Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/4BA0B918AA8611F1B5EFA27B6B11F970.roa
File:                     4BA0B918AA8611F1B5EFA27B6B11F970.roa (raw, json)
Hash identifier:          cFZoTrSbsgmWIouraR3onH4yiL+HtgAYY6VVqfkArtw=
Subject key identifier:   C8:A2:3C:53:1F:07:E7:10:0E:B1:31:C7:DC:63:52:BD:B3:18:7D:80
Certificate issuer:       /CN=A9172999/serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
Certificate serial:       45
Authority key identifier: CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/4BA0B918AA8611F1B5EFA27B6B11F970.roa
Signing time:             Mon 07 Sep 2026 06:35:20 +0000
ROA not before:           Mon 07 Sep 2026 06:35:20 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152179
IP address blocks:        186.240.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl
                          rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172999, serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
        Validity
            Not Before: Sep  7 06:35:20 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a9e5b28-c72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:d5:f1:1f:7b:49:2d:88:54:57:20:45:8a:
                    a3:c6:e5:35:e3:66:9c:88:92:62:74:c7:aa:af:a9:
                    e4:6b:e7:85:9c:40:b2:6d:2e:70:b7:4e:e3:79:03:
                    0b:3d:ca:2c:3f:60:14:d5:6c:be:95:ad:01:1c:6c:
                    63:a3:c8:d2:32:58:6f:77:38:84:31:6c:6c:d8:9a:
                    cd:b6:1d:d7:c0:2b:11:61:55:af:97:eb:ff:70:cc:
                    4c:c1:77:90:66:11:2d:9e:23:5b:a5:2e:74:c2:fd:
                    dd:d2:e0:76:22:a2:66:4d:50:13:ac:68:50:25:b6:
                    75:bf:e4:95:9e:94:57:62:00:d4:3d:09:3a:a6:e9:
                    47:67:58:fc:91:1d:2e:e6:51:2f:74:0c:b6:5c:20:
                    08:d3:a4:27:0d:8a:bd:fd:55:81:95:54:93:af:f6:
                    44:8d:0d:c9:25:e1:fe:30:ea:b3:52:4f:ec:4d:17:
                    a8:ae:e9:1a:15:39:87:d9:2e:33:af:9d:da:c9:05:
                    12:83:fc:9c:46:67:9b:d9:57:6e:0b:6b:22:fa:52:
                    a9:fe:d9:64:fb:54:9b:61:b7:09:ab:4a:36:4e:11:
                    a9:16:28:6e:1d:63:64:bb:43:ba:95:69:33:e2:9a:
                    b2:9f:d1:f7:73:e5:6b:85:87:fb:9f:4c:ed:3b:28:
                    d0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A2:3C:53:1F:07:E7:10:0E:B1:31:C7:DC:63:52:BD:B3:18:7D:80
            X509v3 Authority Key Identifier:
                keyid:CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/4BA0B918AA8611F1B5EFA27B6B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.240.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:23:f1:d3:4e:2b:c7:46:99:95:f5:f9:48:d7:c8:dc:54:2b:
         95:5c:55:40:78:86:95:40:08:01:79:b5:7f:77:b2:83:c0:e7:
         3c:7a:c0:b0:43:80:95:6b:61:92:0b:41:28:5c:68:94:15:a4:
         1b:9b:67:e0:ac:de:ec:c0:05:0e:35:30:ee:96:64:2a:37:93:
         00:ed:fd:80:74:04:15:d3:ee:6c:80:05:70:0e:6a:86:28:78:
         0a:c5:65:f6:65:6e:cb:d0:aa:ff:04:26:c3:fa:82:94:35:73:
         01:33:cd:60:86:f4:8a:84:07:e6:7d:1b:61:02:78:8b:1c:0e:
         5e:e9:a7:9b:a6:22:97:c5:55:31:81:1d:fb:26:ca:92:cb:cf:
         46:4c:89:c0:95:29:d5:bc:f4:5d:b1:94:1b:c7:ff:92:fc:ee:
         98:40:07:b3:4b:fb:55:25:28:1d:99:d1:37:bc:ca:73:01:8e:
         3c:b2:ef:61:85:70:cc:08:3e:02:06:c0:eb:a7:d4:61:05:47:
         38:7e:c5:55:f0:dc:8a:51:cf:39:41:89:8c:47:ee:af:f4:1d:
         bd:39:93:30:c2:17:f5:2a:27:49:fa:81:ec:7c:be:83:94:68:
         64:0f:6d:e4:e1:a4:20:8c:9f:b8:d9:d1:58:8f:1a:03:4e:db:
         c7:2a:f4:a8
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
Mjk5OTExMC8GA1UEBRMoQ0Q0NDU0QjI0RTNGRjdEQzc1Q0JCRTkxOUJEREE3OUM0
N0I5NUVBNzAeFw0yNjA5MDcwNjM1MjBaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhOWU1YjI4LWM3MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF0tXxH3tJLYhUVyBFiqPG5TXjZpyIkmJ0x6qvqeRr54WcQLJtLnC3TuN5Aws9
yiw/YBTVbL6VrQEcbGOjyNIyWG93OIQxbGzYms22HdfAKxFhVa+X6/9wzEzBd5Bm
ES2eI1ulLnTC/d3S4HYiomZNUBOsaFAltnW/5JWelFdiANQ9CTqm6UdnWPyRHS7m
US90DLZcIAjTpCcNir39VYGVVJOv9kSNDckl4f4w6rNST+xNF6iu6RoVOYfZLjOv
ndrJBRKD/JxGZ5vZV24LayL6Uqn+2WT7VJthtwmrSjZOEakWKG4dY2S7Q7qVaTPi
mrKf0fdz5WuFh/ufTO07KNCPAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUyKI8Ux8H
5xAOsTHH3GNSvbMYfYAwHwYDVR0jBBgwFoAUzURUsk4/99x1y76Rm92nnEe5Xqcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOTk5L0FFRkM1NUIwNEZG
MjExRjE5QjEyN0RGMTlFRUU1MjhFL3pVUlVzazRfOTl4MXk3NlJtOTJubkVlNVhx
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG
RDFGRjIvelVSVXNrNF85OXgxeTc2Um05Mm5uRWU1WHFjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Mjk5OS9BRUZDNTVCMDRGRjIxMUYxOUIxMjdERjE5RUVFNTI4RS80QkEwQjkxOEFB
ODYxMUYxQjVFRkEyN0I2QjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAC68PUwDQYJKoZIhvcNAQELBQADggEBAKQj8dNOK8dGmZX1+UjXyNxU
K5VcVUB4hpVACAF5tX93soPA5zx6wLBDgJVrYZILQShcaJQVpBubZ+Cs3uzABQ41
MO6WZCo3kwDt/YB0BBXT7myABXAOaoYoeArFZfZlbsvQqv8EJsP6gpQ1cwEzzWCG
9IqEB+Z9G2ECeIscDl7pp5umIpfFVTGBHfsmypLLz0ZMicCVKdW89F2xlBvH/5L8
7phAB7NL+1UlKB2Z0Te8ynMBjjyy72GFcMwIPgIGwOun1GEFRzh+xVXw3IpRzzlB
iYxH7q/0Hb05kzDCF/UqJ0n6gex8voOUaGQPbeThpCCMn7jZ0ViPGgNO28cq9Kg=
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:06:44 2026 by rpki-client