Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/29A436623FE111EFB5A50814C4F9AE02.roa
File:                     29A436623FE111EFB5A50814C4F9AE02.roa (raw, json)
Hash identifier:          21CMC+4jrqt9R3YVeyqV8PFYMlUBz4//FXWyuGoWN2w=
Subject key identifier:   5D:15:41:1B:50:AC:B0:0A:B9:E1:C7:87:36:36:5A:1B:CB:70:7C:55
Certificate issuer:       /CN=A9153303/serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
Certificate serial:       013B
Authority key identifier: 96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/29A436623FE111EFB5A50814C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:04:36 +0000
ROA not before:           Thu 07 Aug 2025 06:43:01 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     64095
IP address blocks:        2401:b120::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl
                          rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153303, serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
        Validity
            Not Before: Aug  7 06:43:01 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a598f4-3682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cc:7e:87:38:c2:3f:0d:83:69:ce:2e:90:c7:
                    a6:0f:05:2d:42:2e:bd:dd:56:8d:52:d4:ef:33:1b:
                    a9:68:b3:2a:fc:7b:80:e0:1e:fd:90:4a:cd:83:a5:
                    70:f1:ec:1b:85:a2:46:a8:53:d4:cc:5f:ca:8b:8c:
                    f2:4c:ec:ad:16:52:b8:f9:db:a0:9d:3c:15:24:13:
                    d2:dd:e3:ab:86:d9:f7:3e:ef:db:b7:0f:87:4c:1d:
                    98:45:54:a3:00:0a:c1:ac:d9:e1:2b:38:55:4b:35:
                    ed:eb:c5:70:5c:6e:bc:9a:52:12:16:22:89:cd:40:
                    02:27:85:ba:8d:e6:7d:e9:96:31:60:b0:94:6d:64:
                    a1:4c:f8:ed:4f:a8:e4:9e:6a:74:15:87:5f:c4:a8:
                    09:25:32:6e:af:bb:55:b8:e8:ce:0d:af:c6:16:d6:
                    9a:d7:9b:be:9e:f8:76:6a:7f:6d:a6:18:46:ab:c5:
                    df:e5:f7:a8:0d:01:47:e9:96:ea:df:57:4f:25:87:
                    45:aa:e1:6f:7f:d0:a6:6b:b7:29:e1:04:dc:fa:af:
                    fa:ad:8b:e6:35:dc:e6:dd:56:c2:0e:91:9d:fe:05:
                    d1:8e:8d:18:df:9d:0a:8f:a5:76:ad:59:d6:c1:67:
                    58:45:16:64:63:71:d7:e2:19:57:97:9b:02:8b:84:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:15:41:1B:50:AC:B0:0A:B9:E1:C7:87:36:36:5A:1B:CB:70:7C:55
            X509v3 Authority Key Identifier:
                keyid:96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/29A436623FE111EFB5A50814C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b120::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:dc:50:52:f9:05:c4:f2:d7:e5:fd:a5:34:20:9f:78:c1:08:
         0c:59:a2:b2:74:7f:7a:f9:70:39:3c:35:13:c3:8d:dd:88:fb:
         9f:7a:fc:06:f7:96:ed:c6:38:cd:42:4b:a6:89:53:7d:d9:70:
         0c:bf:70:35:00:95:2d:30:55:9a:04:f0:bd:79:c6:89:2d:19:
         07:10:fa:82:0f:1a:ff:aa:75:92:73:9a:f1:49:a1:e4:30:5f:
         23:f6:52:1f:96:56:f0:ac:b2:9e:9f:ba:d8:f4:d3:99:3c:5b:
         f0:99:9e:3a:a2:71:25:eb:ae:24:42:4a:88:15:a9:fb:09:00:
         94:6d:a7:22:89:fa:43:30:da:d0:52:e8:13:74:52:84:e6:56:
         72:71:ad:9b:61:32:a1:3f:17:85:66:23:38:b3:c9:e7:1b:6e:
         04:2a:bc:81:0e:9c:5d:4f:36:98:6a:3c:f6:97:4f:38:e5:41:
         54:63:33:91:6f:bf:59:b1:1b:77:ae:a7:4e:c4:4b:b7:d1:bc:
         e5:2d:6d:13:7d:26:05:46:02:9c:6f:c7:16:d7:4e:cd:bc:fe:
         3a:d8:a1:b6:4d:b7:68:dc:7b:5c:21:70:9a:a2:75:aa:f0:a6:
         0b:24:6a:eb:11:26:7f:4a:fc:53:6c:f0:b0:71:02:f5:13:aa:
         4e:c8:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:38 2026 by rpki-client