Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/F7973D44FE6711F0B3245786536F56BC.roa
File:                     F7973D44FE6711F0B3245786536F56BC.roa (raw, json)
Hash identifier:          /9TND/Fy3tWH0r9sdB0hp5hcFJoR57Y+G7/U1zoHag4=
Subject key identifier:   76:FD:17:5E:EE:57:C9:74:95:61:8B:2A:BB:C1:82:27:E7:64:D5:3C
Certificate issuer:       /CN=A9173D5E/serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29
Certificate serial:       13
Authority key identifier: CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/F7973D44FE6711F0B3245786536F56BC.roa
Signing time:             Sun 01 Mar 2026 05:39:08 +0000
ROA not before:           Sat 31 Jan 2026 05:44:54 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        180.94.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl
                          rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173D5E, serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29
        Validity
            Not Before: Jan 31 05:44:54 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a3d0fc-b711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:80:a0:8a:2c:d4:71:2e:98:ad:5f:34:77:
                    54:93:47:15:85:ea:e6:ed:43:d9:f6:10:41:dd:1b:
                    3a:2f:aa:b2:2e:81:f8:6b:0b:5a:99:0b:17:5e:7c:
                    96:48:22:d2:ec:50:84:56:a6:f1:64:33:0f:31:12:
                    e2:65:ab:27:d2:04:6a:c6:cc:21:ef:e0:9f:bf:77:
                    80:86:f6:2a:0b:b3:b8:59:6f:f5:0d:bc:bd:d6:d8:
                    6a:2a:d8:93:9f:65:cc:87:55:8c:c0:f9:ea:04:d8:
                    96:c3:2f:f9:19:5c:58:e7:c0:81:f5:f5:be:13:1a:
                    fe:23:97:c8:49:ed:60:aa:5a:6f:de:6f:d0:d2:c6:
                    f0:e7:ee:15:de:7a:46:29:18:22:11:cd:e8:03:e2:
                    10:6e:b7:22:3f:9c:d6:84:0a:b2:a5:9c:d0:38:b1:
                    ce:d3:6f:a6:fd:dd:b8:e3:88:4e:82:13:3d:35:c7:
                    4d:a9:3a:a3:25:07:8b:17:78:8e:31:a3:14:1b:a5:
                    86:ee:ac:3d:90:a0:3a:df:a8:d3:80:9e:15:fe:cf:
                    4f:af:b4:7c:71:84:53:82:1f:91:87:e6:21:23:68:
                    90:d8:dd:45:f0:bb:57:c0:33:a2:96:e6:de:74:d4:
                    66:b0:3c:35:3e:32:ee:40:d2:ee:c9:03:59:de:53:
                    78:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FD:17:5E:EE:57:C9:74:95:61:8B:2A:BB:C1:82:27:E7:64:D5:3C
            X509v3 Authority Key Identifier:
                keyid:CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/F7973D44FE6711F0B3245786536F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:84:21:7a:3c:ad:a8:b8:5d:b4:e8:ae:eb:2d:06:08:71:fd:
         ec:51:d8:c0:6c:5a:7e:ac:04:df:0d:a0:6e:37:e6:a0:38:dd:
         9b:3c:f4:c5:2a:20:a0:d9:fe:79:7f:a9:4b:d4:76:55:d4:0c:
         b8:43:3f:d5:99:3d:73:20:93:0c:bd:16:d8:84:f6:5b:1c:fd:
         89:2c:72:fd:ec:33:8e:8a:88:0c:2b:ef:86:2f:ae:82:57:12:
         13:84:58:a4:c9:f7:2f:42:c0:d1:d5:7a:ba:ad:aa:81:0b:1f:
         8a:c2:76:88:64:b4:22:f1:04:6e:c4:0d:b3:b5:ad:7e:27:c2:
         67:73:c4:1d:33:3b:cd:1c:cf:27:ff:06:7e:d5:a6:11:7a:2c:
         b8:6b:06:54:3d:ba:ca:87:0a:8f:17:7f:b0:49:fd:d2:e6:3c:
         9d:66:bf:a1:9d:0c:57:2c:da:b3:95:bd:49:57:c8:67:64:2b:
         df:b9:35:d3:c7:af:89:b0:fa:63:8e:30:6b:5d:e0:48:64:b3:
         da:ef:6e:88:1b:d6:ff:21:cc:20:ee:09:cb:08:d3:60:db:70:
         8e:ea:6f:34:a2:2a:92:b9:87:68:c6:63:c9:e0:49:c7:73:b7:
         a0:85:c4:bf:59:81:7d:2c:eb:ea:e9:f9:1a:cf:17:be:66:48:
         65:85:b4:dd
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
M0Q1RTExMC8GA1UEBRMoQ0RCNDIxMTYyMzNCNDJFRjYzMjU3NTk3RDU2RDEyQUJG
RkQ2REUyOTAeFw0yNjAxMzEwNTQ0NTRaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkMGZjLWI3MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvKICgiizUcS6YrV80d1STRxWF6ubtQ9n2EEHdGzovqrIugfhrC1qZCxdefJZI
ItLsUIRWpvFkMw8xEuJlqyfSBGrGzCHv4J+/d4CG9ioLs7hZb/UNvL3W2Goq2JOf
ZcyHVYzA+eoE2JbDL/kZXFjnwIH19b4TGv4jl8hJ7WCqWm/eb9DSxvDn7hXeekYp
GCIRzegD4hButyI/nNaECrKlnNA4sc7Tb6b93bjjiE6CEz01x02pOqMlB4sXeI4x
oxQbpYburD2QoDrfqNOAnhX+z0+vtHxxhFOCH5GH5iEjaJDY3UXwu1fAM6KW5t50
1GawPDU+Mu5A0u7JA1neU3hHAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUdv0XXu5X
yXSVYYsqu8GCJ+dk1TwwHwYDVR0jBBgwFoAUzbQhFiM7Qu9jJXWX1W0Sq//W3ikw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRDVFLzM0NkVDRjEyRkU2
NzExRjBBNzVDODg1MjUzNkY1NkJDL3piUWhGaU03UXU5akpYV1gxVzBTcV9fVzNp
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvemJRaEZpTTdRdTlqSlhXWDFXMFNxX19XM2lrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0Q1RS8zNDZFQ0YxMkZFNjcxMUYwQTc1Qzg4NTI1MzZGNTZCQy9GNzk3M0Q0NEZF
NjcxMUYwQjMyNDU3ODY1MzZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAC0Xg8wDQYJKoZIhvcNAQELBQADggEBACKEIXo8rai4XbTorustBghx
/exR2MBsWn6sBN8NoG435qA43Zs89MUqIKDZ/nl/qUvUdlXUDLhDP9WZPXMgkwy9
FtiE9lsc/Ykscv3sM46KiAwr74YvroJXEhOEWKTJ9y9CwNHVerqtqoELH4rCdohk
tCLxBG7EDbO1rX4nwmdzxB0zO80czyf/Bn7VphF6LLhrBlQ9usqHCo8Xf7BJ/dLm
PJ1mv6GdDFcs2rOVvUlXyGdkK9+5NdPHr4mw+mOOMGtd4Ehks9rvbogb1v8hzCDu
CcsI02DbcI7qbzSiKpK5h2jGY8ngScdzt6CFxL9ZgX0s6+rp+RrPF75mSGWFtN0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:41 2026 by rpki-client