Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/B77C6462487411F1984AD6F3A8833773.roa
File:                     B77C6462487411F1984AD6F3A8833773.roa (raw, json)
Hash identifier:          RddRSM+tZhwgqkgFCGkOz9Gfn0He2cvwXMCg9NReMjo=
Subject key identifier:   D2:F7:82:FB:C1:FF:67:BE:2A:F3:A0:B0:71:4D:CB:A6:B4:D4:10:B0
Certificate issuer:       /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial:       2383
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/B77C6462487411F1984AD6F3A8833773.roa
Signing time:             Thu 04 Jun 2026 16:19:00 +0000
ROA not before:           Thu 04 Jun 2026 16:19:00 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137425
IP address blocks:        59.153.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
                          rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 12:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9091 (0x2383)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
        Validity
            Not Before: Jun  4 16:19:00 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21a574-1bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:eb:f0:b6:b4:d3:4a:fc:77:8c:40:35:cb:83:
                    c9:9f:67:79:ba:25:6f:4b:a4:a3:8b:88:e0:80:5f:
                    2d:dd:01:0a:41:a1:c8:a4:c2:02:56:a8:66:04:14:
                    d1:0c:9a:ff:3a:28:03:d1:a9:6c:b8:c4:aa:06:d2:
                    06:6f:50:aa:06:f0:7e:a8:fe:4d:eb:29:e7:01:cf:
                    73:b9:7b:c3:3f:c9:1e:f7:6e:0b:49:f6:69:cf:67:
                    15:8d:f5:e9:4b:19:a8:80:48:5f:90:b8:21:1b:02:
                    79:cc:7a:b9:f6:b9:00:dd:74:90:c3:e3:e8:d0:30:
                    46:4b:fb:b7:24:5b:6a:dd:df:e9:5b:60:e9:60:75:
                    82:d0:d8:08:df:c6:9f:d8:8e:16:87:f8:16:22:d3:
                    b4:7b:04:c4:52:ac:37:08:a3:01:8a:84:c4:a1:e3:
                    f9:50:01:58:d1:b7:5e:a1:ab:7f:94:d3:85:ed:34:
                    5c:80:fb:e5:7f:11:39:f3:cb:2d:78:14:f4:b6:a3:
                    92:90:ad:74:8a:be:65:37:7f:4a:b6:08:3c:99:a4:
                    c8:d9:8f:76:1b:90:79:e6:08:02:95:dd:ee:21:53:
                    0c:03:35:92:76:d9:84:f3:6d:18:6b:f2:26:f3:f4:
                    dd:57:6a:03:25:f6:9d:c3:1f:16:d3:1c:dc:44:17:
                    19:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F7:82:FB:C1:FF:67:BE:2A:F3:A0:B0:71:4D:CB:A6:B4:D4:10:B0
            X509v3 Authority Key Identifier:
                keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/B77C6462487411F1984AD6F3A8833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:ba:12:94:9f:d4:75:01:64:17:10:38:70:af:30:db:dd:11:
         37:89:c7:af:99:1b:8b:be:b0:9c:15:f7:b2:bc:c0:e5:1f:18:
         dd:04:52:c7:17:1b:3a:c4:29:af:7d:af:2c:91:db:56:1d:29:
         75:72:14:16:ad:54:8f:2c:24:cb:8a:a7:5d:55:f7:0f:d6:7c:
         3e:10:9e:19:ed:50:a1:3a:a0:b0:a3:26:1c:e8:80:ff:e3:ef:
         db:53:69:c9:aa:f2:66:f4:61:3d:98:19:70:e1:2f:9f:61:05:
         7e:de:a1:6c:7b:ea:61:c9:73:e3:e2:cc:db:f0:59:bf:5d:c4:
         0c:c9:cc:33:fd:45:75:e6:2b:cd:c9:ee:f0:10:23:f4:6c:8f:
         b4:0b:dc:fa:51:dc:2a:ab:4b:d8:20:0a:05:cb:fc:d2:c7:cd:
         95:af:4b:ad:52:23:dc:56:03:ce:ff:ea:14:fa:20:aa:fe:f7:
         ff:8b:82:b6:68:c1:dd:b6:16:db:63:64:77:24:3c:cb:26:ae:
         36:ce:0a:1b:13:44:37:a8:cd:83:ac:8f:2d:76:a2:80:c6:08:
         90:39:8c:0a:6c:20:e3:0d:b6:9c:0b:ed:31:9f:86:68:ce:e8:
         90:33:7c:eb:cd:a4:9b:82:43:32:b2:ea:cd:2a:cb:55:7f:84:
         cc:71:38:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:01:39 2026 by rpki-client