Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/7A1D009C0EB611ECB5408277C4F9AE02.roa
File:                     7A1D009C0EB611ECB5408277C4F9AE02.roa (raw, json)
Hash identifier:          O5gqS4NNOI05UQqMR9lNiHVk+hGRQCkED61BdghCLKA=
Subject key identifier:   21:E4:17:32:87:59:03:B7:59:8A:3F:AF:25:FF:76:18:02:5D:25:3D
Certificate issuer:       /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Certificate serial:       1B35
Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/7A1D009C0EB611ECB5408277C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:13:21 +0000
ROA not before:           Sat 24 May 2025 15:43:38 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     9541
IP address blocks:        72.255.0.0/18 maxlen: 24
                          139.135.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
                          rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6965 (0x1b35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
        Validity
            Not Before: May 24 15:43:38 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42d61-f8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:a4:2a:d8:ad:5a:66:80:54:8d:47:13:c0:
                    75:16:3c:c5:ce:e6:5c:f0:55:77:9c:f9:9d:af:e4:
                    cb:17:46:43:48:52:d6:58:77:14:24:3d:32:93:09:
                    e0:2a:8b:d1:36:42:71:56:06:37:79:70:cf:d6:c6:
                    f1:75:e6:53:00:60:68:29:bc:94:8f:94:98:bc:80:
                    f0:0e:63:73:d8:d4:3e:9f:24:93:23:81:12:a2:de:
                    0a:17:36:12:a2:47:b7:c5:16:b3:72:08:ae:07:ed:
                    42:62:e8:50:1b:a4:71:7e:38:be:ed:b5:0f:71:94:
                    01:df:ae:b6:ae:07:c8:5a:fa:bd:42:cd:1d:fb:d1:
                    d2:b2:0a:45:38:57:04:14:e6:a1:f5:39:2c:b6:0b:
                    39:a8:cd:c9:4e:e5:b8:90:44:f9:ac:01:1f:be:8c:
                    dd:af:49:9c:f1:fe:b0:fa:19:1c:c0:f7:3c:c9:78:
                    01:86:41:4a:a6:60:79:59:a8:16:6b:e1:d0:b7:a2:
                    1f:f2:b8:22:39:f2:da:1a:5f:56:c5:56:ab:78:41:
                    f2:3a:41:1c:29:d9:d6:f5:5b:48:5d:1d:81:a6:f4:
                    2d:55:8a:01:37:6c:7b:1d:da:aa:70:a4:09:84:4a:
                    90:ca:a1:8a:85:8c:26:a2:4b:a8:b6:81:59:94:d9:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E4:17:32:87:59:03:B7:59:8A:3F:AF:25:FF:76:18:02:5D:25:3D
            X509v3 Authority Key Identifier:
                keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/7A1D009C0EB611ECB5408277C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.0.0/18
                  139.135.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:99:d2:0b:60:a9:b2:0e:8f:9c:da:db:32:6b:a1:b0:75:4d:
         90:b4:d0:26:5c:9c:45:dd:63:3f:94:30:ef:49:79:ce:6b:eb:
         c5:36:a7:67:2f:96:df:01:f4:71:c9:c9:26:c3:d0:ad:73:3c:
         8f:f9:f2:93:33:93:22:b4:b9:1e:9c:bc:3a:06:45:82:e5:97:
         4d:ae:85:f7:7d:9f:8f:5e:7f:08:b1:f5:94:a7:83:56:20:e6:
         23:db:b0:fd:a8:66:36:76:eb:47:9a:3b:5c:1f:b9:3c:25:63:
         e2:e5:07:e2:bb:3b:75:c1:a9:d9:a1:29:a9:5d:41:04:68:c2:
         3e:de:69:3e:34:c8:a1:31:88:51:b7:cf:8b:9f:84:18:cb:95:
         7a:dd:de:2b:31:37:ae:83:16:45:3d:e6:f5:f3:de:61:77:7d:
         b0:ac:c3:8f:7e:27:77:40:f0:4d:1d:e3:8e:1b:15:fb:57:dd:
         10:91:fe:00:05:fb:aa:c7:f7:d2:cf:db:13:7a:3d:ec:7f:ac:
         86:7e:83:bb:23:d4:82:12:61:ca:19:c6:60:b6:dc:73:92:c5:
         33:4f:dd:69:c8:af:ac:c6:8a:b8:f7:dc:f7:57:39:4d:3a:ef:
         06:a1:a9:36:f4:31:14:e8:87:ef:83:a7:31:60:e0:12:34:25:
         0e:7f:c1:3f
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICGzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBGNjYxMTAvBgNVBAUTKEFBMzI1NjI0MjlGODk2QzBBNUNCREU1NjQ0MzE0ODAz
MzlCRUJBOTcwHhcNMjUwNTI0MTU0MzM4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmQ2MS1mOGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuzakKtitWmaAVI1HE8B1FjzFzuZc8FV3nPmdr+TLF0ZDSFLWWHcUJD0ykwng
KovRNkJxVgY3eXDP1sbxdeZTAGBoKbyUj5SYvIDwDmNz2NQ+nySTI4ESot4KFzYS
oke3xRazcgiuB+1CYuhQG6Rxfji+7bUPcZQB3662rgfIWvq9Qs0d+9HSsgpFOFcE
FOah9Tkstgs5qM3JTuW4kET5rAEfvozdr0mc8f6w+hkcwPc8yXgBhkFKpmB5WagW
a+HQt6If8rgiOfLaGl9WxVareEHyOkEcKdnW9VtIXR2BpvQtVYoBN2x7HdqqcKQJ
hEqQyqGKhYwmokuotoFZlNlJCwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFCHkFzKH
WQO3WYo/ryX/dhgCXSU9MB8GA1UdIwQYMBaAFKoyViQp+JbApcveVkQxSAM5vrqX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni8zRDk4MUNDQzNB
MUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxzQ2x5OTVXUkRGSUF6bS11
cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FqSldKQ240bHNDbHk5NVdSREZJQXptLXVwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTBGNjYvM0Q5ODFDQ0MzQTFFMTFFNzlBQTBENTFDQzRGOUFFMDIvN0ExRDAwOUMw
RUI2MTFFQ0I1NDA4Mjc3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQGSP8AAwQFi4cgMA0GCSqGSIb3DQEBCwUAA4IBAQBxmdILYKmyDo+c
2tsya6GwdU2QtNAmXJxF3WM/lDDvSXnOa+vFNqdnL5bfAfRxyckmw9CtczyP+fKT
M5MitLkenLw6BkWC5ZdNroX3fZ+PXn8IsfWUp4NWIOYj27D9qGY2dutHmjtcH7k8
JWPi5Qfiuzt1wanZoSmpXUEEaMI+3mk+NMihMYhRt8+Ln4QYy5V63d4rMTeugxZF
Peb1895hd32wrMOPfid3QPBNHeOOGxX7V90Qkf4ABfuqx/fSz9sTej3sf6yGfoO7
I9SCEmHKGcZgttxzksUzT91pyK+sxoq499z3VzlNOu8Goak29DEU6Ifvg6cxYOAS
NCUOf8E/
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:25 2026 by rpki-client