Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/13D5D992979E11F08E996475C4F9AE02.roa
File:                     13D5D992979E11F08E996475C4F9AE02.roa (raw, json)
Hash identifier:          aNQGU8gUhtVzK0StgAqIPs0EzyZY2kTncb0zbJ2pXGo=
Subject key identifier:   6D:62:62:17:81:DE:8B:57:F6:C8:EC:A8:B4:9A:4B:92:63:B5:25:8E
Certificate issuer:       /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial:       080A
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/13D5D992979E11F08E996475C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:43:05 +0000
ROA not before:           Wed 31 Dec 2025 18:15:34 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     150744
IP address blocks:        223.29.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
                          rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
        Validity
            Not Before: Dec 31 18:15:34 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a488b9-6cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:d3:ed:55:93:88:e4:5b:50:d4:4b:f3:ec:
                    df:11:54:b6:6f:62:7f:bc:df:71:57:be:62:56:9e:
                    ad:a4:52:d6:7f:cc:21:96:07:99:10:13:c1:00:db:
                    1e:88:76:bc:e5:5a:6a:e1:5e:d9:8d:37:35:2f:0b:
                    30:21:2d:9d:cb:13:c3:18:fc:8e:09:97:f0:61:b7:
                    22:d4:02:57:3c:59:75:73:95:6b:e3:19:52:70:e7:
                    9c:35:ac:98:95:d2:51:9b:21:10:06:58:00:55:a0:
                    f9:ed:86:01:85:3e:e0:4d:85:48:17:77:e8:62:af:
                    26:96:ae:2b:1e:d7:29:3c:c3:8d:2a:3d:f3:0b:d8:
                    71:4d:35:47:66:e7:ff:de:0b:f5:16:8a:c0:de:97:
                    66:46:bd:90:9d:3a:5a:7d:ad:f7:5e:43:a9:be:c8:
                    65:4e:3f:47:47:42:c7:1c:25:cd:ac:ca:90:f1:ec:
                    d1:5d:b7:05:39:3a:14:92:90:c9:4f:54:fb:4b:56:
                    f3:af:15:94:f1:32:50:68:8c:04:66:02:90:64:8e:
                    5c:71:82:90:3d:6d:2f:3c:10:73:0c:3c:31:08:c6:
                    5f:89:92:02:2c:76:6f:05:46:b2:6d:7b:db:98:3d:
                    e3:2b:67:92:08:5a:79:d1:cf:ac:cc:3b:c7:c0:fa:
                    d7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:62:62:17:81:DE:8B:57:F6:C8:EC:A8:B4:9A:4B:92:63:B5:25:8E
            X509v3 Authority Key Identifier:
                keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/13D5D992979E11F08E996475C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.29.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:ac:26:c3:9d:bc:48:ca:28:2f:19:a2:6e:d8:32:da:09:37:
         40:61:cb:2b:ae:17:72:29:56:36:ca:96:42:42:f8:a8:14:4a:
         d2:95:ce:c7:bc:76:2b:55:1c:d9:6e:95:a2:f2:22:c8:72:54:
         9c:6c:8e:5c:df:4e:f4:e1:e6:81:27:26:c9:5f:e3:b1:fd:58:
         e4:41:93:8c:61:be:4a:03:ca:e0:c1:40:84:8c:eb:73:6b:57:
         cb:a6:8e:a3:86:78:53:c2:83:f0:d4:c8:b3:16:fa:db:00:bf:
         f6:4e:cb:fd:02:59:87:21:c1:1f:ba:bb:15:15:c5:11:56:9d:
         e8:7c:a1:25:fc:9e:bc:c7:75:cc:c4:08:bb:79:ec:90:b5:64:
         9f:33:d1:ba:ef:3c:9a:a7:b1:c4:80:87:31:79:81:e2:dd:73:
         fa:52:c3:e1:ca:0d:fd:23:86:a9:a2:a7:58:42:db:82:40:1e:
         96:f6:fd:47:84:74:d1:ba:61:6b:22:e9:35:ee:e9:81:89:16:
         40:06:77:50:90:de:08:77:8b:8f:b4:cc:15:6b:e6:36:f4:bf:
         f7:41:4f:b9:82:04:d8:38:7f:69:c4:df:b7:01:c3:78:0e:4a:
         cd:69:c4:ae:fd:86:71:06:30:60:33:60:f9:8a:de:88:f9:e7:
         f7:22:fb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:03:43 2026 by rpki-client