Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/9E3540C2C41311F0ADD84872C4F9AE02.roa
File:                     9E3540C2C41311F0ADD84872C4F9AE02.roa (raw, json)
Hash identifier:          vQepzkk73AzAWKaVyYAoNTks+drGAlLOyvGfb2bqOfY=
Subject key identifier:   17:85:5E:6B:0D:B3:56:FC:92:81:8A:55:CD:A7:94:20:00:FB:4E:95
Certificate issuer:       /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial:       35B2
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/9E3540C2C41311F0ADD84872C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:40:46 +0000
ROA not before:           Tue 18 Nov 2025 00:14:59 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     1237
IP address blocks:        134.75.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13746 (0x35b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
        Validity
            Not Before: Nov 18 00:14:59 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4882e-bf09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6b:b7:f4:74:d7:97:75:b9:65:cc:1d:aa:83:
                    74:5d:28:02:55:3e:2d:8f:f8:49:b1:71:74:8a:46:
                    06:1b:2b:bd:3f:18:3b:1d:d3:e7:e9:64:9d:da:1d:
                    8b:15:83:bd:b0:44:bd:4d:2e:22:a3:de:25:9c:67:
                    65:d3:0a:ae:a8:72:27:c3:b6:61:7d:0b:46:9a:3a:
                    37:d3:3f:06:d3:8a:a3:4c:e6:7f:17:07:ec:0b:db:
                    d1:df:84:ae:79:08:9a:d3:d3:58:24:b7:2c:c7:9d:
                    4c:6a:d5:bd:88:c1:d7:7b:e0:5a:34:13:08:8c:a3:
                    2c:5f:81:2f:77:0e:c2:c8:f0:71:28:f9:46:52:d6:
                    74:d5:b4:4c:66:9c:4b:c2:b0:4e:99:55:b4:f9:ca:
                    1c:81:b2:b3:0c:c0:34:22:39:2d:22:d5:0a:d3:bd:
                    36:72:f9:8f:f7:22:a8:d4:12:a6:65:78:9d:24:a9:
                    14:a6:f2:e2:cd:33:c6:0b:fc:6c:af:19:95:34:a5:
                    39:b0:be:ad:d9:65:7d:35:d5:a1:43:03:8c:d6:af:
                    a4:86:73:fa:4a:e3:92:d2:66:eb:f7:33:78:6d:2b:
                    63:83:72:17:b9:cf:b3:58:d5:94:d4:e0:32:69:30:
                    68:f8:ae:59:a5:54:5e:ea:bb:69:8e:80:7c:bf:28:
                    34:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:85:5E:6B:0D:B3:56:FC:92:81:8A:55:CD:A7:94:20:00:FB:4E:95
            X509v3 Authority Key Identifier:
                keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/9E3540C2C41311F0ADD84872C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ef:ea:25:71:a3:96:fc:cc:ae:56:e7:02:14:eb:0e:31:51:72:
         d0:90:b7:ce:53:fd:77:5b:b8:ac:2c:06:87:87:c4:60:df:86:
         16:c6:6e:a6:c5:91:f6:ce:fb:8b:f4:8a:5c:19:8b:0c:4a:86:
         d8:16:82:11:8b:6f:fa:d9:4c:8c:4f:f0:2d:bb:cb:70:71:ce:
         f5:54:86:60:79:b2:fc:f9:b6:dd:0a:1f:91:19:7f:18:74:0c:
         9c:71:58:55:24:45:a7:1c:6f:91:92:11:f6:5b:9b:3f:07:c8:
         5b:cb:f5:c7:ac:3d:37:ea:96:ac:00:63:bd:66:dc:6a:56:6f:
         85:6c:72:4c:d0:33:2c:bf:d1:e4:b5:7a:b9:5d:8e:cc:27:95:
         e3:37:23:1a:a3:69:c2:5c:aa:b6:d4:00:04:36:de:9d:bb:66:
         73:c2:ec:a3:95:7a:3a:da:fe:60:19:7a:6b:c8:5d:3a:3a:aa:
         16:ee:b2:f3:44:73:86:30:7b:df:71:9e:65:8d:e8:ee:44:28:
         43:9a:a7:8d:1e:16:b3:6d:2b:e4:21:a4:5a:1a:8f:85:0c:0b:
         9d:de:e1:b1:0e:6d:f8:7b:22:4f:d9:8c:56:36:f5:c6:fa:e8:
         c1:6f:88:7d:37:ce:45:e9:95:95:74:b2:4a:81:22:23:4b:48:
         e7:7c:21:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:37 2026 by rpki-client