Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/9EA66A9E737D11ECA0A3A018C4F9AE02.roa
File:                     9EA66A9E737D11ECA0A3A018C4F9AE02.roa (raw, json)
Hash identifier:          MyzbL17GlB7n5mym8wKDK3Np2cbXwEhUr2D4NBlzl+o=
Subject key identifier:   1C:F9:3A:8D:F9:3D:0A:1A:69:63:E1:9F:8B:43:9F:57:9C:70:A5:07
Certificate issuer:       /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Certificate serial:       08D9
Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/9EA66A9E737D11ECA0A3A018C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:33:43 +0000
ROA not before:           Fri 02 May 2025 21:32:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141435
IP address blocks:        149.234.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
                          rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265 (0x8d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
        Validity
            Not Before: May  2 21:32:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a46a67-b7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2e:03:38:e4:19:f9:7b:16:15:2f:45:9e:0f:
                    8b:1c:a1:e2:ac:8c:2a:96:ac:42:94:4a:31:81:ae:
                    da:55:6d:01:b9:e4:82:19:fb:b1:be:35:ca:bf:9e:
                    ed:83:0e:ee:fa:b6:9a:cc:d8:45:f4:b9:7b:ff:2a:
                    47:6e:c1:07:55:45:b8:3e:29:59:89:05:29:06:9e:
                    82:b0:5f:72:8f:55:1a:aa:81:80:e3:e9:21:cf:79:
                    93:50:33:03:70:6f:0b:96:4b:ce:56:31:03:07:9f:
                    a2:b0:13:48:3b:dd:a8:02:31:98:2f:5c:b2:6a:55:
                    92:53:8a:6e:3f:df:36:23:4f:9e:0d:c3:21:a2:be:
                    ce:a8:35:a4:2d:0f:39:77:bf:06:62:f4:c6:00:d9:
                    ae:91:62:1a:0d:99:33:4d:2b:c3:b8:9e:33:31:11:
                    fd:e0:45:cb:b5:82:64:7e:66:b7:55:fe:c4:41:1a:
                    d0:fa:06:34:e6:d6:1a:21:27:bb:1d:38:9a:25:f9:
                    d3:ba:c6:4d:0f:25:7e:59:7f:6f:9d:74:81:d8:6e:
                    f5:af:d4:74:de:8b:99:2a:0b:55:78:43:ce:ca:28:
                    f5:ad:29:9c:eb:48:1a:22:6a:a0:2e:a9:d8:1e:50:
                    bf:f6:bb:20:63:6b:cd:73:52:53:ef:0e:d8:cf:42:
                    43:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F9:3A:8D:F9:3D:0A:1A:69:63:E1:9F:8B:43:9F:57:9C:70:A5:07
            X509v3 Authority Key Identifier:
                keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/9EA66A9E737D11ECA0A3A018C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:68:14:7d:06:92:f6:a0:4c:4e:42:c6:82:5a:81:ac:3d:8d:
         23:eb:e9:80:86:96:42:b1:7f:41:a5:30:04:c5:cb:01:58:c8:
         ff:f1:de:74:a3:03:7f:f3:d5:0e:16:1f:d9:ed:94:33:d3:c3:
         f4:22:a6:9e:32:fe:ca:61:cf:61:10:1a:3e:d0:9e:a8:40:92:
         3a:41:78:ce:32:09:e4:76:47:87:98:41:b5:12:d3:18:49:d0:
         a1:d5:8c:3e:fe:91:e2:cc:97:37:94:03:34:9f:43:31:67:fe:
         eb:b4:10:88:ec:6f:4b:58:27:6b:7c:08:c8:0a:2c:2f:26:f8:
         0a:60:4d:0c:bb:e2:a3:d7:32:4b:15:c7:cf:09:38:34:f7:71:
         f3:a9:fe:75:7c:92:92:cc:a6:5b:67:79:df:1f:65:00:ea:11:
         27:86:d7:b4:7f:bf:29:2c:79:49:08:9b:62:0c:4d:e7:05:82:
         88:f0:23:92:df:65:c7:64:1b:64:77:0f:00:1d:f7:1b:18:98:
         7d:2a:44:65:4f:ad:b2:1a:00:56:7a:f3:6b:0d:de:2c:8e:01:
         d8:b3:30:91:9d:4d:a4:dc:d8:29:60:d3:43:51:48:e9:29:68:
         4b:1e:b8:15:40:49:9a:81:94:5c:aa:99:96:20:c6:f3:63:62:
         8e:4f:45:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:06:39 2026 by rpki-client