Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/E685F69A372D11F1A4767B088F833773.roa
File:                     E685F69A372D11F1A4767B088F833773.roa (raw, json)
Hash identifier:          Qin1CSenHeWf6qKBdgvv65CH/jbRnOCli4KnV1U3QUw=
Subject key identifier:   9E:F0:BC:40:6C:C3:39:3F:BF:07:5B:55:82:3D:91:52:A9:59:0D:35
Certificate issuer:       /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial:       03
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/E685F69A372D11F1A4767B088F833773.roa
Signing time:             Mon 13 Apr 2026 11:42:51 +0000
ROA not before:           Mon 13 Apr 2026 11:42:51 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132165
IP address blocks:        151.123.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
                          rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
        Validity
            Not Before: Apr 13 11:42:51 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69dcd6ba-4a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:37:d5:35:c7:a8:27:e1:e0:f3:b8:7a:4d:55:
                    e3:8d:0c:4c:66:a6:7a:60:eb:70:a2:d3:75:d5:94:
                    33:a6:60:8c:05:14:51:8e:44:23:d5:29:ce:b5:bd:
                    87:2c:ff:75:de:bc:fe:a8:18:b7:3e:32:6e:04:08:
                    26:84:07:f6:4a:f7:ce:af:7b:4c:50:71:62:ec:7b:
                    f5:8b:3c:52:82:3d:de:19:16:9c:da:0b:9f:d4:02:
                    d5:57:52:8b:e8:dc:26:84:60:71:b7:98:67:51:4c:
                    b2:a9:e0:1f:e8:4d:60:6f:80:8d:a1:49:9a:3b:75:
                    d9:61:92:ea:79:68:0f:d6:b9:01:a1:79:39:8b:39:
                    ab:32:e9:7c:17:3d:1d:7e:5e:52:89:6f:e3:7b:8c:
                    0d:50:db:15:3c:0f:26:c4:51:43:9f:e4:90:e8:d2:
                    a0:43:79:2b:ea:e0:d9:33:77:eb:0e:32:20:66:fa:
                    24:48:60:09:23:82:f8:9e:ee:37:a1:ab:0d:02:5d:
                    10:13:7b:5a:7f:52:ab:cf:37:fd:36:68:84:39:b5:
                    6b:a3:96:af:3c:57:11:35:bd:b5:ca:06:bb:ea:69:
                    71:a7:fa:54:47:75:d3:65:9e:ae:f6:dd:04:32:b8:
                    a2:17:cc:c7:bb:c5:99:86:f7:56:09:b9:d6:61:61:
                    09:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F0:BC:40:6C:C3:39:3F:BF:07:5B:55:82:3D:91:52:A9:59:0D:35
            X509v3 Authority Key Identifier:
                keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/E685F69A372D11F1A4767B088F833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.123.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:5b:52:7f:d8:4f:57:c1:d9:26:31:65:ba:fe:b7:05:e0:d5:
         b1:ae:95:4c:64:a8:d4:83:8e:43:50:0c:52:8a:03:41:e6:80:
         e8:b7:92:1d:ac:1e:a0:77:63:70:2c:cc:41:60:f6:9b:8e:ea:
         9e:d2:5e:95:0e:78:2e:6d:87:8d:22:a9:47:ed:8f:aa:06:ff:
         0c:75:87:63:57:71:cd:d0:67:a4:6f:59:8e:09:67:1b:17:a7:
         f2:50:cd:85:4f:66:1a:3b:7e:99:be:4c:9f:d2:66:2d:b0:38:
         ff:18:8f:04:20:ae:e1:34:65:b0:87:a0:c5:ee:00:38:52:ec:
         3f:38:64:68:71:50:8f:90:a0:83:d3:6b:7c:99:68:02:55:05:
         52:71:e4:4f:b9:50:25:34:0e:a8:21:a1:b7:aa:00:b1:91:24:
         da:65:96:af:46:22:c9:96:32:75:93:74:fd:ca:a0:89:b6:7a:
         47:eb:eb:09:4b:ed:09:31:ed:0b:64:f1:f7:29:91:d2:6c:3e:
         9d:1d:53:31:8f:06:d2:20:ee:12:5d:03:3b:89:2d:db:3c:6f:
         54:ac:2b:ea:34:20:21:d9:86:87:2c:e1:ce:d9:ca:4d:5d:28:
         9f:5a:14:e4:ab:15:44:a3:08:97:70:59:5c:eb:a2:63:3c:27:
         cf:b1:e6:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:45 2026 by rpki-client