Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/771BED3C29EA11F19F51207DA0833773.roa
File:                     771BED3C29EA11F19F51207DA0833773.roa (raw, json)
Hash identifier:          w/jJyAGgr3Tj7qFO+qb/DsPtYZW/iNhj8gsbe5eWoj0=
Subject key identifier:   A9:ED:73:79:B6:08:BF:97:22:BB:B6:5C:7A:55:7B:D4:46:91:2D:43
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       34
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/771BED3C29EA11F19F51207DA0833773.roa
Signing time:             Fri 27 Mar 2026 14:37:22 +0000
ROA not before:           Fri 27 Mar 2026 14:37:22 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     31713
IP address blocks:        65.72.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 17:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Mar 27 14:37:22 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69c69622-5eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bb:19:a6:d1:50:61:a2:6f:c4:61:7b:95:fb:
                    e8:83:3e:1f:a7:98:10:ff:22:47:04:ea:99:42:44:
                    e0:69:01:99:04:0a:44:7f:41:43:ac:df:95:b5:d0:
                    17:fb:d6:68:3c:6e:87:17:ca:33:50:ca:cf:6c:a8:
                    3d:01:0b:68:1a:e9:5e:5f:31:02:03:e1:04:97:80:
                    df:52:be:88:c3:69:3e:b9:b1:da:44:1a:3c:6a:85:
                    52:93:47:2c:56:69:26:be:7d:51:08:58:82:20:b8:
                    98:f4:fd:a4:8d:b9:11:68:63:0e:76:9c:f0:97:e6:
                    a6:ab:2b:85:9a:2f:67:c6:c7:da:37:77:4a:f0:f1:
                    6a:c0:66:2a:67:c2:55:b3:62:55:19:90:ea:e5:4d:
                    b3:54:3e:67:db:fd:9f:1b:51:ab:19:bd:d4:30:de:
                    06:14:f9:c7:56:9f:a8:22:1d:99:cd:d8:7b:ff:95:
                    a2:ec:5e:c3:a0:49:9b:8e:a9:83:65:7d:c4:49:9f:
                    9b:1f:e0:95:3b:f7:6c:31:15:2e:6c:81:4b:e1:f5:
                    3f:54:c6:26:7e:1d:78:d4:fc:1b:5b:f3:3f:a6:9f:
                    51:d9:6d:04:a3:ca:bb:5a:85:de:b8:58:3b:54:fc:
                    3e:c7:cc:37:49:97:07:bf:31:1b:ef:1d:16:be:46:
                    90:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:ED:73:79:B6:08:BF:97:22:BB:B6:5C:7A:55:7B:D4:46:91:2D:43
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/771BED3C29EA11F19F51207DA0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:79:a6:c5:ad:68:e1:e2:1c:8b:f5:b1:b4:79:a7:3c:95:1b:
         3a:c2:1f:52:93:d1:3b:7b:03:41:89:2f:9d:29:f5:25:99:80:
         5c:ee:bc:e5:c0:eb:43:f2:39:95:9d:4e:c3:05:3f:c1:c3:2b:
         bb:23:f9:e2:5b:4f:ec:2f:a8:39:bb:f9:f4:00:15:97:bf:36:
         54:c3:62:20:1b:6c:b4:77:ac:55:f2:4f:e6:29:6d:6b:41:bc:
         5c:58:80:ae:0e:99:54:7d:8f:6c:2a:5e:8c:d4:d8:8a:77:8e:
         04:72:04:a9:2e:16:46:49:74:52:7b:c7:b0:5f:29:e4:7f:b5:
         7a:d8:70:86:64:13:cf:2e:67:08:9a:4c:a8:45:d3:06:a8:97:
         ee:13:9d:d8:54:42:85:93:07:55:ae:33:b4:be:09:b2:64:15:
         a0:af:d6:52:b1:fa:bf:ee:0c:d9:d1:c9:42:b5:11:d5:6e:16:
         79:c3:1c:16:fa:7f:c1:f3:d6:fd:e6:ee:38:5a:c7:38:5e:8f:
         3a:05:81:1f:c4:6d:4d:76:8c:0f:13:94:ad:b5:c9:3c:78:73:
         83:ff:66:9a:3e:51:f5:d9:93:6f:77:c8:04:6b:9d:a5:26:6d:
         cd:cb:b6:b2:84:d1:63:1e:f9:ac:20:ec:7d:1c:77:07:d6:ca:
         e3:65:f7:7b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Mar 28 18:58:53 2026 by rpki-client