Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/9406AE42640911F1AA2EE0C79847A888.roa
File:                     9406AE42640911F1AA2EE0C79847A888.roa (raw, json)
Hash identifier:          URhXPUIM7GJfpUTTHwvVKbze/Hu+Q4nnT4oxJlCcfKk=
Subject key identifier:   79:63:32:A0:4D:EF:7E:B7:94:79:0A:5A:17:CC:B4:EA:82:1B:C7:4B
Certificate issuer:       /CN=A9165C34/serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D
Certificate serial:       10
Authority key identifier: 91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/9406AE42640911F1AA2EE0C79847A888.roa
Signing time:             Tue 09 Jun 2026 13:46:13 +0000
ROA not before:           Tue 09 Jun 2026 13:46:13 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     136308
IP address blocks:        162.4.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl
                          rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165C34, serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D
        Validity
            Not Before: Jun  9 13:46:13 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a281924-3daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:77:b6:66:07:25:31:17:ea:69:07:b9:6e:30:
                    21:b1:31:f2:90:e2:0f:98:bc:fd:96:08:0e:2b:5d:
                    35:4a:46:39:0a:c4:6a:1f:98:0b:68:8e:fe:df:2c:
                    fc:38:30:fb:c7:2f:b9:26:bc:88:d9:40:38:44:ce:
                    cc:7f:fa:8a:8f:90:0e:3f:7a:e0:6e:41:48:ce:08:
                    01:ae:c5:a6:bd:9b:32:59:82:2f:b1:4c:ab:71:e2:
                    ed:11:2e:8c:e2:81:ae:32:2f:93:f8:42:d2:ed:b1:
                    4e:6a:d6:75:e6:60:4d:b0:2d:04:35:97:ce:95:ad:
                    62:d7:2b:97:8c:9b:0a:d1:82:ad:65:5d:fc:c5:0d:
                    b9:74:a8:15:79:06:c6:4a:24:da:ea:55:57:a4:30:
                    d6:0f:07:0e:df:48:f6:72:08:87:0a:08:b9:eb:6a:
                    f3:5c:fd:52:bd:1a:21:dc:d3:17:c3:c1:f3:ce:61:
                    00:0e:2e:d8:84:8b:c4:f5:0b:38:7e:3f:20:04:38:
                    66:5b:79:3b:1a:93:48:ed:dc:f6:22:43:76:2c:a8:
                    d0:d5:aa:e0:68:01:dd:c2:96:a9:0d:23:f4:5c:93:
                    98:b9:80:4d:07:48:8a:bb:e4:5c:54:60:cb:0c:fe:
                    45:ff:1a:46:fa:cc:5c:9d:7d:e0:97:61:1e:fa:60:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:63:32:A0:4D:EF:7E:B7:94:79:0A:5A:17:CC:B4:EA:82:1B:C7:4B
            X509v3 Authority Key Identifier:
                keyid:91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/9406AE42640911F1AA2EE0C79847A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:a0:c0:ee:80:84:e2:8e:b1:82:58:24:fe:89:ae:7d:dc:87:
         4a:65:5e:e6:7f:ac:b5:1b:da:2b:92:2e:28:d4:3e:60:ab:3f:
         04:12:cb:d4:4e:51:48:f0:ea:90:09:7b:29:a7:fc:cc:58:8c:
         a2:d1:96:50:4d:e9:3d:55:1c:f8:ca:a0:84:6b:b3:d5:bd:cd:
         07:47:be:78:e9:de:7a:bd:d5:6c:70:65:14:e0:70:37:55:0a:
         d4:bf:af:10:4f:d5:d9:55:17:4e:49:ac:09:59:b2:cd:ff:da:
         c3:c7:aa:dd:c3:1a:09:74:58:8b:a5:10:7b:0a:69:9c:cf:46:
         b3:92:c1:bd:a2:23:23:f9:0d:8e:04:5f:1c:3e:50:52:88:4f:
         4e:4f:53:c3:0b:03:67:c6:1f:ef:d2:8b:47:fd:0d:34:49:28:
         20:63:bf:d9:25:2f:14:4f:28:7a:cd:b5:d2:18:f6:31:c0:2b:
         ce:d6:92:34:54:3a:1c:7d:ef:bd:e3:bc:d3:36:fe:29:52:3e:
         aa:af:74:92:0c:1f:b5:13:1c:9a:22:a1:86:e6:c6:fd:f9:e7:
         d3:d8:37:09:bd:b9:4b:1e:1a:bd:d4:dc:18:df:56:06:2c:c6:
         3a:a9:cf:37:64:97:8b:e0:c1:66:63:74:07:3d:83:25:e4:d3:
         e5:53:7b:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:11:28 2026 by rpki-client