Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/FF37A9C6067311F19CC2DF5A3C3D8C67.roa
File:                     FF37A9C6067311F19CC2DF5A3C3D8C67.roa (raw, json)
Hash identifier:          L00fkvDAp1HW2g8z2VX9l/pSUD1IBVKXFZoC6l822Do=
Subject key identifier:   23:62:94:83:54:27:A3:CE:1D:69:CA:31:34:EA:C7:6B:BF:EC:A2:19
Certificate issuer:       /CN=A9129738/serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
Certificate serial:       1F
Authority key identifier: 66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/FF37A9C6067311F19CC2DF5A3C3D8C67.roa
Signing time:             Tue 03 Mar 2026 09:45:43 +0000
ROA not before:           Tue 03 Mar 2026 09:45:43 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136184
IP address blocks:        45.120.196.0/22 maxlen: 24
                          103.84.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl
                          rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129738, serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
        Validity
            Not Before: Mar  3 09:45:43 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a6adc7-86cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:11:1f:b3:1c:08:c2:cf:87:5e:63:29:7b:
                    de:9a:8b:2c:a7:b0:0c:8b:07:17:98:b9:73:41:be:
                    cf:cf:16:e3:46:c3:54:17:f2:b6:93:2e:b6:44:37:
                    a5:6a:fa:36:fb:1d:51:25:25:8d:d5:64:25:76:17:
                    37:61:69:db:61:89:16:1e:8e:a8:3a:80:de:3d:14:
                    e1:43:53:1c:eb:a1:d2:30:44:a1:5b:db:62:d6:49:
                    1a:9e:67:21:6b:6e:56:fd:e7:d7:9a:94:b4:53:e5:
                    be:13:6b:52:18:18:94:49:6f:cd:f9:34:1c:9b:75:
                    67:2f:62:91:65:4d:58:8f:89:f9:20:4e:53:14:42:
                    dc:63:ef:40:a5:eb:b2:66:4b:b9:95:32:4d:85:ad:
                    7e:ac:b1:e0:a6:2b:10:6b:ed:8c:be:fd:44:43:15:
                    0e:db:b0:29:41:06:a9:84:b8:6d:cb:41:f1:73:03:
                    23:e6:e2:8d:d2:b6:3c:8e:9d:c2:6c:a2:8b:91:e3:
                    cc:54:9e:b2:37:91:b4:ab:49:0e:3a:1a:22:34:f3:
                    3a:01:45:fc:a2:78:88:e1:ff:bf:5d:cf:af:bf:b6:
                    8f:f6:bc:ec:8f:6c:bf:7f:e6:9a:f0:ad:4e:c7:9f:
                    89:aa:d5:ca:d0:bc:0e:93:8b:49:37:83:a0:10:26:
                    0e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:62:94:83:54:27:A3:CE:1D:69:CA:31:34:EA:C7:6B:BF:EC:A2:19
            X509v3 Authority Key Identifier:
                keyid:66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/FF37A9C6067311F19CC2DF5A3C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.196.0/22
                  103.84.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:af:90:2a:ec:8d:bd:97:33:d0:3b:d8:e5:64:38:60:ff:fb:
         9c:a8:19:cc:84:41:b2:6a:43:6c:6d:59:78:da:a6:46:9d:b9:
         1b:a4:b3:00:e5:96:6b:8a:fe:46:ba:02:ff:09:e3:6c:e7:7c:
         51:dc:82:ba:25:0e:86:f0:37:19:e0:03:3c:76:4a:69:6f:66:
         cf:6e:f4:4b:ea:be:16:d9:be:c1:15:a1:94:41:0f:77:40:c4:
         dd:69:d1:0e:60:e2:2f:85:2c:b7:aa:3c:23:9a:c1:d3:b6:56:
         50:8e:31:bc:ed:f7:e9:5b:c4:8c:21:1b:ac:0c:8c:0d:3b:33:
         8a:49:42:53:6d:07:03:2b:36:f1:87:fd:3b:6b:65:bf:9a:cf:
         b0:1c:14:c9:16:90:6b:6c:f4:0a:28:c7:89:52:81:c3:1e:73:
         64:40:17:3c:14:93:8e:10:84:86:57:cb:45:32:db:ff:a2:d4:
         ab:a8:92:1d:f4:ab:12:31:3b:de:8d:21:e4:75:da:48:7b:0b:
         0a:75:da:3f:5b:f9:7c:25:71:47:37:a6:30:cc:96:62:bf:0c:
         86:f6:bf:a2:2f:c3:5d:69:ce:c5:6e:3a:c9:9c:16:4a:fa:b9:
         3a:98:1f:4b:5a:e9:52:72:73:42:26:ff:6b:d1:2f:c1:5d:7b:
         fe:a0:1e:71
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OTczODExMC8GA1UEBRMoNjY2NTRFMDEyMDM5MzI2RTEzRDNDRDlFRjU4REE5RUYw
Nzc3MjI3NzAeFw0yNjAzMDMwOTQ1NDNaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTZhZGM3LTg2Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/VREfsxwIws+HXmMpe96aiyynsAyLBxeYuXNBvs/PFuNGw1QX8raTLrZEN6Vq
+jb7HVElJY3VZCV2FzdhadthiRYejqg6gN49FOFDUxzrodIwRKFb22LWSRqeZyFr
blb959ealLRT5b4Ta1IYGJRJb835NBybdWcvYpFlTViPifkgTlMUQtxj70Cl67Jm
S7mVMk2FrX6sseCmKxBr7Yy+/URDFQ7bsClBBqmEuG3LQfFzAyPm4o3StjyOncJs
oouR48xUnrI3kbSrSQ46GiI08zoBRfyieIjh/79dz6+/to/2vOyPbL9/5prwrU7H
n4mq1crQvA6Ti0k3g6AQJg4tAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUI2KUg1Qn
o84dacoxNOrHa7/sohkwHwYDVR0jBBgwFoAUZmVOASA5Mm4T082e9Y2p7wd3Incw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NzM4Lzk4Q0MzN0NFMDY3
MzExRjFBNkNGMzMwRjNDM0Q4QzY3L1ptVk9BU0E1TW00VDA4MmU5WTJwN3dkM0lu
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWm1WT0FTQTVNbTRUMDgyZTlZMnA3d2QzSW5jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTczOC85OENDMzdDRTA2NzMxMUYxQTZDRjMzMEYzQzNEOEM2Ny9GRjM3QTlDNjA2
NzMxMUYxOUNDMkRGNUEzQzNEOEM2Ny5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAIteMQDBABnVDcwDQYJKoZIhvcNAQELBQADggEBAI6vkCrsjb2XM9A7
2OVkOGD/+5yoGcyEQbJqQ2xtWXjapkaduRukswDllmuK/ka6Av8J42znfFHcgrol
DobwNxngAzx2SmlvZs9u9EvqvhbZvsEVoZRBD3dAxN1p0Q5g4i+FLLeqPCOawdO2
VlCOMbzt9+lbxIwhG6wMjA07M4pJQlNtBwMrNvGH/TtrZb+az7AcFMkWkGts9Aoo
x4lSgcMec2RAFzwUk44QhIZXy0Uy2/+i1Kuokh30qxIxO96NIeR12kh7Cwp12j9b
+XwlcUc3pjDMlmK/DIb2v6Ivw11pzsVuOsmcFkr6uTqYH0ta6VJyc0Im/2vRL8Fd
e/6gHnE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:08 2026 by rpki-client