Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/DED757CC013811EF8A7E136EC4F9AE02.roa
File:                     DED757CC013811EF8A7E136EC4F9AE02.roa (raw, json)
Hash identifier:          TmKZTioxlMesMkEEvyPRrkxii6ZYxhGxhSFj/5ba424=
Subject key identifier:   4F:C5:D2:D4:1C:21:D1:8E:8E:43:F6:AA:E8:70:EA:95:7A:E8:AC:9D
Certificate issuer:       /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Certificate serial:       1767
Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/DED757CC013811EF8A7E136EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:42:13 +0000
ROA not before:           Mon 08 Dec 2025 16:25:31 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132716
IP address blocks:        155.137.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
                          rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5991 (0x1767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
        Validity
            Not Before: Dec  8 16:25:31 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a46c65-0e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:51:96:b9:c8:75:c7:af:05:d9:ad:c6:d3:
                    e8:f2:ac:3b:17:be:e5:06:6d:14:3c:ff:a0:84:56:
                    07:f8:a5:ab:5a:d7:b2:6a:0c:a8:13:c9:b7:d2:35:
                    ab:9e:17:69:0c:b7:a7:4d:34:f1:75:29:f4:4d:1f:
                    1f:30:df:35:f8:1e:14:1c:18:8b:ce:7d:9d:78:18:
                    95:23:cb:a9:04:5e:11:e5:4d:bf:1f:dd:f5:e4:10:
                    2d:e0:f6:65:86:05:72:d0:44:84:57:0e:17:69:66:
                    05:21:1f:ab:74:62:e5:f0:94:40:33:9a:40:99:12:
                    c5:37:54:f1:4f:70:44:f8:16:12:2a:ae:ab:6c:4c:
                    d3:d5:7c:50:c4:9b:f0:67:3e:1e:d7:02:73:ea:8e:
                    a9:4c:38:a5:11:de:a0:aa:e0:8a:9b:1a:e1:f5:60:
                    d5:5d:1a:f7:9a:b2:13:e8:d8:40:3f:fd:7b:2b:10:
                    c0:3d:17:c5:44:01:dc:1a:03:d7:4d:37:af:b9:6e:
                    b7:d8:12:b3:37:18:c2:84:9b:f8:4e:26:cd:ed:ac:
                    8d:ba:56:70:3e:2b:91:6a:1f:ca:06:ba:81:76:eb:
                    c7:8b:15:44:3e:85:ce:72:1f:06:48:3a:f7:13:ef:
                    2b:a1:50:82:ab:61:9d:24:5e:e4:0e:f3:f8:a5:b1:
                    4d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C5:D2:D4:1C:21:D1:8E:8E:43:F6:AA:E8:70:EA:95:7A:E8:AC:9D
            X509v3 Authority Key Identifier:
                keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/DED757CC013811EF8A7E136EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.137.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:5d:1d:35:a2:d1:c5:fc:89:ed:ae:d6:5c:ca:6d:09:f2:e9:
         d0:e7:89:84:23:ef:c4:c7:35:1b:82:d0:5a:b5:34:c8:2e:5b:
         68:33:ef:22:56:4e:ef:6e:7a:b1:8a:82:fa:5a:0e:e8:e4:b5:
         77:b7:1f:6c:64:f0:5f:8a:91:6a:8d:82:28:96:23:91:59:74:
         8a:8d:51:88:66:df:ad:73:4a:9e:97:ac:4b:47:b4:5d:11:2d:
         14:ef:42:61:e1:38:bb:cf:f2:53:74:28:62:ec:cb:c8:6f:46:
         4c:bc:06:41:b2:44:6d:24:af:c4:2f:38:4f:44:ec:a6:72:d0:
         27:6e:f9:bc:e6:7c:d0:54:b1:4f:f4:16:60:04:f6:09:53:0c:
         70:0f:b2:89:7e:a6:07:ac:53:96:ef:45:6d:f0:d5:d6:ab:23:
         ef:1b:e2:ec:ea:5f:77:cc:ca:21:3c:30:f1:0c:c9:5f:b5:43:
         b1:b6:c7:53:47:69:3b:4d:98:51:6c:fd:48:33:13:74:a5:df:
         28:c2:9f:ad:2b:f9:ab:d0:16:26:bd:21:35:cc:3f:d1:81:05:
         54:05:0d:78:73:a5:b8:49:44:0a:dd:1d:a2:02:41:9c:f4:60:
         2f:d5:7c:1c:f3:0e:d4:64:8c:87:4c:f2:0e:c6:32:3c:48:7c:
         f4:ec:55:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:59 2026 by rpki-client