Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/9C9F0DC6DA5A11F08EBD209195D3641D.roa
File:                     9C9F0DC6DA5A11F08EBD209195D3641D.roa (raw, json)
Hash identifier:          JgdmWI3k7cOqCcItbOe6xRBhm/7mwOzKG5iBpPWBzvY=
Subject key identifier:   0C:4C:82:91:5A:B3:33:04:E3:7A:D3:EA:3F:13:2C:B9:78:BD:F8:37
Certificate issuer:       /CN=A91519CC/serialNumber=1B3683525944774388853090D1005BB51552246D
Certificate serial:       34
Authority key identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/9C9F0DC6DA5A11F08EBD209195D3641D.roa
Signing time:             Mon 02 Mar 2026 13:42:08 +0000
ROA not before:           Tue 16 Dec 2025 08:38:36 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     153528
IP address blocks:        144.79.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
                          rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91519CC, serialNumber=1B3683525944774388853090D1005BB51552246D
        Validity
            Not Before: Dec 16 08:38:36 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a593b0-aa2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:50:65:e6:cc:aa:9f:ea:89:7a:f9:ca:b4:96:
                    12:7d:0a:7a:00:b2:01:57:a6:8b:44:0d:fd:d5:4c:
                    02:df:71:5c:93:44:7d:54:6a:a1:3f:79:fb:fb:2b:
                    e8:f4:06:fb:f8:5e:32:94:7d:fa:28:e7:df:ea:7f:
                    8f:fe:c4:f7:5d:65:cf:12:b2:8c:fa:65:c1:42:51:
                    8d:0e:7a:f5:81:41:6c:01:d9:7d:09:c6:16:1e:56:
                    94:ac:71:56:2d:e6:6a:53:80:5f:79:5b:e9:5c:2e:
                    ce:c1:99:32:ef:2e:20:38:b4:a4:85:f1:17:5b:81:
                    df:34:72:bf:19:b0:1c:c1:b8:24:c6:8e:a3:c2:be:
                    c3:22:4a:29:f6:a9:3b:6e:e4:ce:cf:0a:b4:26:e3:
                    71:6c:92:a4:98:38:5e:8f:12:e8:9a:cd:b1:16:cd:
                    c7:a2:cb:f7:37:a3:d4:79:ec:ea:38:22:ca:b7:fa:
                    0d:61:f6:6e:12:81:91:98:19:09:52:95:26:7e:d0:
                    e4:db:a7:ec:36:13:a5:c4:8b:31:a6:20:ec:c1:42:
                    b5:d3:d4:ae:74:d3:f8:72:ac:9d:20:1b:4b:5b:ed:
                    e5:57:e9:c9:3f:42:3c:9a:bc:80:ea:69:4e:48:ee:
                    40:4f:d3:43:7c:bb:16:d4:00:af:ee:2b:20:1a:ec:
                    ff:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4C:82:91:5A:B3:33:04:E3:7A:D3:EA:3F:13:2C:B9:78:BD:F8:37
            X509v3 Authority Key Identifier:
                keyid:1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/9C9F0DC6DA5A11F08EBD209195D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:50:15:41:62:70:c5:1b:96:63:90:18:4f:ba:4f:a8:f7:38:
         11:ea:03:5d:d2:5c:f0:bf:05:c5:1c:6e:18:c9:b8:f9:76:1e:
         78:f0:86:03:0d:3a:7c:87:fa:f9:cf:b7:14:c5:db:c3:50:d7:
         f3:6b:08:73:9b:39:28:50:8c:2c:cf:e5:ec:e3:b4:78:4a:6e:
         93:61:7e:98:69:ca:d1:ba:2a:e1:f8:5f:d1:ab:7c:10:57:d2:
         38:04:9c:16:3d:bf:7b:9a:12:7e:26:dd:9c:15:6c:47:4a:16:
         57:d2:ad:62:e2:54:1c:cb:89:13:8a:c7:c6:35:41:0c:e5:86:
         ce:d3:b9:49:ba:f6:9d:97:5c:35:88:ca:b8:4a:69:1e:b0:99:
         09:42:c9:cc:d4:d4:cd:53:02:ee:99:eb:f0:7f:f9:7d:de:33:
         fd:b1:66:1a:d2:4d:4a:eb:ed:b8:04:e1:c1:9e:7a:6b:4c:6e:
         6e:07:7c:a0:1a:0f:4e:d0:74:1d:43:d8:cd:d1:1a:73:1a:e9:
         6b:0e:cb:d0:a7:09:38:5c:ad:f4:ab:a5:86:31:b7:62:68:e3:
         4f:86:b7:0a:48:f7:6e:c3:6d:99:9d:1e:24:3a:96:d2:02:9a:
         cc:4f:03:8d:35:6b:58:01:14:20:16:d0:a3:82:f2:31:5f:db:
         21:6b:fe:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:39 2026 by rpki-client