Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72B7B44C781011F09E189B6FC4F9AE02.roa
File:                     72B7B44C781011F09E189B6FC4F9AE02.roa (raw, json)
Hash identifier:          s/ugvMQB+ErSTKVcTAiIxhZtN7zKGcO2F4ahSZSkByc=
Subject key identifier:   BB:49:F8:0E:2D:20:58:76:D1:8A:32:23:85:81:E6:D6:B3:05:9A:60
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D9BA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72B7B44C781011F09E189B6FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 23:00:39 +0000
ROA not before:           Wed 13 Aug 2025 06:55:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154137
IP address blocks:        175.100.170.0/23 maxlen: 24
                          2001:df5:f8c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55738 (0xd9ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Aug 13 06:55:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c517-6e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:1d:b4:e8:dc:1c:4b:cc:0d:7b:2f:e6:9e:
                    98:a3:8c:69:26:a1:83:f9:83:18:6a:3c:88:2c:c6:
                    65:f6:18:92:75:e0:02:74:a2:d2:1c:1c:34:93:e2:
                    ba:23:c8:43:e3:2b:c1:57:2b:30:e0:c9:e0:5e:d3:
                    4a:67:c0:9c:ad:cd:b4:22:a1:d3:ae:de:ee:db:0c:
                    23:d3:92:e9:22:f3:c1:dd:56:c8:83:49:67:63:9b:
                    23:f3:d2:51:8a:f0:e5:90:a8:1e:a9:d1:8c:5f:34:
                    c2:f0:88:14:4a:8e:c7:cb:ea:57:ea:55:bb:94:15:
                    d8:d0:38:6f:1d:b8:5a:b4:c4:43:e8:a1:9c:9b:35:
                    9d:0d:d0:fe:1a:4b:96:28:f2:46:02:02:6a:5e:cc:
                    cf:4a:26:ca:40:63:12:9b:9c:06:59:7b:d1:c0:e2:
                    ff:7d:63:5c:57:fd:50:d2:27:a1:8e:84:4a:7e:bd:
                    ab:59:3e:43:8c:06:87:99:92:2b:06:79:e5:1a:76:
                    3e:23:e0:a6:9a:65:21:21:f2:5b:7c:48:05:81:d0:
                    cc:2d:a5:08:13:83:49:b7:10:2b:c9:dc:68:10:3e:
                    41:44:e2:89:ff:55:cc:c9:9d:c2:09:c2:a1:0d:00:
                    81:f8:b7:9c:10:98:c7:50:44:54:ae:ae:79:71:4c:
                    5e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:49:F8:0E:2D:20:58:76:D1:8A:32:23:85:81:E6:D6:B3:05:9A:60
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72B7B44C781011F09E189B6FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.100.170.0/23
                IPv6:
                  2001:df5:f8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:99:a0:b6:86:cf:d1:be:e3:44:bb:a3:f6:d5:63:d0:35:ee:
         c0:90:ec:ae:71:90:08:fa:dd:f7:c7:d6:73:93:bb:7d:71:db:
         71:1c:e8:04:60:6a:b6:1b:ea:a7:a8:51:2d:93:95:d2:b9:ec:
         b1:41:b1:d0:a2:7b:ff:fe:bd:a7:85:8e:d3:83:eb:d8:92:b9:
         9b:06:a2:42:f7:b4:49:47:0e:dc:89:cb:15:d5:35:b7:4f:20:
         3a:8e:75:59:48:65:87:ea:e9:1f:7f:b3:93:05:08:3c:5a:74:
         38:f5:0e:af:ff:c5:c9:0a:60:36:5c:04:36:04:9b:e7:a1:f2:
         38:c0:8f:b6:b9:c0:b7:c4:7c:6c:61:92:b7:27:ce:71:64:a6:
         46:8f:9e:b2:fe:fc:c2:d3:e4:e2:95:ec:ed:e7:83:43:8f:1c:
         fc:c0:90:3d:ab:4f:82:e5:16:25:88:e5:95:27:15:bd:04:1c:
         7e:cc:fd:70:43:00:e7:d7:77:12:31:c7:70:a7:87:27:55:b3:
         83:70:57:fd:29:b6:54:05:d2:96:23:36:0e:b0:9b:ad:b9:e0:
         f7:fa:e8:8d:10:de:03:9e:0a:31:39:24:c3:71:cb:a7:4f:82:
         e5:ab:48:7e:e3:61:4a:0d:6b:fd:f2:f0:28:92:65:fc:af:00:
         80:fe:6b:fb
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDANm6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDgxMzA2NTUzM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGM1MTctNmU4ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALVzHbTo3BxLzA17L+aemKOMaSahg/mDGGo8iCzGZfYYknXgAnSi0hwcNJPi
uiPIQ+MrwVcrMODJ4F7TSmfAnK3NtCKh067e7tsMI9OS6SLzwd1WyINJZ2ObI/PS
UYrw5ZCoHqnRjF80wvCIFEqOx8vqV+pVu5QV2NA4bx24WrTEQ+ihnJs1nQ3Q/hpL
lijyRgICal7Mz0omykBjEpucBll70cDi/31jXFf9UNInoY6ESn69q1k+Q4wGh5mS
KwZ55Rp2PiPgppplISHyW3xIBYHQzC2lCBODSbcQK8ncaBA+QUTiif9VzMmdwgnC
oQ0Agfi3nBCYx1BEVK6ueXFMXtECAwEAAaOCAnEwggJtMB0GA1UdDgQWBBS7SfgO
LSBYdtGKMiOFgebWswWaYDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcyQjdCNDRD
NzgxMDExRjA5RTE4OUI2RkM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAa9kqjAPBAIAAjAJAwcAIAEN9fjAMA0GCSqGSIb3DQEBCwUAA4IB
AQAWmaC2hs/RvuNEu6P21WPQNe7AkOyucZAI+t33x9Zzk7t9cdtxHOgEYGq2G+qn
qFEtk5XSueyxQbHQonv//r2nhY7Tg+vYkrmbBqJC97RJRw7cicsV1TW3TyA6jnVZ
SGWH6ukff7OTBQg8WnQ49Q6v/8XJCmA2XAQ2BJvnofI4wI+2ucC3xHxsYZK3J85x
ZKZGj56y/vzC0+Tilezt54NDjxz8wJA9q0+C5RYliOWVJxW9BBx+zP1wQwDn13cS
Mcdwp4cnVbODcFf9KbZUBdKWIzYOsJutueD3+uiNEN4DngoxOSTDccunT4Llq0h+
42FKDWv98vAokmX8rwCA/mv7
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:33 2026 by rpki-client