Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9E825176C91A11F0876AC673C4F9AE02.roa
File:                     9E825176C91A11F0876AC673C4F9AE02.roa (raw, json)
Hash identifier:          d71K3UhmJpGSIPnHwtXjuIVmSy3U1s/D91e+1fG5beE=
Subject key identifier:   C5:EE:4A:D1:9C:E0:AD:9E:B8:06:9F:EB:8B:1C:DE:D1:AB:D6:76:B5
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       D4
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9E825176C91A11F0876AC673C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:11:18 +0000
ROA not before:           Mon 24 Nov 2025 09:47:42 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     141692
IP address blocks:        122.155.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Nov 24 09:47:42 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48f56-3899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:8b:2b:c7:55:98:4d:b8:57:f0:15:a2:73:
                    2d:b0:76:0f:a9:56:d4:40:8e:aa:cd:5d:8a:f9:46:
                    0d:36:db:68:ee:6f:d1:49:a8:dc:bc:4d:dd:fd:bb:
                    f3:93:9a:4a:8d:fc:93:d2:85:e7:77:8e:f9:62:5b:
                    68:7d:c8:d6:f9:92:ee:e7:81:07:1d:0c:7c:7a:80:
                    03:43:66:3a:46:09:be:eb:f5:34:20:33:0d:ee:8e:
                    a7:ea:b7:b9:6c:03:cb:aa:bf:53:0e:34:d6:68:40:
                    cf:7b:72:6c:f1:1c:bc:5e:d3:96:07:f8:6a:9c:ce:
                    06:94:e6:e8:a2:9c:4e:bf:93:62:14:94:03:1d:cb:
                    23:05:c9:af:dc:b7:c4:23:96:f6:4a:cd:d7:6f:0d:
                    7a:9b:ba:07:0c:19:dd:6b:a8:fb:2b:da:55:97:06:
                    56:55:e3:32:bb:0f:34:48:4b:96:0c:27:e3:50:e1:
                    27:13:2c:8e:66:cf:4c:a1:df:72:01:f2:70:d7:d0:
                    b5:c5:93:6a:7f:86:e3:63:09:4a:e7:b9:f9:11:26:
                    53:18:9a:88:1c:f3:06:34:1c:a6:9b:b5:cd:83:42:
                    1f:12:b8:44:c7:4e:cd:64:4f:8b:b3:c6:fe:bf:62:
                    56:f1:1d:c9:1f:b7:89:2a:d9:73:b2:59:bc:ba:87:
                    56:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EE:4A:D1:9C:E0:AD:9E:B8:06:9F:EB:8B:1C:DE:D1:AB:D6:76:B5
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9E825176C91A11F0876AC673C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.155.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:a0:97:52:8a:b1:51:e6:c3:ec:3e:9c:4e:a4:fb:23:f3:00:
         d4:dc:99:48:2b:b9:66:2b:5e:14:7d:93:cd:dc:f7:19:63:94:
         a8:eb:97:1a:f9:29:1f:34:56:9a:66:ae:56:44:cf:78:c0:07:
         e8:6a:d0:33:22:a6:2e:7f:83:20:08:86:72:fe:af:cf:18:55:
         7b:1e:37:34:ac:70:32:58:81:b0:83:23:22:3b:7a:b1:73:cb:
         49:91:e8:11:4e:0c:c7:79:36:d2:53:8d:df:3d:73:0c:22:f9:
         be:06:1c:38:f8:d9:48:c3:51:7b:9f:03:93:63:88:9e:09:4c:
         ce:2f:bc:10:bd:73:1f:ab:f1:63:13:5d:b5:c0:e9:ee:ea:81:
         32:03:ae:53:de:2b:53:bb:47:fe:2f:7a:d6:a1:8a:61:6c:7c:
         c7:08:e8:d9:07:3e:04:3d:d5:09:d6:39:00:58:40:bd:07:49:
         8b:db:0f:ff:66:ad:47:f5:42:f5:ce:1a:50:ac:08:c2:f5:54:
         82:df:04:61:fc:8f:84:68:e7:da:1a:83:7c:0b:09:db:85:c2:
         2e:ec:58:00:5e:39:bb:a4:97:85:f3:89:79:77:57:12:49:3f:
         5a:60:0a:7c:73:1e:cc:8c:4e:93:38:27:a2:15:9f:0c:6b:10:
         70:a0:8f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:21 2026 by rpki-client