Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/13CA64E4C35B11EFA021A243C4F9AE02.roa
File:                     13CA64E4C35B11EFA021A243C4F9AE02.roa (raw, json)
Hash identifier:          sOyNPxScuSAhxypChzwUczRXPq4WV5UpffavEeD3qNM=
Subject key identifier:   3D:4B:C3:7F:B2:11:68:DD:67:63:5D:F1:31:C3:34:04:9D:88:4E:F5
Certificate issuer:       /CN=A9135F07/serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
Certificate serial:       0135
Authority key identifier: 4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/13CA64E4C35B11EFA021A243C4F9AE02.roa
Signing time:             Wed 29 Jul 2026 07:56:02 +0000
ROA not before:           Wed 29 Jul 2026 07:56:02 +0000
ROA not after:            Sat 28 Nov 2026 00:00:00 +0000
asID:                     131331
IP address blocks:        157.20.40.0/24 maxlen: 24
                          157.20.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl
                          rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F07, serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C
        Validity
            Not Before: Jul 29 07:56:02 2026 GMT
            Not After : Nov 28 00:00:00 2026 GMT
        Subject: CN=6a69b212-cd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:42:bc:b8:6a:c0:f9:97:79:e0:95:3b:1b:
                    d0:a6:0b:e6:5d:a0:2b:c8:34:d0:54:80:32:13:dd:
                    4d:55:6f:a6:6b:75:35:d6:38:33:0f:f5:0f:94:1e:
                    a0:7c:27:4d:aa:36:e8:a9:b8:1f:1f:11:94:94:7d:
                    55:04:af:53:21:94:e7:d2:55:74:f9:ce:44:c3:d6:
                    95:c9:91:c7:ed:37:0a:bb:78:e1:b2:62:2f:27:a2:
                    e4:89:c8:cd:ce:c1:94:51:ac:da:f4:d7:50:e3:96:
                    cb:56:3d:33:22:6e:77:bf:47:d7:d9:63:d8:df:40:
                    8f:87:e8:2c:c2:bc:e1:76:4b:d2:32:f1:74:e1:0d:
                    4b:18:b3:02:b1:de:71:98:c9:eb:94:72:9d:ae:29:
                    04:f4:c5:9b:ce:ad:bd:10:d7:49:93:09:ba:5b:12:
                    9f:af:38:00:5e:2a:3c:01:57:da:82:16:45:a8:61:
                    25:68:82:50:8f:7f:80:8c:eb:92:7a:0b:3f:30:04:
                    56:8c:d7:e7:10:2b:ea:fb:bc:35:d8:05:f6:9c:16:
                    51:e1:6a:a1:9f:4b:ad:07:98:47:98:63:e3:8e:50:
                    11:27:96:b2:0c:3d:cd:86:c7:cb:29:c2:6e:ba:5c:
                    63:23:34:f7:d4:d8:58:a0:3e:2f:25:41:ca:50:06:
                    83:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4B:C3:7F:B2:11:68:DD:67:63:5D:F1:31:C3:34:04:9D:88:4E:F5
            X509v3 Authority Key Identifier:
                keyid:4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/13CA64E4C35B11EFA021A243C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:80:4a:ad:fb:03:ae:f6:d2:1b:26:30:34:55:ac:e9:c9:e9:
         b9:13:b3:fc:39:be:08:4b:e8:b0:87:36:b1:96:06:cb:cb:1f:
         ac:4b:e5:c6:47:76:fb:40:c2:e2:1f:10:53:f2:68:4d:6b:c2:
         07:63:6d:d6:a6:6b:82:67:4f:ad:6a:21:b7:0c:10:fd:86:0a:
         44:60:13:1f:e1:dd:66:68:5e:54:da:5d:74:31:0b:bd:60:34:
         d4:9e:a5:c8:8e:66:66:b7:bc:84:dd:fc:00:01:93:5c:53:d8:
         79:1f:1d:96:bd:f8:60:da:3f:ad:c0:8e:4e:ba:c5:0b:50:74:
         50:21:71:b5:ec:f6:fc:cb:d9:64:52:a7:8c:1f:43:16:9b:bd:
         c0:78:47:24:22:03:55:fb:ed:7d:72:7a:fc:01:00:cd:bd:8e:
         ff:a1:da:58:c6:b4:c4:97:c9:c9:10:b1:3d:30:5b:35:10:2a:
         1c:d8:40:d5:08:1e:38:ba:cf:01:13:c9:75:33:37:64:d4:22:
         39:50:a9:a6:68:26:e5:76:0e:3c:fb:f0:a6:e8:4d:82:41:ec:
         28:51:bf:82:a2:6c:fa:82:58:a3:c4:e2:bc:ed:ab:83:c3:ee:
         2e:40:13:44:4c:08:e4:f1:c3:b0:00:5f:57:f1:e2:5a:37:cb:
         41:72:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:43:03 2026 by rpki-client