Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/B1334FD4522011ECB0594C2BC4F9AE02.roa
File:                     B1334FD4522011ECB0594C2BC4F9AE02.roa (raw, json)
Hash identifier:          wtcSk6Y7w0YC/tgX92PUFuNkS6TBVa+Kp56LZMlD0kQ=
Subject key identifier:   31:69:24:F2:50:D2:65:8D:DA:0F:40:A9:05:E6:AA:69:78:2E:9D:2F
Certificate issuer:       /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
Certificate serial:       04EE
Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/B1334FD4522011ECB0594C2BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:19:24 +0000
ROA not before:           Sat 20 Dec 2025 23:20:44 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132695
IP address blocks:        202.6.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl
                          rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1262 (0x4ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
        Validity
            Not Before: Dec 20 23:20:44 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a44aec-edc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7d:27:af:1b:13:af:9e:8f:52:20:08:a9:aa:
                    49:f0:1e:5e:f1:8e:f4:64:a9:65:b7:1d:72:8a:4e:
                    b8:9b:71:c2:0a:ed:93:06:00:33:7d:27:0e:0d:33:
                    aa:25:e8:00:d0:40:11:2a:8a:0c:c6:a4:63:7c:48:
                    1c:54:35:23:2e:3b:2f:67:75:93:d5:e0:f0:16:3d:
                    e0:e0:bf:d2:76:7d:88:7c:63:72:36:c7:cf:80:af:
                    00:df:6f:94:af:71:e9:96:56:85:91:af:fa:b2:17:
                    db:e9:07:84:78:1e:1e:eb:0a:ee:12:f1:af:57:77:
                    64:91:79:98:34:49:41:ca:4c:da:c1:52:8d:d0:b4:
                    73:0c:6d:08:ab:32:94:b7:a2:e0:4e:67:60:b6:11:
                    d2:e1:67:26:56:02:4f:2f:b0:fc:0e:df:90:60:ec:
                    c6:96:4e:71:78:b2:8e:73:bc:b3:a9:6c:10:fa:4e:
                    ea:26:80:d8:0d:d3:27:b6:05:b8:68:9f:8b:6d:f4:
                    00:a7:74:61:c0:ab:f9:4c:79:94:aa:25:e8:88:b2:
                    0d:ba:89:22:c2:a4:7a:59:97:6d:30:cf:60:4b:ee:
                    62:f3:3e:cb:c5:90:56:7c:b0:65:c9:f8:1f:42:0c:
                    1b:be:5b:9c:9b:af:ef:d7:e4:c7:c6:05:db:4c:0d:
                    d1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:69:24:F2:50:D2:65:8D:DA:0F:40:A9:05:E6:AA:69:78:2E:9D:2F
            X509v3 Authority Key Identifier:
                keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/B1334FD4522011ECB0594C2BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:56:51:d8:5a:20:7c:f3:32:7c:6b:2b:8a:8f:ee:8f:d6:f0:
         49:d5:b5:f0:22:e3:18:9c:e2:4c:25:36:97:2d:f7:22:20:a4:
         e0:b8:a5:cb:85:5b:f9:8f:fc:6b:2b:d7:d7:a7:84:c5:f0:ca:
         2f:f1:c2:b3:7a:1f:d4:0a:e8:ca:d1:5b:68:1d:df:29:61:f6:
         d6:86:11:38:ce:19:78:d1:54:7b:1e:11:be:3a:84:d5:b3:1d:
         9e:b2:1a:55:df:ab:df:c0:07:33:8e:af:f0:2c:04:7a:73:34:
         4c:5e:e1:eb:2c:69:a6:f1:08:56:1f:fb:d3:e4:f9:64:00:fc:
         00:93:a7:04:04:06:ab:35:33:97:7d:8b:23:a2:26:6e:5d:da:
         8a:56:71:70:3c:5e:c5:77:de:ce:a7:34:37:65:a9:e7:19:d5:
         59:ae:76:12:41:7f:fe:9c:7c:e9:a2:41:06:68:d1:7f:71:e5:
         e9:49:8a:78:4d:52:d2:13:fd:26:53:5a:56:12:ab:02:e0:89:
         e2:81:07:49:98:dc:58:b1:25:9d:c1:6f:04:67:9b:4e:28:71:
         7e:18:d9:46:cd:36:bc:1d:2f:59:ce:f0:d9:a3:f1:03:51:fb:
         11:0b:c4:3f:1a:60:cc:06:21:40:59:95:c8:88:2f:37:d1:54:
         1f:b8:6c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:46 2026 by rpki-client