Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/9D8E6D02C2A511EBB2025B36C4F9AE02.roa
File:                     9D8E6D02C2A511EBB2025B36C4F9AE02.roa (raw, json)
Hash identifier:          2n0dDla6doG2CNQyCdUDf+KsAa0bSuHrt5aSZVG5EPs=
Subject key identifier:   51:2D:A1:47:36:3F:0D:20:37:87:81:A2:AF:80:57:B0:1D:88:86:06
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3C16
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/9D8E6D02C2A511EBB2025B36C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:26:24 +0000
ROA not before:           Fri 04 Jul 2025 14:50:33 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     17860
IP address blocks:        139.5.226.0/24 maxlen: 24
                          139.5.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15382 (0x3c16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Jul  4 14:50:33 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4af00-57a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:26:6d:4b:80:cf:19:bb:aa:b7:81:12:91:ab:
                    dc:1e:05:b8:b3:e8:58:79:0f:65:b4:82:b6:17:49:
                    28:3c:94:55:61:98:98:69:39:d6:b9:63:50:90:1d:
                    5b:34:19:2a:4f:b7:34:a3:f1:a1:30:ec:85:da:83:
                    91:98:9b:b6:0a:f7:b9:fe:db:f9:61:47:72:bc:49:
                    3b:29:fb:a4:ca:8c:c9:9f:30:d8:79:a8:0e:c7:d1:
                    20:f2:67:2a:12:fe:2e:79:f9:8c:43:db:5b:66:61:
                    62:db:eb:2b:b9:bc:18:f6:5f:45:41:92:1d:3f:ec:
                    dd:c9:08:65:52:4c:3b:0a:c3:8e:a7:10:b0:a6:ee:
                    c2:e9:74:d1:7e:72:e4:a6:d3:b3:5b:75:cc:c2:cd:
                    60:bc:bd:e3:cb:8d:71:40:ab:12:87:9f:1a:bc:e1:
                    76:5b:ff:e6:c0:13:f3:54:4a:f4:89:eb:cb:9f:24:
                    8b:ab:2a:38:90:c1:32:63:47:98:c1:9a:00:1b:5d:
                    6e:e5:e8:23:f2:47:a4:3e:da:0d:af:ca:7d:89:60:
                    17:55:c2:eb:83:2f:24:32:5c:fe:a4:72:c3:1f:0a:
                    b6:ff:a9:70:92:d5:d8:6f:77:6b:59:bd:a0:af:12:
                    49:4d:c6:f7:7b:79:cc:61:a6:8e:aa:d4:95:79:55:
                    bb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2D:A1:47:36:3F:0D:20:37:87:81:A2:AF:80:57:B0:1D:88:86:06
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/9D8E6D02C2A511EBB2025B36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.5.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e5:64:69:b1:25:9d:22:53:33:31:b2:79:6a:d7:79:22:69:35:
         e8:85:11:0f:56:0d:60:06:a5:ba:d4:e8:1f:04:8a:f2:c5:4d:
         c2:1e:5b:3e:14:23:fd:2c:77:58:1e:e5:e7:22:9f:bb:38:45:
         f7:5e:be:ae:da:81:f7:00:7a:f2:06:e0:4d:75:4b:9b:4d:a7:
         5e:1f:96:8f:db:86:95:3a:41:c9:a9:85:15:e5:28:73:84:88:
         8f:d7:f4:19:31:db:7c:50:26:70:bc:71:4c:7a:54:0a:16:f6:
         02:3b:cf:b4:e4:b7:ac:be:b7:2c:96:e0:31:81:17:81:2c:db:
         0e:d0:c4:ef:50:b9:99:28:5b:db:55:4b:19:51:c0:09:e4:7f:
         7c:e8:26:b7:01:77:77:ee:05:11:9f:06:d7:f7:ab:c7:33:d0:
         76:3f:62:b0:df:5a:c1:f3:2d:49:15:4b:12:41:e3:3a:6b:40:
         85:4c:86:6e:45:9f:6d:f3:38:b0:5a:af:6d:2e:43:fb:a3:a1:
         10:ac:d2:dc:37:a7:86:61:cd:bc:bb:64:7a:53:40:d0:bc:91:
         f6:d4:99:2e:ba:a6:99:fa:0d:93:41:d2:c6:a7:5a:42:64:d1:
         77:22:ae:ea:d3:b2:da:16:c0:45:ee:d1:61:30:3d:14:1c:91:
         4b:42:bc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:26 2026 by rpki-client