Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/65AF30D422D211EAB3ABA447C4F9AE02.roa
File:                     65AF30D422D211EAB3ABA447C4F9AE02.roa (raw, json)
Hash identifier:          aQ8cA00GJjluwPOIwcjxSsjlMHR7a0I4vLY3lPAB7wU=
Subject key identifier:   44:A6:1F:1C:E4:EC:9B:53:E5:77:A8:4E:14:58:60:98:A3:BC:0E:85
Certificate issuer:       /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial:       0DA2
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/65AF30D422D211EAB3ABA447C4F9AE02.roa
Signing time:             Tue 31 Mar 2026 18:23:32 +0000
ROA not before:           Tue 31 Mar 2026 18:23:32 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     136255
IP address blocks:        65.18.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
                          rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3490 (0xda2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
        Validity
            Not Before: Mar 31 18:23:32 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cc1124-1dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e4:3f:4c:d7:a3:ab:64:f8:f2:2d:80:5c:57:
                    4a:82:72:ff:16:d1:b4:fc:ad:8e:b5:74:a4:1e:b0:
                    31:37:41:d2:7b:53:ea:bd:e5:60:29:a0:e7:35:9f:
                    3e:ee:38:ac:e8:2e:89:15:da:62:6d:d8:be:ad:0d:
                    85:44:ea:47:95:ae:ac:48:45:b6:55:66:39:8f:fe:
                    80:f2:39:af:aa:e6:42:4c:44:6d:58:f5:c1:37:84:
                    ce:06:37:f3:5a:7f:59:fd:de:e5:da:8b:df:e3:0d:
                    b1:44:eb:4d:6b:0c:8b:f1:7a:6b:d5:1e:46:dd:77:
                    44:6c:c8:65:f7:c5:57:53:b7:42:dc:59:c0:b3:db:
                    0b:cb:12:23:91:75:48:8d:ad:a9:01:c4:23:7d:b7:
                    c5:0d:94:aa:b0:8e:5e:c4:e3:32:27:6f:5e:df:c9:
                    b5:3c:9d:c6:a4:23:ac:8c:b2:07:94:34:8c:9b:a0:
                    17:76:36:0b:be:8d:2f:b1:2d:63:fa:7f:53:76:3f:
                    ee:f0:04:e4:bd:73:8d:d5:d2:4e:58:5f:37:61:99:
                    2b:01:44:d9:f0:88:1a:7d:3b:0f:6e:cc:9a:f1:95:
                    41:11:3a:33:40:ec:42:d6:69:d5:93:bd:33:78:57:
                    3c:78:f2:6b:d0:eb:46:de:3d:2c:30:1b:f2:06:2e:
                    01:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A6:1F:1C:E4:EC:9B:53:E5:77:A8:4E:14:58:60:98:A3:BC:0E:85
            X509v3 Authority Key Identifier:
                keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/65AF30D422D211EAB3ABA447C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.18.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:52:8c:88:0a:76:fe:84:ee:35:7f:16:2f:35:68:e9:dd:fc:
         7b:ad:9e:5e:3c:1c:c5:87:39:73:9b:de:66:39:e7:d8:6a:73:
         9d:0a:f8:7c:99:fa:f7:ba:3d:65:17:64:ea:ca:ba:b1:97:46:
         86:6c:df:79:18:a6:26:02:f2:f3:39:26:1f:be:d9:b4:d5:88:
         82:12:2f:a0:ff:92:7b:a3:12:10:21:36:2c:b7:17:d9:bd:1b:
         c5:3f:f8:7e:3b:d9:13:2f:b9:3c:23:1a:d4:ce:13:f4:04:78:
         3d:87:9b:6d:ab:65:8c:91:90:4e:de:91:65:98:bc:8b:9f:9b:
         e3:ae:77:7f:5e:1d:fa:e4:d8:8e:d4:25:a1:42:b3:aa:fb:6c:
         9a:03:8d:5f:c2:18:a9:a8:75:67:1b:8d:e3:5b:b4:1f:ef:46:
         30:fe:ad:dd:17:93:0f:5f:c5:aa:7d:70:10:2d:e2:5e:d6:76:
         c1:b0:9a:5b:d2:82:09:06:ee:c8:85:79:c8:e2:6c:dc:f7:48:
         43:ef:5c:fb:4c:3b:f8:05:64:b8:3c:4d:1d:04:fe:15:ae:51:
         ef:91:6f:35:f1:a1:5b:67:f6:d2:10:5b:79:8e:f7:84:71:32:
         ac:0e:1e:77:dc:fd:c8:1b:fa:c1:c8:74:7f:a6:72:9d:16:7e:
         57:9d:cd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:23:36 2026 by rpki-client