Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/639394F4B05611EF95B2931BC4F9AE02.roa
File:                     639394F4B05611EF95B2931BC4F9AE02.roa (raw, json)
Hash identifier:          QT8qZMQxmuuDteCOnOSOp3NwZ0+//1IQE1zDb3G1+qs=
Subject key identifier:   3D:32:E4:B6:E9:E7:E9:F7:7A:AE:2F:AC:C6:DA:32:A8:2D:D9:57:59
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       06EB
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/639394F4B05611EF95B2931BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:26:42 +0000
ROA not before:           Wed 04 Feb 2026 22:19:45 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     131212
IP address blocks:        112.199.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1771 (0x6eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
        Validity
            Not Before: Feb  4 22:19:45 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a484e2-6a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2d:c4:fd:7b:a5:5d:af:44:ef:3c:78:ed:20:
                    05:cc:55:2c:4c:cf:ab:ae:e3:55:e2:c4:4a:89:c4:
                    56:f3:8b:48:04:d5:7e:11:fc:73:56:d6:db:4e:de:
                    8c:77:7b:3d:92:a5:4e:9c:47:16:fc:0b:46:78:42:
                    f5:04:cf:04:87:09:85:1d:cc:cc:f8:67:81:1b:0a:
                    d9:48:87:8b:dd:22:06:13:0c:2f:4f:2d:41:fa:40:
                    fc:4e:f0:3b:97:a2:0f:d8:b7:40:2c:8c:37:a9:7a:
                    f6:2e:eb:b6:05:7e:24:83:91:94:68:61:8b:e6:cd:
                    04:b2:5d:c4:ef:14:3e:73:54:08:cb:07:6e:b3:22:
                    db:7e:58:78:36:3b:13:6e:12:35:85:ab:46:eb:95:
                    d4:5e:71:d8:e3:07:8b:d7:2e:61:a9:77:fa:11:75:
                    76:ad:fa:45:af:e9:e4:3a:5e:19:82:ec:fc:23:a2:
                    0e:ae:9b:74:06:4e:5d:7a:e9:9e:77:c8:4e:df:3e:
                    90:b3:34:90:97:30:a3:2f:a0:cd:91:5f:52:45:dc:
                    40:9a:e3:fd:96:da:c4:36:a7:a9:fb:ee:76:6b:eb:
                    3a:8b:5c:2a:19:b0:45:86:bc:5c:d0:03:23:58:cb:
                    1a:75:55:e6:f2:f6:4a:a3:89:7b:c9:29:de:2b:7e:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:32:E4:B6:E9:E7:E9:F7:7A:AE:2F:AC:C6:DA:32:A8:2D:D9:57:59
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/639394F4B05611EF95B2931BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.199.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:2e:62:0f:77:51:f8:b3:2e:e7:0c:77:67:ab:d6:e9:f3:4c:
         87:24:17:ad:78:94:1d:f4:50:bd:86:30:96:05:ce:31:e7:9c:
         2e:ab:83:5d:76:1b:31:12:52:d7:03:50:a3:b9:ae:b7:68:54:
         f9:ac:b1:c2:17:62:06:f8:c3:f2:33:21:98:7a:7d:31:73:f5:
         9a:02:61:fd:54:c5:5f:af:a6:7a:1f:38:47:2b:12:6b:4b:cd:
         00:e9:a6:29:c5:ba:73:5a:14:2f:ad:0b:35:3a:dd:2f:bb:cd:
         e4:79:7e:46:d1:4f:40:1b:b4:41:87:1c:4a:e0:85:5a:e1:17:
         1c:94:ce:64:9e:7d:17:d5:f9:fe:36:35:e5:b6:9f:e6:d2:6f:
         cb:15:08:53:82:4b:29:ba:22:10:af:70:f6:46:ae:74:9c:0c:
         fd:3f:6d:c9:b7:72:27:43:16:37:ad:bf:04:dc:13:78:b3:ae:
         44:4c:c0:a6:af:fa:5d:25:59:53:ab:07:b8:7a:6e:6e:98:12:
         cd:b7:f9:ff:2d:91:30:41:79:5f:d1:a3:28:76:87:d7:24:d8:
         d1:73:53:dc:32:ce:40:44:ba:46:1d:9f:cd:71:a3:26:fe:3d:
         dd:a7:cc:cf:22:cc:9b:fe:5d:f5:3f:5c:71:99:ec:fd:74:6b:
         da:8a:cd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:11:47 2026 by rpki-client