Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1B76F89E00A711F199FCBD49676F56BC.roa
File:                     1B76F89E00A711F199FCBD49676F56BC.roa (raw, json)
Hash identifier:          uGSWWpqcpLyd4ipuBgGozcQG0wK3hZ5M1bGcPALZ+w4=
Subject key identifier:   13:7F:E4:40:3F:09:DD:87:EA:1A:D9:20:67:EC:0E:FA:8C:1B:3C:37
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3C39
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1B76F89E00A711F199FCBD49676F56BC.roa
Signing time:             Sun 01 Mar 2026 21:26:54 +0000
ROA not before:           Tue 03 Feb 2026 02:21:54 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     5065
IP address blocks:        112.196.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15417 (0x3c39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Feb  3 02:21:54 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4af1d-1947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d8:92:fb:09:9b:9b:ac:a7:ea:ba:b3:4f:1b:
                    e6:c8:8d:2c:c4:22:3f:72:a1:93:ad:13:18:5c:0a:
                    5b:93:75:12:91:f0:4e:04:07:f0:c1:ed:1c:19:79:
                    a3:1f:da:c1:4d:9d:b2:61:b4:4b:e9:8e:57:b1:e4:
                    a2:c7:dd:26:9e:c4:b7:39:ae:bb:54:73:5d:07:b2:
                    97:33:f8:7f:b8:41:be:56:6c:92:49:a6:aa:96:88:
                    1f:86:96:3c:59:6a:16:21:ad:61:af:d7:8f:39:8f:
                    14:b8:6d:03:fa:7b:32:98:bc:48:a2:e6:4b:1c:b7:
                    da:f8:a9:b2:c3:aa:f5:01:a3:11:62:ba:3a:0f:4e:
                    70:c9:af:61:93:9f:b5:35:87:1a:50:cd:f1:69:69:
                    6d:bc:66:75:e0:21:6e:65:9b:7c:71:30:2c:4b:8d:
                    84:3d:07:6f:88:1a:86:5b:e7:50:52:83:66:bd:51:
                    32:f6:43:ec:f7:8d:ec:8b:40:76:b2:1a:47:e3:52:
                    82:5d:d8:fe:6a:34:75:8a:40:08:b6:66:fa:02:c6:
                    87:2d:8b:c1:53:af:1d:1a:8d:16:61:a0:75:b1:66:
                    bb:62:d6:eb:0b:e4:a5:2d:80:1a:18:1d:47:e0:58:
                    8c:49:93:40:06:94:f0:55:08:9e:c8:a7:87:99:6c:
                    eb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7F:E4:40:3F:09:DD:87:EA:1A:D9:20:67:EC:0E:FA:8C:1B:3C:37
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1B76F89E00A711F199FCBD49676F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.196.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:1e:26:aa:bc:02:c5:45:df:72:49:78:cb:fb:ce:82:b9:48:
         9d:91:3c:4e:44:84:ef:49:ad:3e:b8:b5:18:74:7b:bc:c9:50:
         3f:2b:ae:4b:b9:ab:ea:aa:de:2c:3d:f2:f9:1e:b2:5e:3b:eb:
         1e:06:0a:3b:08:62:d2:94:a2:c7:54:d6:b9:b7:b7:93:80:f2:
         49:9d:77:cf:cd:9b:a4:cf:30:a1:95:35:55:25:39:57:30:8c:
         4e:15:2e:bd:80:5b:7b:e2:e8:0d:60:d4:1d:ce:0f:b1:ba:3b:
         5e:65:75:bf:f8:5e:03:5d:1e:8d:46:b6:b6:bc:ba:0e:a7:27:
         1d:19:63:50:b3:eb:f0:0a:30:df:c8:2a:c9:c3:2e:16:c3:aa:
         9b:84:74:07:5a:d7:7e:6a:2e:05:70:5b:ad:40:4c:2e:25:39:
         84:98:53:54:44:a0:2a:76:f8:ae:27:30:97:f5:f2:99:47:cd:
         55:cb:1d:10:ad:c2:c4:e9:37:68:93:fb:bd:31:e1:cb:fa:5e:
         11:e2:e1:bd:1a:34:6f:2b:b5:05:a2:e4:2e:f1:2d:59:1c:47:
         a0:3f:d5:6b:0f:ab:db:eb:15:73:6f:c4:bf:dd:6f:20:d5:e4:
         51:10:bf:d9:15:d6:85:f7:65:1e:1d:7e:e8:8e:c6:97:ad:45:
         cc:c8:a8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:24:38 2026 by rpki-client