Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/AE977DF8337E11EFB3CCD72FC4F9AE02.roa
File:                     AE977DF8337E11EFB3CCD72FC4F9AE02.roa (raw, json)
Hash identifier:          GEFeKy8aH4tDYzifQsBwM7koyveNQSqrhuOkOUK426I=
Subject key identifier:   CC:12:87:5E:A1:59:92:B2:50:25:24:6E:A9:BF:29:8F:77:93:FC:BF
Certificate issuer:       /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
Certificate serial:       014E
Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/AE977DF8337E11EFB3CCD72FC4F9AE02.roa
Signing time:             Mon 09 Mar 2026 04:39:52 +0000
ROA not before:           Mon 09 Mar 2026 04:39:52 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135302
IP address blocks:        2402:1300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl
                          rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2
        Validity
            Not Before: Mar  9 04:39:52 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69ae4f18-addb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:e4:97:3e:13:1e:0c:9f:10:25:2b:c8:f2:
                    b7:7b:0a:7e:17:f2:22:61:f0:4a:03:22:6c:8a:a1:
                    37:70:19:8f:8f:c9:08:28:5f:0f:29:b2:d0:e5:e9:
                    3d:ce:05:ed:3d:c9:0b:8e:60:8d:6b:57:5c:ae:7b:
                    9f:9c:e0:f5:76:62:c2:87:c8:73:ec:1f:8a:2d:59:
                    80:48:3c:d9:6b:21:f8:10:cf:71:5b:5a:bc:e4:3e:
                    9d:67:aa:51:61:35:ba:37:2d:6a:d4:91:62:60:08:
                    ce:36:2a:ca:46:7f:35:c6:6e:63:39:c2:90:fd:77:
                    96:0e:7a:35:b4:9b:24:9a:3e:07:b0:f8:70:f1:13:
                    90:74:bc:e9:47:2c:1b:d2:b2:37:76:ea:d4:9f:0c:
                    3d:4b:ac:3f:61:76:d3:d1:57:6e:87:86:2d:c4:54:
                    dd:4a:4e:08:a4:a5:af:ca:af:81:d9:3c:1c:1d:11:
                    1d:77:e1:10:f9:25:94:6a:80:f5:9f:8e:83:80:f2:
                    c4:57:62:e6:07:6f:9b:b5:70:8b:ee:95:48:17:0b:
                    cc:9d:b9:a9:6f:fe:71:2f:c6:a1:66:04:a1:37:ca:
                    e9:bb:00:44:69:45:cf:5b:4c:89:5c:04:f8:b8:c9:
                    ce:47:45:19:db:3c:16:fe:09:6b:cc:1c:68:66:08:
                    be:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:12:87:5E:A1:59:92:B2:50:25:24:6E:A9:BF:29:8F:77:93:FC:BF
            X509v3 Authority Key Identifier:
                keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/AE977DF8337E11EFB3CCD72FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1300::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:b2:a9:88:96:01:00:f5:bb:9d:dc:b2:9d:f4:39:8b:7e:ee:
         6a:f9:ae:ba:46:6a:d7:02:56:27:b0:64:34:2f:5e:dc:fe:22:
         3e:9a:91:70:b3:bc:a2:45:e9:6d:78:ce:b9:c3:98:22:a4:5c:
         af:a9:99:b9:d4:55:4d:d2:8d:d1:85:c7:67:f7:e8:88:c9:b3:
         ad:3d:95:ef:44:e9:f4:4b:ad:c5:d3:2f:d9:ee:15:b0:21:57:
         a4:a5:9e:ce:1a:43:23:98:5a:cd:f0:5b:b8:8c:d3:86:1d:68:
         68:de:ad:51:73:49:62:77:34:88:4f:08:f6:e0:c4:5b:cf:03:
         29:24:e7:6d:44:85:d7:3e:5c:35:56:0e:0b:5e:32:f0:2f:6d:
         59:b2:43:47:8e:f7:15:22:b2:93:17:cd:77:72:2b:ad:cc:90:
         79:9d:4c:a1:ae:b7:04:ca:cf:45:ac:76:54:05:71:ea:04:03:
         e5:50:2a:3d:f2:e6:e3:7b:6b:78:b9:e4:71:ea:ac:c2:0f:42:
         0d:96:85:d6:49:1c:80:a4:56:d1:a9:62:14:80:1a:c1:c9:fe:
         2a:14:7d:80:e1:bd:77:31:bb:10:5c:68:89:f5:8e:2f:85:52:
         bf:b6:79:94:61:af:59:48:2c:65:df:e5:17:a2:22:17:43:83:
         30:87:2f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:04:58 2026 by rpki-client