3:b5:75:94:
                    e0:fb:5c:70:aa:47:12:b9:22:da:92:6a:31:fa:f0:
                    94:08:5d:e2:3d:e3:36:29:fd:83:36:dc:03:bb:4c:
                    28:4a:6a:5d:42:41:a2:9b:83:dd:51:51:1e:ee:82:
                    95:01:94:4c:1f:b8:e2:33:dc:87:f2:9d:6a:cb:42:
                    6b:c6:81:ce:bf:d5:ce:c4:53:6b:a0:de:25:b3:7a:
                    0c:76:53:d3:24:9a:2b:5c:8e:bc:e1:f7:6d:c4:88:
                    e3:a2:62:b3:64:0a:c1:a6:26:29:2f:35:bc:de:bd:
                    bb:d5:95:c6:e5:28:19:23:87:45:d4:33:54:cc:b7:
                    7c:d3:bb:16:62:91:fd:58:1d:56:a1:e3:ef:79:a8:
                    80:ca:7e:9e:42:43:6c:79:c6:db:1d:31:e4:b7:55:
                    c3:6a:e4:61:34:93:19:8e:22:42:af:55:00:c6:bf:
                    3c:60:d5:c3:f9:b2:59:88:ee:47:96:9e:7b:08:a4:
                    ce:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:50:ED:6C:73:99:3F:58:C9:1D:1A:AA:35:78:7F:4A:09:5A:9E:20
            X509v3 Authority Key Identifier:
                keyid:0E:CE:33:F3:C2:81:66:6D:01:E2:8B:92:78:95:C2:DD:F6:AC:D8:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ds4z88KBZm0B4ouSeJXC3fas2EQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/872AD682B01011F1B04156A36C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.168.0/24
                IPv6:
                  2001:df7:81c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:44:3a:a3:d0:d4:62:5b:01:cc:ac:6e:f5:e3:78:8c:af:82:
         09:39:ba:a0:75:f3:80:7a:26:e5:fb:5b:e9:ea:db:58:6c:e1:
         99:7f:3e:ec:89:8e:c4:a5:e6:31:02:49:99:e2:68:80:4c:e1:
         a0:0d:72:c4:3e:e8:e4:47:d3:5c:ff:61:54:75:6c:94:45:6e:
         1e:c8:79:c9:e1:2f:ad:e1:51:85:2d:ce:2d:64:ce:bd:72:5b:
         31:95:e6:47:7a:6e:36:96:f5:fd:a4:bb:2a:fb:fb:81:77:97:
         35:a3:d6:59:6e:76:88:8a:a6:2f:28:a4:02:57:84:ff:37:81:
         ce:dc:05:59:92:e4:02:97:28:39:f0:22:96:5c:30:df:0f:4f:
         2e:1f:31:4b:86:90:01:8b:a0:26:df:76:0f:9d:83:21:56:77:
         35:6c:93:fe:f0:e2:24:13:c7:13:66:77:9e:29:c3:56:12:8d:
         1f:30:88:54:c6:f1:46:49:e5:a3:70:cf:fd:de:01:e3:21:7d:
         8e:e3:10:31:31:a4:5b:34:d9:5b:68:68:9b:80:52:0d:ea:a2:
         ca:ee:82:0b:99:03:7a:4c:76:e3:ff:5a:72:95:e6:fe:fc:fe:
         01:81:7b:26:4c:b1:61:5f:94:56:88:52:52:f9:d0:44:46:cc:
         31:1f:1d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:21:44 2026 by rpki-client