Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa
File:                     C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa (raw, json)
Hash identifier:          AgB/Lpuse8T/z5cV67IzFShDTNVxyKAZ8KwUvRhawFQ=
Subject key identifier:   14:58:13:4A:EC:66:A1:CA:BD:55:BB:5F:82:45:95:38:84:DB:33:37
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       E8
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:11:35 +0000
ROA not before:           Sat 17 Jan 2026 08:38:46 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134565
IP address blocks:        122.155.135.0/24 maxlen: 24
                          2001:c38:9151::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Jan 17 08:38:46 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48f67-2fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:3d:ed:4a:17:9f:e3:78:60:7e:53:92:eb:
                    f7:4b:8e:06:02:43:c1:eb:95:34:76:87:e6:6a:0b:
                    ee:b4:fb:c5:b9:3a:a2:a9:2b:10:6a:e4:8f:51:67:
                    f9:96:65:ae:e7:45:bd:1c:22:61:c2:ad:a4:10:c7:
                    5a:22:bf:6f:b4:fe:47:01:c1:22:3b:46:14:01:b7:
                    f0:ed:9b:b5:80:a6:55:94:e7:73:27:7d:17:b7:f0:
                    da:4a:56:71:f0:5c:3d:77:38:64:e1:32:62:f0:75:
                    dc:ac:de:7d:07:76:39:6f:d0:13:7c:d7:e6:50:1b:
                    ab:f2:13:5a:51:bd:3d:8a:89:ad:44:5b:4d:86:e0:
                    5e:ea:2f:89:8b:11:28:f1:45:12:a1:93:36:19:62:
                    c5:df:2d:8c:eb:cb:57:44:f3:11:6c:e5:02:f6:9d:
                    3a:6e:de:cd:f2:7b:9a:1c:bd:01:3a:20:1d:c3:9f:
                    0c:a6:95:03:87:11:61:e1:84:0e:24:50:9d:3d:19:
                    58:48:1a:3c:86:0d:14:b2:d8:b6:9b:60:41:f0:1b:
                    ee:55:5c:26:ad:8b:04:4a:a1:82:77:09:e1:91:8b:
                    01:70:3b:13:b4:62:36:d7:75:13:1a:1a:77:86:ce:
                    4c:ec:48:16:e8:7c:a6:1f:0a:a5:1f:ae:60:60:ae:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:58:13:4A:EC:66:A1:CA:BD:55:BB:5F:82:45:95:38:84:DB:33:37
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.155.135.0/24
                IPv6:
                  2001:c38:9151::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:c8:85:e0:9c:9a:7e:79:dc:ed:51:14:be:84:bc:fc:0f:cf:
         2b:97:05:2e:ee:6b:61:ab:e1:0f:45:19:83:34:cf:44:09:2d:
         79:ba:8e:e9:91:fb:57:6f:55:c1:23:c8:e1:17:90:95:d5:92:
         b1:12:27:8c:d6:33:ad:ff:b3:e2:24:64:46:f0:9d:83:b9:05:
         a7:70:d6:9f:25:b4:22:a1:18:88:d7:ad:8a:90:83:0c:32:7d:
         c5:eb:3f:6f:a0:96:c0:01:bc:f2:d6:77:c3:49:aa:91:17:cc:
         6b:29:bf:c1:ba:74:b3:11:f9:5c:d3:3a:5a:7f:08:aa:6b:fd:
         6a:a4:03:1b:9d:93:e9:4c:5f:7c:1f:ac:8c:89:72:b8:15:40:
         d1:02:c5:66:15:50:5a:9a:cb:93:b3:39:96:a4:2c:65:25:f2:
         72:1c:e6:b4:32:0a:4d:b7:21:69:dc:84:73:16:81:0c:04:dc:
         c3:b9:42:17:9b:61:17:51:42:2d:9f:a2:6e:7e:72:0f:7e:8a:
         27:d4:44:da:17:f3:0b:9c:ad:60:e8:26:9b:a4:86:4c:13:9f:
         3b:16:aa:f0:65:2e:cb:f5:fd:63:1f:7d:d9:fc:2a:46:bc:c8:
         81:1e:cd:f2:42:54:cf:30:cd:4a:5b:1e:46:fd:1c:b4:ff:99:
         fc:49:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:33 2026 by rpki-client