Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/069AADE4F66B11F0A47B438A6F6F56BC.roa
File:                     069AADE4F66B11F0A47B438A6F6F56BC.roa (raw, json)
Hash identifier:          TWzuzM5wtFo01MWyTRGBS+4PovirNG3yt3IyJZZ9w74=
Subject key identifier:   82:D2:67:19:67:16:17:28:35:2E:76:77:E9:CF:50:A9:B3:47:CE:4D
Certificate issuer:       /CN=A9110C8B/serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
Certificate serial:       18
Authority key identifier: 68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/069AADE4F66B11F0A47B438A6F6F56BC.roa
Signing time:             Sun 01 Mar 2026 05:41:17 +0000
ROA not before:           Wed 21 Jan 2026 01:46:38 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154451
IP address blocks:        144.79.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl
                          rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C8B, serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
        Validity
            Not Before: Jan 21 01:46:38 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d17d-6a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:42:8b:b8:95:b4:80:c7:65:32:66:f4:7b:
                    ec:a0:f1:3a:ba:f3:ad:a1:3b:09:66:c6:60:5c:c1:
                    02:30:8e:11:5f:1e:e1:eb:52:09:fa:e7:08:3a:38:
                    76:bd:5c:49:ab:8a:4c:67:3e:68:f8:7a:a4:50:8d:
                    4c:94:5e:c8:f2:a4:4f:fb:9b:ce:a4:20:e6:93:85:
                    0f:27:59:73:99:59:9b:ce:97:f9:6d:70:a6:8f:60:
                    de:bf:8a:8a:28:0d:e8:6a:6b:65:dd:2d:c3:16:fb:
                    40:fa:8d:b1:83:13:1b:96:4e:dc:14:28:15:28:91:
                    a2:3e:4d:c0:ac:0d:7e:88:91:f0:a6:82:e5:dc:f2:
                    14:7c:25:70:b5:1a:a8:07:70:e9:17:27:83:b3:0b:
                    a0:66:c8:aa:4c:ad:c0:f2:0f:ff:fa:5e:12:f4:c9:
                    26:c1:9b:00:b0:20:ae:5a:d2:9e:1b:f5:ba:25:ed:
                    69:12:a7:fe:46:6b:88:68:22:cc:90:d1:ec:9e:0a:
                    1b:1d:99:24:0b:ec:f8:dd:fb:7c:d7:b9:73:00:43:
                    26:16:c7:f3:00:eb:04:c5:51:88:ec:89:31:20:85:
                    dd:e7:fe:ec:6e:f4:db:d2:3b:de:45:39:00:84:56:
                    b1:42:a0:da:b2:8f:cd:af:ff:cf:9f:d1:46:c6:eb:
                    e4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D2:67:19:67:16:17:28:35:2E:76:77:E9:CF:50:A9:B3:47:CE:4D
            X509v3 Authority Key Identifier:
                keyid:68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/069AADE4F66B11F0A47B438A6F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:47:a9:e8:1b:3b:62:78:fb:5d:0f:3a:af:9c:9f:f8:c5:ee:
         c4:96:7f:f9:c7:3c:ab:56:9a:53:d9:50:ab:22:44:f4:32:3f:
         08:11:d2:50:82:61:c9:68:24:67:2d:a4:bc:dd:b5:c4:02:76:
         ed:4b:7f:4d:af:bb:e4:43:f7:c0:9e:dd:7a:6a:2b:79:5a:98:
         fb:60:da:23:cf:f4:5c:42:af:29:54:eb:14:74:ec:d0:fc:c0:
         c2:25:a8:bb:38:df:b4:f4:12:f4:a3:62:c0:05:c3:9b:df:d0:
         63:16:36:0e:28:48:cb:91:f5:14:a7:6d:12:fe:b9:ef:73:bd:
         64:c3:da:4f:f5:54:82:d5:fe:1e:95:eb:ce:c7:dc:3c:a4:86:
         ee:2f:47:07:3b:4c:b2:83:25:8f:8f:9a:4d:23:b5:c8:58:65:
         51:d7:2c:dc:46:2f:c7:5d:1d:14:69:92:e3:8c:22:3c:64:ef:
         1d:61:38:93:6f:03:04:e2:3f:c9:e8:bd:48:7d:5d:f3:3c:db:
         ae:ef:89:d9:c9:22:9c:26:db:46:12:7d:25:3a:b0:49:43:65:
         f6:c4:e6:7a:3e:de:ed:d2:0e:8c:fa:52:5d:3c:93:b9:8f:6d:
         f1:67:4c:78:21:29:e6:4d:a5:d9:60:5b:e9:6d:7d:38:80:d1:
         d1:47:26:87
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MEM4QjExMC8GA1UEBRMoNjg1NTQzNzM0MEVFRjlERjQyMzNBQTMwNTk4MzAxMjE3
QjBBMUM1NTAeFw0yNjAxMjEwMTQ2MzhaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkMTdkLTZhNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZRUKLuJW0gMdlMmb0e+yg8Tq6862hOwlmxmBcwQIwjhFfHuHrUgn65wg6OHa9
XEmrikxnPmj4eqRQjUyUXsjypE/7m86kIOaThQ8nWXOZWZvOl/ltcKaPYN6/iooo
Dehqa2XdLcMW+0D6jbGDExuWTtwUKBUokaI+TcCsDX6IkfCmguXc8hR8JXC1GqgH
cOkXJ4OzC6BmyKpMrcDyD//6XhL0ySbBmwCwIK5a0p4b9bol7WkSp/5Ga4hoIsyQ
0eyeChsdmSQL7Pjd+3zXuXMAQyYWx/MA6wTFUYjsiTEghd3n/uxu9NvSO95FOQCE
VrFCoNqyj82v/8+f0UbG6+QpAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUgtJnGWcW
Fyg1LnZ36c9QqbNHzk0wHwYDVR0jBBgwFoAUaFVDc0Du+d9CM6owWYMBIXsKHFUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwQzhCLzk0NjAyNzRBRjY2
QTExRjBBM0ZCOTA4ODZGNkY1NkJDL2FGVkRjMER1LWQ5Q002b3dXWU1CSVhzS0hG
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvYUZWRGMwRHUtZDlDTTZvd1dZTUJJWHNLSEZVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEM4Qi85NDYwMjc0QUY2NkExMUYwQTNGQjkwODg2RjZGNTZCQy8wNjlBQURFNEY2
NkIxMUYwQTQ3QjQzOEE2RjZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACQT68wDQYJKoZIhvcNAQELBQADggEBADVHqegbO2J4+10POq+cn/jF
7sSWf/nHPKtWmlPZUKsiRPQyPwgR0lCCYcloJGctpLzdtcQCdu1Lf02vu+RD98Ce
3XpqK3lamPtg2iPP9FxCrylU6xR07ND8wMIlqLs437T0EvSjYsAFw5vf0GMWNg4o
SMuR9RSnbRL+ue9zvWTD2k/1VILV/h6V687H3Dykhu4vRwc7TLKDJY+Pmk0jtchY
ZVHXLNxGL8ddHRRpkuOMIjxk7x1hOJNvAwTiP8novUh9XfM8267vidnJIpwm20YS
fSU6sElDZfbE5no+3u3SDoz6Ul08k7mPbfFnTHghKeZNpdlgW+ltfTiA0dFHJoc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:45:45 2026 by rpki-client