Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/DD73806ED3C811EF9D76942FC4F9AE02.roa
File:                     DD73806ED3C811EF9D76942FC4F9AE02.roa (raw, json)
Hash identifier:          XuMtilZNPhFP3hcI0EFjINtqqdDqROMWrGc5+3vleHI=
Subject key identifier:   88:EE:43:DB:5C:C6:E8:FE:28:CB:B2:3D:9F:69:31:A2:21:1A:5F:1A
Certificate issuer:       /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
Certificate serial:       234C
Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/DD73806ED3C811EF9D76942FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:28:16 +0000
ROA not before:           Fri 02 May 2025 16:23:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136895
IP address blocks:        2404:7c00:4f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl
                          rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9036 (0x234c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
        Validity
            Not Before: May  2 16:23:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a45b0f-0681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:84:3d:5e:14:7a:5b:12:b4:f2:f4:35:ea:
                    95:11:a0:f3:33:6e:14:bb:95:92:94:91:a8:82:1f:
                    ab:7b:4f:93:ba:d6:4a:3f:65:14:78:ce:6d:36:73:
                    cd:0c:f0:d5:3e:78:ab:9f:b5:a6:b2:e0:f0:ac:2d:
                    d1:34:7a:48:7e:6c:58:a7:88:09:27:01:28:59:7d:
                    a3:55:7d:77:89:35:68:1e:ae:0c:47:fe:0d:97:02:
                    2a:d7:d7:4e:9c:b4:6d:fe:b8:b7:bb:f1:50:cf:5a:
                    b2:1f:1f:6b:13:0e:53:e0:ea:2b:67:f2:58:d7:c1:
                    46:d6:aa:cc:7c:47:d3:0b:e3:f9:c9:54:3b:3f:11:
                    0c:80:fe:e1:3a:6f:bf:92:ea:33:c1:52:bc:35:f6:
                    02:0c:a8:15:a0:fc:61:28:ec:b9:01:91:2c:bd:29:
                    fb:49:6e:29:f4:e4:cc:f7:44:48:81:b5:7c:f5:41:
                    6f:f8:ac:d0:eb:a7:41:fd:97:c9:df:14:41:6d:17:
                    22:94:f5:e3:99:4f:3d:59:57:cb:a5:ec:3c:f3:e8:
                    00:e5:94:af:b4:a6:14:66:31:7a:0a:ec:72:f0:ea:
                    6c:eb:93:16:22:12:f9:29:fd:6c:16:5a:a2:09:99:
                    ae:d7:cf:8b:b2:da:ba:e7:50:0a:03:09:41:a3:95:
                    da:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EE:43:DB:5C:C6:E8:FE:28:CB:B2:3D:9F:69:31:A2:21:1A:5F:1A
            X509v3 Authority Key Identifier:
                keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/DD73806ED3C811EF9D76942FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7c00:4f::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:fe:ff:d1:1f:b1:21:09:81:2c:70:fc:1f:0e:bf:68:e3:6b:
         9f:e7:ce:99:14:24:63:90:bf:e6:a3:05:ea:17:54:e7:87:b0:
         90:a4:22:9f:cc:1c:c8:83:36:e9:9b:91:b9:a0:16:91:6a:b9:
         5b:dc:a6:98:fc:b2:21:e4:4c:7a:5d:68:e5:2d:12:01:17:57:
         24:d4:2c:a0:a7:86:a4:07:5b:49:95:45:9b:43:e7:e8:81:f5:
         37:d9:35:42:81:d8:a4:56:54:06:ac:63:04:9d:cc:cd:c9:9b:
         66:e4:70:81:34:7c:ca:99:64:bd:20:9f:b2:0c:a0:ea:66:90:
         a5:db:5c:df:15:68:33:f6:aa:03:89:12:0a:14:d9:46:23:bf:
         87:55:43:6d:16:75:6c:93:cb:16:5d:64:ae:ee:28:87:47:95:
         da:64:33:f3:f5:e3:42:2a:17:fb:67:5d:a5:76:57:60:72:16:
         76:79:88:36:fb:2d:1a:16:4d:a6:82:c2:84:6b:94:8d:01:03:
         74:f8:25:c0:7f:d2:2f:1d:85:5b:78:46:09:6c:d7:7b:46:0f:
         52:57:3c:2a:f0:e7:0d:b2:43:71:f3:08:63:46:57:a4:c9:55:
         5f:c5:5a:6b:fd:8f:88:22:b8:1c:60:e4:39:27:45:6d:aa:03:
         25:52:5d:df
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICI0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF
MkMyNDIwRjkwHhcNMjUwNTAyMTYyMzUxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWIwZi0wNjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsrOEPV4UelsStPL0NeqVEaDzM24Uu5WSlJGogh+re0+TutZKP2UUeM5tNnPN
DPDVPnirn7WmsuDwrC3RNHpIfmxYp4gJJwEoWX2jVX13iTVoHq4MR/4NlwIq19dO
nLRt/ri3u/FQz1qyHx9rEw5T4OorZ/JY18FG1qrMfEfTC+P5yVQ7PxEMgP7hOm+/
kuozwVK8NfYCDKgVoPxhKOy5AZEsvSn7SW4p9OTM90RIgbV89UFv+KzQ66dB/ZfJ
3xRBbRcilPXjmU89WVfLpew88+gA5ZSvtKYUZjF6Cuxy8Ops65MWIhL5Kf1sFlqi
CZmu18+Lstq651AKAwlBo5XaxwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFIjuQ9tc
xuj+KMuyPZ9pMaIhGl8aMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4
NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTkzMzMvMDY1REEzQkFCODQ0MTFFNUI1MzU3QjJGQzRGOUFFMDIvREQ3MzgwNkVE
M0M4MTFFRjlENzY5NDJGQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAR8AABPMA0GCSqGSIb3DQEBCwUAA4IBAQCB/v/RH7EhCYEscPwf
Dr9o42uf586ZFCRjkL/mowXqF1Tnh7CQpCKfzBzIgzbpm5G5oBaRarlb3KaY/LIh
5Ex6XWjlLRIBF1ck1Cygp4akB1tJlUWbQ+fogfU32TVCgdikVlQGrGMEnczNyZtm
5HCBNHzKmWS9IJ+yDKDqZpCl21zfFWgz9qoDiRIKFNlGI7+HVUNtFnVsk8sWXWSu
7iiHR5XaZDPz9eNCKhf7Z12ldldgchZ2eYg2+y0aFk2mgsKEa5SNAQN0+CXAf9Iv
HYVbeEYJbNd7Rg9SVzwq8OcNskNx8whjRlekyVVfxVpr/Y+IIrgcYOQ5J0VtqgMl
Ul3f
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:17 2026 by rpki-client