Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/65A65112AFAD11F085B80A52C4F9AE02.roa
File:                     65A65112AFAD11F085B80A52C4F9AE02.roa (raw, json)
Hash identifier:          Dk/jkCNyuYsflCoUNNAlTuoVthwHo6iYKb+48WPpN0E=
Subject key identifier:   09:48:9C:16:48:3A:89:11:22:0E:29:9E:D9:09:42:81:44:06:AD:58
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3C2C
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/65A65112AFAD11F085B80A52C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:26:42 +0000
ROA not before:           Thu 23 Oct 2025 01:12:52 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     131646
IP address blocks:        49.128.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15404 (0x3c2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Oct 23 01:12:52 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4af12-34fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:e4:01:be:cc:87:5f:50:8a:b8:f0:1f:17:
                    66:6c:04:92:17:a3:60:ce:cc:6d:d0:b6:37:33:9f:
                    f6:2f:1a:eb:4a:11:da:c5:31:5f:30:2c:d9:b8:2b:
                    77:b6:85:e2:63:f7:5a:46:26:84:23:7f:b9:e8:e7:
                    03:fd:1b:b0:eb:f8:71:18:77:56:ef:94:8a:18:f4:
                    a0:ee:4d:e0:d6:ba:b1:c9:13:f4:c0:e1:23:91:47:
                    11:25:5b:fd:c0:99:04:78:ce:f4:e4:d8:80:4a:6b:
                    5c:45:3d:fc:49:d3:a1:c6:c2:63:e1:3f:cc:e3:85:
                    41:4a:f8:b8:04:9f:cb:5b:04:b1:41:e4:a1:8e:ab:
                    7d:40:eb:3f:4b:8b:58:cb:44:4f:1d:15:cc:10:b5:
                    6c:24:7a:39:48:fc:08:1d:e5:5a:bd:86:8a:7b:7e:
                    3c:4c:c4:5a:85:01:23:3b:f0:8e:27:32:dc:01:9d:
                    54:15:fb:88:16:93:1d:98:f6:ed:88:b5:cf:9a:50:
                    c1:76:9f:f8:82:fe:29:b9:60:c0:a4:01:46:05:fc:
                    04:81:7c:4f:88:35:7f:08:cf:78:5f:af:fc:f2:32:
                    0e:f1:96:1b:1e:b0:30:0a:64:1d:bd:7a:46:c3:6b:
                    df:b1:43:08:a7:ed:79:8e:85:f7:1d:f6:90:f8:3e:
                    6a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:48:9C:16:48:3A:89:11:22:0E:29:9E:D9:09:42:81:44:06:AD:58
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/65A65112AFAD11F085B80A52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:a4:d2:5a:80:7b:28:61:8d:e9:56:c0:55:74:f2:eb:65:56:
         48:e1:f6:af:18:1e:2f:be:15:12:b5:2b:20:92:4d:4b:aa:69:
         c4:11:55:b1:be:58:52:1e:5a:b3:b5:cf:6a:d1:d9:df:23:55:
         9f:fd:7c:3e:af:8e:9e:3c:fd:e5:5f:fa:27:b2:7d:9d:11:af:
         d6:ee:73:38:1e:0a:9a:f5:88:ef:e9:ac:dc:25:26:b2:ce:b0:
         11:f2:28:11:67:ec:e9:4d:9e:30:92:ff:02:3c:b9:41:b9:11:
         b7:0b:af:d9:07:23:ec:70:4c:07:3e:b5:19:90:f6:65:6b:d3:
         d1:41:4f:b6:e2:b6:c2:49:70:42:d9:a2:07:d3:9f:22:24:0d:
         89:cf:c9:1d:0e:75:08:10:66:3a:72:f0:34:b6:52:12:03:a2:
         6f:eb:e1:4b:4b:3d:7e:ac:be:ac:12:75:4d:41:a4:e3:de:90:
         1a:06:f1:7d:ba:62:3e:54:d9:41:1c:5a:3c:88:79:a1:6c:ee:
         b1:61:ae:2e:84:9c:b2:35:28:04:10:c8:dc:89:e3:cb:ae:98:
         30:6b:0d:88:46:4f:94:51:75:a9:b7:ac:62:c6:ba:7a:6e:4c:
         7a:84:a4:99:fe:28:12:e9:69:ad:ee:a4:c7:21:b0:7e:4d:89:
         6b:e0:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:09 2026 by rpki-client