Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/1760C2F0DE0F11EFBC253748C4F9AE02.roa
File:                     1760C2F0DE0F11EFBC253748C4F9AE02.roa (raw, json)
Hash identifier:          uQMa0Zw9eRpMdwrco7LAgAmTH9PaQbmYxKvMpopPRSg=
Subject key identifier:   F1:DC:97:13:E8:6E:F9:18:CC:4A:79:AA:1B:57:1A:37:53:9B:28:AC
Certificate issuer:       /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial:       1919
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/1760C2F0DE0F11EFBC253748C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:27:03 +0000
ROA not before:           Tue 10 Feb 2026 17:14:10 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     134489
IP address blocks:        122.129.86.0/24 maxlen: 24
                          122.129.88.0/24 maxlen: 24
                          203.128.2.0/24 maxlen: 24
                          203.128.10.0/24 maxlen: 24
                          203.128.20.0/24 maxlen: 24
                          203.128.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
                          rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6425 (0x1919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
        Validity
            Not Before: Feb 10 17:14:10 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a476e7-7441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:12:f7:ef:0b:bf:b4:31:9c:96:4b:e2:b4:08:
                    ae:75:45:e7:10:d8:ae:fb:d5:20:7b:2e:8b:48:f1:
                    bc:bd:99:66:ba:54:21:79:57:03:33:44:d7:af:6e:
                    f6:50:34:20:0c:e4:34:9c:74:82:2f:12:03:5b:4b:
                    02:9a:33:6f:5d:a1:e7:6b:e5:ca:b9:15:32:24:f5:
                    00:50:67:65:88:78:c9:4e:9a:13:c3:47:26:ee:cf:
                    6f:c7:14:46:4b:2e:13:7c:63:2f:f9:91:39:42:9f:
                    a1:8b:f3:80:43:7b:0f:ba:ce:29:7d:5f:b2:2b:de:
                    2c:a2:d4:d4:f7:d0:6d:59:f7:97:f2:6e:b3:82:f3:
                    90:15:07:70:04:fb:e4:8d:98:28:06:47:04:ac:15:
                    5e:b8:77:3a:c1:1d:d8:c1:54:16:d1:e7:ef:a0:7b:
                    ba:c2:0b:d4:57:a2:e6:5c:4d:31:35:b1:3f:49:f2:
                    64:3b:52:51:5e:05:60:a8:e8:ae:65:f4:af:46:e7:
                    fd:f9:d6:a3:0b:58:8d:82:89:ac:86:72:59:41:fa:
                    fa:98:df:28:df:83:9f:3b:02:15:06:1b:30:81:e4:
                    10:ed:cf:7b:fc:ca:1e:0c:3a:eb:09:ee:64:39:4f:
                    ab:63:b5:d5:b1:4d:e4:3e:1f:3e:ed:3e:2c:8d:3a:
                    1b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DC:97:13:E8:6E:F9:18:CC:4A:79:AA:1B:57:1A:37:53:9B:28:AC
            X509v3 Authority Key Identifier:
                keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/1760C2F0DE0F11EFBC253748C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.129.86.0/24
                  122.129.88.0/24
                  203.128.2.0/24
                  203.128.10.0/24
                  203.128.20.0/24
                  203.128.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:77:27:21:79:70:97:9d:75:92:98:f3:80:ea:63:0f:a8:f8:
         8e:fc:5f:82:4f:10:25:87:f1:d2:e5:bb:0a:0f:c5:da:e7:09:
         e2:6e:1b:6e:a9:78:cd:5b:11:d6:2e:01:12:c8:e9:6e:4c:71:
         bb:e9:a3:58:d5:25:5d:c7:17:6f:35:90:04:a4:6c:86:4d:4d:
         e2:32:ab:4c:a4:d6:da:e9:98:7d:71:e9:c6:ad:76:54:25:8a:
         35:eb:73:7c:55:74:79:b0:61:54:46:10:6e:9a:71:f5:a8:46:
         94:91:8f:28:df:a9:4c:76:fd:0b:59:e7:bd:51:ee:bf:6b:fa:
         c5:a4:f2:ea:24:2c:e3:c9:93:2a:1f:75:91:43:43:d2:a2:60:
         d6:76:a4:4c:7a:98:d1:4e:c1:fc:0f:ad:7f:8e:1c:ac:3d:b8:
         92:dc:15:b6:9a:69:d4:d6:cd:b7:0e:ec:b5:49:54:5d:ba:7b:
         bf:fd:5a:a1:18:96:cd:4c:91:86:78:75:8f:c6:46:f2:ce:91:
         02:9a:e8:08:15:79:82:e5:ee:82:48:d3:07:d7:66:cd:bc:3e:
         40:d2:1b:04:78:48:53:e4:f5:8f:68:91:3c:1b:f1:2b:75:92:
         2e:87:a7:55:d3:fc:96:1c:f7:e9:78:e7:ca:7d:87:63:8a:e4:
         33:65:80:4d
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgICGRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC
MEZCOTQ1QkUwHhcNMjYwMjEwMTcxNDEwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzZlNy03NDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7hL37wu/tDGclkvitAiudUXnENiu+9Ugey6LSPG8vZlmulQheVcDM0TXr272
UDQgDOQ0nHSCLxIDW0sCmjNvXaHna+XKuRUyJPUAUGdliHjJTpoTw0cm7s9vxxRG
Sy4TfGMv+ZE5Qp+hi/OAQ3sPus4pfV+yK94sotTU99BtWfeX8m6zgvOQFQdwBPvk
jZgoBkcErBVeuHc6wR3YwVQW0efvoHu6wgvUV6LmXE0xNbE/SfJkO1JRXgVgqOiu
ZfSvRuf9+dajC1iNgomshnJZQfr6mN8o34OfOwIVBhswgeQQ7c97/MoeDDrrCe5k
OU+rY7XVsU3kPh8+7T4sjTobwQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFPHclxPo
bvkYzEp5qhtXGjdTmyisMB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5
RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS
YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzlCNDkvMDc4MEI5OTBDOUY4MTFFNzlFRjEyMDA5QzRGOUFFMDIvMTc2MEMyRjBE
RTBGMTFFRkJDMjUzNzQ4QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq
BAIAATAkAwQAeoFWAwQAeoFYAwQAy4ACAwQAy4AKAwQAy4AUAwQAy4AYMA0GCSqG
SIb3DQEBCwUAA4IBAQAYdycheXCXnXWSmPOA6mMPqPiO/F+CTxAlh/HS5bsKD8Xa
5wnibhtuqXjNWxHWLgESyOluTHG76aNY1SVdxxdvNZAEpGyGTU3iMqtMpNba6Zh9
cenGrXZUJYo163N8VXR5sGFURhBumnH1qEaUkY8o36lMdv0LWee9Ue6/a/rFpPLq
JCzjyZMqH3WRQ0PSomDWdqRMepjRTsH8D61/jhysPbiS3BW2mmnU1s23Duy1SVRd
unu//VqhGJbNTJGGeHWPxkbyzpECmugIFXmC5e6CSNMH12bNvD5A0hsEeEhT5PWP
aJE8G/ErdZIuh6dV0/yWHPfpeOfKfYdjiuQzZYBN
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:00 2026 by rpki-client