Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/F9B1B1167E3F11F0B7941020C4F9AE02.roa
File:                     F9B1B1167E3F11F0B7941020C4F9AE02.roa (raw, json)
Hash identifier:          6ut+hJgutmu3/f4DHRIxmtYIF24wDhGZAw9tYwessYw=
Subject key identifier:   D9:30:22:F5:93:7A:ED:73:A8:5E:9F:A6:1D:3C:D7:D0:EE:4D:5D:0E
Certificate issuer:       /CN=A9127760/serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F
Certificate serial:       63
Authority key identifier: CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/F9B1B1167E3F11F0B7941020C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:28:18 +0000
ROA not before:           Thu 21 Aug 2025 03:36:08 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154158
IP address blocks:        155.35.46.0/23 maxlen: 23
                          155.35.46.0/24 maxlen: 24
                          155.35.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl
                          rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127760, serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F
        Validity
            Not Before: Aug 21 03:36:08 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3dc82-15dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:9e:1a:9c:6c:23:a2:1e:95:de:e1:2d:ad:
                    1c:1b:85:eb:ae:d2:50:65:a2:3e:f1:63:90:97:09:
                    fa:52:8a:75:b9:03:41:da:6f:9f:40:86:55:ac:ea:
                    94:6f:58:1d:00:93:13:1e:73:56:f4:09:99:2f:22:
                    02:55:04:7f:7f:31:30:3e:2b:3e:fb:e4:c9:4f:c2:
                    4c:f6:af:b4:4d:06:38:d1:ae:b0:b9:c0:63:64:e7:
                    fd:12:f4:0e:ee:47:72:41:be:84:04:a3:f4:8b:53:
                    70:c4:b8:e8:a2:3e:d4:11:9c:d1:19:96:2c:a3:63:
                    be:7c:d1:03:c7:d2:e8:86:77:a9:ba:18:54:c2:11:
                    ce:70:35:92:6f:96:be:cb:69:4a:fc:a0:a0:78:72:
                    39:d4:5f:b3:c3:ef:37:1a:48:73:bb:d4:4e:89:d8:
                    60:f2:d6:ce:bb:0d:ca:7a:8d:aa:06:a9:74:bd:32:
                    00:40:d5:d9:e9:d5:43:62:9a:3e:50:98:09:dc:2f:
                    fd:05:55:42:ed:2a:61:6f:72:d2:3f:ca:c8:80:8a:
                    66:4a:37:88:a6:bb:cb:b9:46:54:8d:4b:99:7a:f6:
                    78:ee:03:1e:eb:78:e8:27:4a:fe:d3:69:1f:e5:5d:
                    78:16:a4:e8:ee:45:0f:57:52:df:d7:58:9a:4a:4a:
                    11:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:30:22:F5:93:7A:ED:73:A8:5E:9F:A6:1D:3C:D7:D0:EE:4D:5D:0E
            X509v3 Authority Key Identifier:
                keyid:CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/F9B1B1167E3F11F0B7941020C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.35.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:86:a4:6e:c2:3e:f4:4c:c9:dd:3b:be:cf:8f:c7:79:cb:74:
         d3:09:46:f3:42:88:5d:d8:c7:5e:7f:ac:96:33:3f:88:4d:b9:
         9e:4f:97:b6:f0:27:6a:93:83:36:fd:7f:03:1c:6b:76:94:a1:
         88:8a:1d:b0:c9:62:e7:8a:b7:49:e3:fc:a2:65:a9:b5:1c:47:
         3e:c2:ab:fe:5b:de:18:01:40:7b:ec:00:ff:5f:4d:da:94:77:
         f4:cf:68:96:be:27:75:79:da:d6:8e:f5:01:1b:50:12:a1:2e:
         62:92:ee:d2:8c:c4:cb:09:3b:a9:ac:08:22:29:d8:f5:f0:57:
         c1:81:75:7d:72:83:16:31:c2:84:0b:05:c2:19:24:99:77:5b:
         2b:1f:d6:a9:8e:67:36:ed:e8:38:0e:35:6f:1c:5a:9b:e2:6a:
         5d:a5:a3:d2:f0:a4:a5:12:f7:dd:9d:a8:2d:23:f9:77:06:08:
         01:74:48:dc:5b:05:58:29:83:fe:e0:a3:f4:19:d1:20:32:4b:
         bb:a6:f5:2e:06:ff:ba:44:96:81:5d:2a:a3:ff:0d:4c:f5:55:
         7f:df:e0:b1:a7:d7:7a:76:b3:8c:c2:6f:4b:f1:1d:29:80:5c:
         47:6a:da:c1:dc:5f:f3:84:f3:1d:d0:b8:f1:85:d7:d9:a5:16:
         8f:c4:8d:3d
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
Nzc2MDExMC8GA1UEBRMoQ0IyRTZFQzE1NTlFQTQ3NjM5NDQwQjQwQUFENzVGOTVF
NkZEQkM1RjAeFw0yNTA4MjEwMzM2MDhaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkYzgyLTE1ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsL54anGwjoh6V3uEtrRwbheuu0lBloj7xY5CXCfpSinW5A0Hab59AhlWs6pRv
WB0AkxMec1b0CZkvIgJVBH9/MTA+Kz775MlPwkz2r7RNBjjRrrC5wGNk5/0S9A7u
R3JBvoQEo/SLU3DEuOiiPtQRnNEZliyjY7580QPH0uiGd6m6GFTCEc5wNZJvlr7L
aUr8oKB4cjnUX7PD7zcaSHO71E6J2GDy1s67Dcp6jaoGqXS9MgBA1dnp1UNimj5Q
mAncL/0FVULtKmFvctI/ysiAimZKN4imu8u5RlSNS5l69njuAx7reOgnSv7TaR/l
XXgWpOjuRQ9XUt/XWJpKShFDAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU2TAi9ZN6
7XOoXp+mHTzX0O5NXQ4wHwYDVR0jBBgwFoAUyy5uwVWepHY5RAtAqtdfleb9vF8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NzYwLzc0M0QxNjdFN0Uz
RjExRjBBQjA4OUIxRUM0RjlBRTAyL3l5NXV3VldlcEhZNVJBdEFxdGRmbGViOXZG
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIveXk1dXdWV2VwSFk1UkF0QXF0ZGZsZWI5dkY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Nzc2MC83NDNEMTY3RTdFM0YxMUYwQUIwODlCMUVDNEY5QUUwMi9GOUIxQjExNjdF
M0YxMUYwQjc5NDEwMjBDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGbIy4wDQYJKoZIhvcNAQELBQADggEBACOGpG7CPvRMyd07vs+Px3nL
dNMJRvNCiF3Yx15/rJYzP4hNuZ5Pl7bwJ2qTgzb9fwMca3aUoYiKHbDJYueKt0nj
/KJlqbUcRz7Cq/5b3hgBQHvsAP9fTdqUd/TPaJa+J3V52taO9QEbUBKhLmKS7tKM
xMsJO6msCCIp2PXwV8GBdX1ygxYxwoQLBcIZJJl3Wysf1qmOZzbt6DgONW8cWpvi
al2lo9LwpKUS992dqC0j+XcGCAF0SNxbBVgpg/7go/QZ0SAyS7um9S4G/7pEloFd
KqP/DUz1VX/f4LGn13p2s4zCb0vxHSmAXEdq2sHcX/OE8x3QuPGF19mlFo/EjT0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:07 2026 by rpki-client