Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1B76F89E00A711F199FCBD49676F56BC.roa
File:                     1B76F89E00A711F199FCBD49676F56BC.roa (raw, json)
Hash identifier:          DxTTIGPXokdBz4fnw0MqP2gkJEzd4MGuMQqJGpX4FxM=
Subject key identifier:   48:41:C1:7B:9B:96:80:19:04:35:E9:85:7E:6A:27:9E:88:4B:AB:7E
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3C63
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1B76F89E00A711F199FCBD49676F56BC.roa
Signing time:             Tue 17 Mar 2026 05:05:54 +0000
ROA not before:           Tue 17 Mar 2026 05:05:54 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     5065
IP address blocks:        101.55.34.0/24 maxlen: 24
                          101.55.39.0/24 maxlen: 24
                          112.196.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15459 (0x3c63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Mar 17 05:05:54 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69b8e132-f7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:a7:e7:ef:bd:ea:8b:f5:3c:c2:84:86:fe:
                    cc:e4:54:9b:52:3b:25:7b:fa:d0:6f:17:12:ce:5e:
                    9d:6b:c2:78:a8:8b:df:cb:b1:e4:68:8e:0b:5e:63:
                    0c:31:16:33:69:64:3e:98:2c:73:26:42:57:b5:82:
                    08:0a:63:c0:2e:eb:33:4f:92:11:13:c4:7a:ce:ef:
                    22:98:bf:4d:7f:f2:f8:d3:30:6a:44:ef:4c:f5:a8:
                    21:9d:a9:7f:64:7c:65:03:ae:38:9e:59:89:f7:07:
                    e1:6b:f2:83:79:0c:90:24:71:6b:3f:66:31:22:94:
                    6c:54:f8:2b:f2:f6:47:68:12:d8:ed:d8:2a:8d:87:
                    52:0d:48:cf:2d:71:32:0c:e5:e3:c2:f3:ac:13:86:
                    e9:3f:fd:3f:9d:37:28:e7:d4:27:af:4d:3a:c6:82:
                    5d:ef:40:7b:35:4c:dd:3d:3a:38:cf:1e:15:5b:90:
                    63:8d:d7:ab:6e:1c:bf:7e:0b:a1:7e:64:cb:06:c2:
                    8f:4f:6d:4b:c5:fe:1f:92:6a:cb:0e:ee:44:d1:8a:
                    bd:1a:f8:e6:1e:c6:27:98:de:b8:f7:32:36:a9:b0:
                    67:97:36:92:ea:bd:d4:43:04:6f:3f:42:2e:d3:8a:
                    66:3b:92:6d:74:78:01:df:98:b1:ee:c9:b0:db:1b:
                    01:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:41:C1:7B:9B:96:80:19:04:35:E9:85:7E:6A:27:9E:88:4B:AB:7E
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1B76F89E00A711F199FCBD49676F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.55.34.0/24
                  101.55.39.0/24
                  112.196.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:9c:50:89:d5:03:49:e8:1a:14:81:d8:17:04:7d:bb:b9:92:
         bc:24:ad:76:1b:ff:9f:29:17:0b:47:85:f4:eb:e9:97:fa:39:
         70:54:34:e4:6d:3e:41:50:b4:cb:70:d5:ba:aa:a8:7c:23:6c:
         5d:ef:f5:39:21:bf:43:72:db:a9:1f:a5:2f:89:09:0a:2d:f7:
         74:e8:f3:8b:c3:9b:b2:b9:41:de:23:4b:6f:0a:f1:44:6c:8f:
         47:5c:55:17:9c:e0:84:29:67:a1:c6:12:75:ed:85:66:f9:7e:
         6e:90:15:da:b0:8b:0f:a0:a6:5f:7b:7e:55:29:6e:61:65:52:
         24:44:e3:45:15:30:22:0a:f2:ba:bb:20:f2:c6:5a:f7:40:48:
         a5:71:34:c0:f8:61:f6:81:cd:23:93:aa:ae:93:8b:fc:86:8c:
         53:21:15:3a:c9:60:bb:84:ab:f8:37:43:01:61:28:cc:35:b5:
         f7:4b:0a:ff:d9:49:36:cc:fe:b6:77:c1:1b:d9:7a:61:d2:18:
         2b:be:f0:49:a0:ec:24:87:44:b4:3d:3b:e7:45:05:3f:6f:89:
         91:95:c9:ad:8f:ab:2a:ac:34:45:4f:74:c9:dd:67:3e:58:78:
         eb:ba:0c:4b:cf:5b:9c:b9:60:27:58:10:07:09:d9:cf:c5:39:
         c1:72:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:18:55 2026 by rpki-client