Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/4699D9EADB0B11F0B7B5790A82D3641D.roa
File:                     4699D9EADB0B11F0B7B5790A82D3641D.roa (raw, json)
Hash identifier:          T2Foy9ASPzGFF0amgq/n/ifzed5ff9yCRwIVozmPQbI=
Subject key identifier:   4C:FE:29:9A:32:5E:6C:F9:54:E3:23:25:50:22:FB:83:61:8C:C3:FB
Certificate issuer:       /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial:       01BB
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/4699D9EADB0B11F0B7B5790A82D3641D.roa
Signing time:             Sun 01 Mar 2026 18:25:21 +0000
ROA not before:           Mon 29 Dec 2025 04:23:41 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     6453
IP address blocks:        124.4.120.0/23 maxlen: 24
                          124.4.122.0/23 maxlen: 24
                          182.94.236.0/23 maxlen: 24
                          182.94.238.0/23 maxlen: 24
                          182.94.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
                          rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
        Validity
            Not Before: Dec 29 04:23:41 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48491-4f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e0:33:b9:d6:28:9b:b8:2a:36:95:62:8c:a3:
                    ad:57:e9:1d:f9:4a:91:1a:16:97:18:52:b3:d6:ab:
                    15:68:f9:e1:df:1e:9f:14:04:b3:45:38:e9:a9:7f:
                    58:63:29:79:3f:0d:ba:9a:cb:3a:7e:fc:af:24:92:
                    ee:2e:54:bd:de:a2:8c:7e:9b:4a:22:56:bf:7b:22:
                    37:6a:b7:18:b8:e6:52:5f:76:02:f8:4a:29:56:8b:
                    f7:88:61:d7:8f:ff:39:27:8e:7a:07:92:9b:20:c3:
                    44:c0:72:da:92:54:ba:8a:92:cc:f4:d9:01:da:29:
                    ca:3b:7b:6e:ab:de:e2:f7:09:7f:9b:f7:9e:1b:23:
                    32:fb:e4:25:d0:3b:93:b3:9f:2c:1f:0d:61:14:49:
                    0b:f4:ca:fd:36:34:94:e3:b3:e7:01:26:ed:f7:56:
                    af:b9:92:d4:d4:7c:cf:e1:ac:de:20:08:68:fd:bb:
                    eb:c9:a9:53:7d:22:42:6a:ad:6a:ab:1c:80:4e:18:
                    7f:40:4b:b4:27:eb:71:34:b7:9b:5e:0d:b1:57:2e:
                    a8:f1:fb:29:01:da:ba:ea:6d:41:3d:bf:7c:b3:93:
                    ff:cd:62:d4:c7:a0:80:2f:b6:86:2d:11:09:70:0a:
                    16:6a:b0:f4:3a:a0:2d:5f:2d:d7:ba:77:c9:a4:ec:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FE:29:9A:32:5E:6C:F9:54:E3:23:25:50:22:FB:83:61:8C:C3:FB
            X509v3 Authority Key Identifier:
                keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/4699D9EADB0B11F0B7B5790A82D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.4.120.0/22
                  182.94.236.0-182.94.240.255

    Signature Algorithm: sha256WithRSAEncryption
         d0:8e:7c:df:40:11:d3:ac:ff:b2:6c:1b:be:20:d7:97:ea:5b:
         2d:8a:ef:b2:20:88:c4:8a:23:ae:c3:e4:18:70:20:52:72:19:
         40:b5:d2:bd:61:a0:ad:c0:e5:a0:4a:f2:b3:12:89:7f:8e:d2:
         67:72:d4:5b:b8:55:2d:7c:cb:23:a3:85:d3:06:16:91:25:7b:
         35:1c:c3:69:cd:0c:c3:31:c4:62:64:40:fd:a3:76:ee:60:ba:
         f9:69:48:73:f8:60:7b:e4:47:ce:c3:da:35:f6:c0:18:a2:ff:
         c2:5b:25:e2:90:9d:8c:e7:ff:ed:ae:31:03:ab:89:b7:6b:72:
         3b:4f:e7:81:c6:10:38:5a:e4:9e:14:98:e9:c5:25:67:40:e2:
         ce:d2:57:86:be:f3:bf:a8:3d:9a:a4:ae:10:03:9c:90:6a:59:
         65:e7:16:68:95:07:8d:3a:23:27:fd:e5:06:50:8e:08:5d:60:
         e3:e3:e1:d0:84:cc:c9:5c:29:6c:9c:16:c3:8f:47:c3:b5:24:
         ad:e5:0a:ea:8a:5c:17:cd:e9:83:9e:67:db:68:d5:df:3d:4e:
         cd:49:a5:74:22:98:5e:60:b1:a7:05:aa:8d:1b:62:f6:f0:c7:
         4d:09:ac:48:0e:45:6a:e2:51:93:ea:ad:0f:71:64:f1:0d:20:
         64:65:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:36:46 2026 by rpki-client