Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/E9CDE63CD56811EFB4A0C533C4F9AE02.roa
File:                     E9CDE63CD56811EFB4A0C533C4F9AE02.roa (raw, json)
Hash identifier:          kMNJUderrqrm6BMdhedyCh0cFocW4yaPFlSgdZY1BKY=
Subject key identifier:   90:4A:7C:A9:BF:DE:7C:F5:F8:95:94:80:66:3D:90:26:72:E9:3E:AB
Certificate issuer:       /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
Certificate serial:       0417
Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/E9CDE63CD56811EFB4A0C533C4F9AE02.roa
Signing time:             Sat 25 Jul 2026 01:49:31 +0000
ROA not before:           Sat 25 Jul 2026 01:49:31 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     153494
IP address blocks:        45.121.80.0/22 maxlen: 24
                          103.61.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl
                          rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
        Validity
            Not Before: Jul 25 01:49:31 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a64162b-a6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:3f:78:39:a1:a8:e9:db:30:72:09:46:a9:
                    c4:4f:8a:9f:90:04:35:db:2b:3c:8a:3c:9f:ed:81:
                    81:95:5a:e2:ab:0c:9a:ed:d9:aa:c5:cb:46:e2:68:
                    ed:22:c6:0d:c3:68:d1:a3:e0:3f:3e:02:a9:2d:6d:
                    7a:ec:5b:46:f9:7d:6e:82:70:b2:7f:76:a5:3f:2e:
                    d3:64:c2:b6:99:88:b9:a8:33:0c:71:3c:dc:55:41:
                    76:a0:72:d7:7b:2a:5b:65:65:ef:db:bf:7d:fe:db:
                    48:25:ec:e1:c4:3e:a4:8c:a7:ef:c3:16:2a:d2:31:
                    65:f6:be:8d:21:a1:fb:35:39:d6:6d:26:0b:43:91:
                    3b:b7:05:37:37:f8:bb:e1:fc:c0:2f:36:cb:eb:15:
                    dd:49:e3:d0:40:ac:93:29:d1:ce:7d:66:01:0a:f4:
                    4c:0e:84:1c:23:fb:b8:63:0f:76:46:ed:e6:ba:68:
                    ef:1a:3e:93:3e:19:10:8a:f2:19:af:e0:9a:17:43:
                    dc:57:6c:c2:1c:7f:99:4c:d6:5e:d5:b0:2c:29:25:
                    83:7c:ce:06:cd:2e:bb:9a:7c:52:12:5f:51:44:71:
                    9a:63:a8:72:b2:04:be:eb:55:f7:24:c6:a1:e3:62:
                    60:56:3a:59:84:42:c1:a2:e7:3c:ee:dc:ed:bb:84:
                    aa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4A:7C:A9:BF:DE:7C:F5:F8:95:94:80:66:3D:90:26:72:E9:3E:AB
            X509v3 Authority Key Identifier:
                keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/E9CDE63CD56811EFB4A0C533C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.80.0/22
                  103.61.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:b0:ae:04:00:35:0c:e9:72:ad:1b:30:d0:a2:0d:38:a1:57:
         62:c3:55:c7:b8:5e:87:0e:e0:f6:98:50:f9:be:c2:67:94:f4:
         86:95:e8:ac:21:cc:6a:4b:15:0b:fc:e9:b6:c1:51:c9:e8:e9:
         62:f0:fc:5f:f5:5a:73:fe:7b:51:0f:8d:cf:c0:30:b4:54:4c:
         b1:53:e7:10:66:49:5f:d9:ea:46:e6:06:4f:67:1a:cb:53:e2:
         d3:3d:9b:00:4d:ee:14:25:21:d1:87:76:7d:b7:5a:44:c9:0c:
         a4:41:90:40:84:e2:3d:ce:36:47:61:39:54:f9:46:cd:59:f9:
         c0:3e:45:04:a9:38:5b:40:26:43:99:26:44:ed:ee:a6:90:ad:
         0e:f5:dd:a6:9a:2c:c6:69:d3:2e:0a:07:97:b5:eb:63:6b:af:
         b9:91:e1:3f:67:92:c5:13:c8:c5:d3:10:8f:f6:d4:0d:cf:38:
         5a:cd:da:4f:03:9e:39:17:38:c9:56:86:cf:86:4c:27:d5:3b:
         8b:c4:bf:6b:88:0f:30:7f:fc:e2:3e:e2:30:46:1b:90:44:02:
         fa:57:49:37:ed:db:5b:af:8e:42:60:f3:f1:e2:8f:00:61:71:
         07:31:8e:c8:dc:72:85:17:d3:1a:13:93:3d:e5:2e:72:f5:ab:
         a0:81:a8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:33:51 2026 by rpki-client