Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/6BBEB632135F11F18A7710FA2D3D8C67.roa
File:                     6BBEB632135F11F18A7710FA2D3D8C67.roa (raw, json)
Hash identifier:          Q+VrPRa1Hf4fhFT9esGVsHr0n0IGZhGWKBLNYcr/kv0=
Subject key identifier:   CD:14:9F:6C:B3:A3:90:FA:71:79:55:37:A1:1B:6F:21:D5:AC:D2:91
Certificate issuer:       /CN=A9129738/serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
Certificate serial:       19
Authority key identifier: 66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/6BBEB632135F11F18A7710FA2D3D8C67.roa
Signing time:             Sun 01 Mar 2026 05:41:41 +0000
ROA not before:           Thu 26 Feb 2026 22:06:38 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     147302
IP address blocks:        45.120.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl
                          rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129738, serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
        Validity
            Not Before: Feb 26 22:06:38 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a3d195-2060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b0:ec:b3:7d:e0:e6:70:7c:1a:f2:3e:47:d1:
                    bf:4c:43:a4:43:3e:75:ca:8b:75:22:c5:09:d2:e3:
                    ce:06:a7:5a:db:08:e9:1e:6c:c7:a4:65:d1:77:f5:
                    ad:9a:31:f1:aa:ad:08:ae:72:65:91:95:8d:27:b1:
                    25:d1:25:46:fd:c4:34:2f:6e:12:36:51:19:aa:a1:
                    83:2e:82:ad:95:c5:0a:c0:e9:85:b8:4c:d9:e9:91:
                    41:ff:25:f1:85:35:16:57:7c:dd:89:c8:97:46:60:
                    99:ac:ff:68:16:bd:02:4a:1c:c6:76:f0:d2:56:1c:
                    54:3f:66:d8:c8:8b:dd:52:e7:56:d1:a9:75:e3:ac:
                    ee:fb:e1:70:0c:37:4b:79:4e:33:10:15:dc:ba:9f:
                    25:cc:09:99:cf:a1:dd:49:12:f3:26:bb:1b:24:21:
                    d8:71:d3:8b:9b:5b:7a:f8:5b:35:bf:1c:82:a0:79:
                    e1:57:74:0d:28:f8:64:cf:fc:5a:89:07:21:bb:a8:
                    ff:4c:8f:27:15:22:c3:df:c9:be:02:03:d8:54:78:
                    47:89:05:3b:03:82:59:2d:bc:a5:6d:99:56:54:c9:
                    ab:65:b9:9e:1c:db:8d:93:a9:36:e7:f0:43:8a:37:
                    52:3c:59:18:1f:44:e2:c4:d8:f9:a8:7d:ab:7e:4e:
                    fd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:14:9F:6C:B3:A3:90:FA:71:79:55:37:A1:1B:6F:21:D5:AC:D2:91
            X509v3 Authority Key Identifier:
                keyid:66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/6BBEB632135F11F18A7710FA2D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:eb:f3:87:70:fa:3a:37:23:36:43:02:51:b8:79:20:a9:36:
         da:4a:10:99:b2:70:6a:c7:3a:bf:0b:9c:99:e5:49:ac:5c:e5:
         1b:a3:4f:1b:3e:a5:10:53:ac:88:59:63:f4:50:77:01:63:2a:
         d5:43:13:95:d2:2a:d7:c4:30:36:2c:3f:81:ff:2b:f3:0f:61:
         7f:fe:f8:13:16:c2:03:f4:51:09:06:ae:7c:42:ae:16:ce:5e:
         32:76:aa:8e:30:30:10:09:d2:fe:3f:28:d4:ba:26:25:5a:fd:
         a9:e6:30:2e:ec:36:d7:28:97:c3:e5:94:e5:9c:a5:c9:3b:ae:
         81:0c:48:22:28:8f:27:e9:2c:23:ec:e3:05:58:03:39:a4:83:
         cb:93:67:d4:a0:e7:9d:6f:9e:c3:62:9d:f9:75:41:71:ab:c2:
         ce:77:db:02:e6:5c:39:6a:73:58:c8:55:f7:b1:cc:13:6c:90:
         fb:76:4f:be:2e:51:a5:36:aa:0c:10:8d:a3:47:f0:1a:f4:47:
         68:64:ca:d6:47:00:35:ea:e3:06:d4:e7:02:68:cf:30:64:c5:
         e1:30:86:4d:1b:62:23:aa:79:0f:a9:e0:95:97:15:5d:70:a9:
         6a:a1:73:a1:5e:21:04:fc:c5:30:9b:42:eb:e1:80:ce:7e:52:
         ba:c9:52:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:34:58 2026 by rpki-client