Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/11763FC8648D11F0950AB94BC4F9AE02.roa
File:                     11763FC8648D11F0950AB94BC4F9AE02.roa (raw, json)
Hash identifier:          0dP1OIbJ9ltHMxlXRrdizYENWvjK08rixOVOC5IipOk=
Subject key identifier:   02:81:35:69:F7:B7:DC:B9:01:91:96:30:0A:A0:49:61:B5:E1:21:10
Certificate issuer:       /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Certificate serial:       0129
Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/11763FC8648D11F0950AB94BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:12:40 +0000
ROA not before:           Mon 25 Aug 2025 06:13:47 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136461
IP address blocks:        2401:b6a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
                          rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
        Validity
            Not Before: Aug 25 06:13:47 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a58cc8-75d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:13:1a:b2:fb:13:e3:af:1a:0c:54:02:70:5f:
                    b2:e4:66:1f:06:4c:78:74:71:d1:28:e0:cd:44:e8:
                    c8:eb:e5:5a:fc:37:e5:c1:fb:c5:d9:47:b7:39:ea:
                    4c:36:bd:5c:55:0e:7b:17:cc:23:83:b8:3a:f9:41:
                    4a:a5:77:0e:d6:78:47:7f:a8:f9:78:7d:e1:3d:f5:
                    0a:38:9d:4a:86:a8:e5:20:1a:1b:ba:d2:d5:b7:f0:
                    ae:74:28:a7:bd:46:32:f0:ad:68:71:ec:21:74:b0:
                    c9:d3:c4:a6:c0:45:d6:1b:05:d6:dd:48:4f:c8:b6:
                    48:fa:a1:d2:2c:93:b2:f3:16:47:2a:c1:b9:ed:80:
                    a8:97:f2:56:07:18:c8:06:76:20:ed:fd:c9:be:40:
                    15:29:3c:73:d0:b3:9e:78:ca:e1:9a:09:42:58:4a:
                    6e:fe:95:75:4e:3a:27:9b:ae:f0:11:e8:5f:50:40:
                    1b:76:c5:03:78:39:c9:db:7d:4b:df:5b:5a:59:26:
                    16:e8:4b:53:4c:f4:2b:34:64:93:87:ed:ae:7d:37:
                    c2:d8:3a:1b:8c:05:b0:04:67:6f:e9:d0:2f:31:d3:
                    ac:ef:63:0a:29:ce:be:20:e7:ee:93:b2:43:f6:75:
                    de:78:c5:0e:f2:d7:91:87:89:fc:24:d1:86:ee:f8:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:81:35:69:F7:B7:DC:B9:01:91:96:30:0A:A0:49:61:B5:E1:21:10
            X509v3 Authority Key Identifier:
                keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/11763FC8648D11F0950AB94BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:00:28:f2:82:a3:6e:60:9e:f8:2b:67:77:10:a0:66:0b:88:
         5e:5d:7a:63:c1:84:95:69:72:88:9d:89:85:53:df:df:57:53:
         dc:2b:39:45:4e:2e:49:9b:b1:b5:2a:f3:10:da:e9:e3:83:b8:
         8e:0f:c5:42:24:01:2d:a1:50:8a:90:71:77:86:79:30:5c:d3:
         d1:0d:50:f3:a9:c9:e6:6a:67:b5:c8:55:1e:de:70:da:00:d0:
         3d:d5:e9:1b:0b:dc:46:a1:00:ac:81:f8:c8:9f:a5:04:f7:5b:
         ec:e4:cb:86:4a:04:92:52:44:ea:9b:7b:cd:ed:5a:01:ab:ce:
         b8:c9:c0:46:3d:db:bc:c0:84:cc:90:98:f9:a3:aa:b4:13:a9:
         57:1a:1b:20:44:d2:af:16:20:4e:a3:3d:40:2f:60:ad:e4:f8:
         5f:05:a8:67:45:65:32:32:10:99:8b:33:6d:fb:bb:32:43:79:
         9f:08:f1:20:fb:ff:e9:6c:58:d0:cf:b8:55:91:5a:8b:85:c0:
         df:82:6e:82:31:2d:88:87:3a:f4:90:3a:44:82:af:8c:24:71:
         51:96:be:be:cd:8f:eb:88:15:fc:1f:33:16:0e:19:73:f8:1a:
         93:50:88:dc:45:ad:e6:77:9c:ac:81:98:3e:f4:ee:bd:e0:b5:
         74:2f:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:53 2026 by rpki-client