Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/13CC532280EC11F0A973810CC4F9AE02.roa
File:                     13CC532280EC11F0A973810CC4F9AE02.roa (raw, json)
Hash identifier:          Vx9bjwI4dHIiRJ2+GamwQlhazgaJYjGaTfAlSelDl0M=
Subject key identifier:   13:DB:7E:71:03:A7:09:7D:72:8C:DF:D1:1B:D5:0A:44:01:77:2A:43
Certificate issuer:       /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial:       93
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/13CC532280EC11F0A973810CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:09:36 +0000
ROA not before:           Sun 24 Aug 2025 13:13:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153879
IP address blocks:        165.99.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
                          rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:50:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
        Validity
            Not Before: Aug 24 13:13:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3f440-f55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:9c:8d:1a:e7:b6:16:a9:21:03:60:1c:18:
                    da:47:49:e3:ef:d9:ae:91:d4:31:01:68:10:de:e8:
                    53:e5:93:1a:e8:a5:1f:40:16:b9:59:26:eb:4b:ea:
                    48:19:7e:01:c1:56:08:92:83:6e:14:93:a5:a9:bb:
                    26:a5:68:99:c6:52:68:eb:2b:3a:f5:87:ea:8c:50:
                    5d:16:a5:21:15:6f:c4:a9:98:f1:2c:d5:c4:bf:b8:
                    42:53:c5:42:06:80:a3:9f:ce:82:a9:e5:30:a3:97:
                    a8:63:30:17:5f:1e:2c:b2:fb:b6:2b:bf:62:76:a8:
                    74:91:78:a2:b3:cd:46:52:76:d5:66:ba:e8:8d:8d:
                    1a:7b:63:88:89:4b:7f:3d:7c:f0:3c:e1:52:e4:21:
                    72:be:d6:02:1b:e1:25:1a:30:fd:60:7c:60:26:eb:
                    e0:13:90:18:39:01:bd:8d:b7:e0:91:71:f6:8c:22:
                    34:83:3b:2c:29:fe:ef:d0:5c:4e:e6:e4:41:ab:21:
                    f4:37:41:cc:f2:a8:88:86:75:8a:26:8f:ac:7e:8d:
                    09:10:01:6e:bf:e6:22:84:15:7e:9f:29:8e:3e:72:
                    db:aa:32:db:08:e0:1e:43:bb:9c:4c:fd:c0:d7:39:
                    c0:82:ab:b1:5b:d4:95:b2:47:f9:c1:5e:92:ad:fa:
                    01:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DB:7E:71:03:A7:09:7D:72:8C:DF:D1:1B:D5:0A:44:01:77:2A:43
            X509v3 Authority Key Identifier:
                keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/13CC532280EC11F0A973810CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:e9:73:c7:53:7b:58:65:11:39:ce:d2:81:69:83:d6:06:4a:
         ce:f3:8d:b4:bc:cd:67:57:f5:1c:2f:70:b0:f7:e2:a7:bb:6c:
         78:d9:62:94:6f:92:bb:8a:fb:ac:67:15:40:28:be:86:cb:5f:
         f8:91:fd:e9:b6:69:fb:a6:64:3e:fc:26:4c:d7:e2:fe:2f:2d:
         64:6e:f7:e8:ee:b2:09:51:53:7f:af:b6:c9:35:7a:15:84:75:
         42:bc:33:e7:27:a4:27:9d:2c:6d:fd:41:7f:e8:69:d9:14:95:
         53:07:18:e5:e6:aa:b1:3f:c3:99:88:2b:c0:19:3f:7e:d8:d9:
         ff:e1:95:77:44:92:ee:f4:e3:a6:ef:03:e4:0a:7c:85:19:6e:
         2e:f0:73:b4:66:a4:22:89:c1:14:79:b8:2e:34:44:43:49:d8:
         53:19:ed:60:4f:30:cc:e4:b6:9f:0b:80:c0:79:cb:e6:c9:08:
         89:ee:6e:5e:4a:2d:c2:68:aa:5b:3a:fd:7a:af:9f:0d:ad:2f:
         b4:3b:39:3b:e3:1b:69:76:93:6c:39:de:e4:9c:f8:d2:96:fd:
         6f:0b:af:6e:14:6d:1d:77:66:7e:be:10:92:e0:12:72:0b:8d:
         77:77:ef:75:a3:b6:41:61:24:da:a9:ed:99:66:9e:99:49:34:
         64:6c:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:00 2026 by rpki-client