Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/76F9B128436611F1B326F017BA833773.roa
File:                     76F9B128436611F1B326F017BA833773.roa (raw, json)
Hash identifier:          ZmRev3RrxAi27zysImEHaj9NpL9QKmlzCR0HYFANQfE=
Subject key identifier:   AD:6A:CA:3E:10:18:13:B8:81:79:DD:4D:DC:F9:54:76:AE:3C:1A:82
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3C8F
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/76F9B128436611F1B326F017BA833773.roa
Signing time:             Wed 29 Apr 2026 01:01:55 +0000
ROA not before:           Wed 29 Apr 2026 01:01:55 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     10068
IP address blocks:        101.53.89.0/24 maxlen: 24
                          175.176.143.0/24 maxlen: 24
                          182.237.58.0/24 maxlen: 24
                          203.173.110.0/24 maxlen: 24
                          203.173.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15503 (0x3c8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Apr 29 01:01:55 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69f15883-c305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:be:59:21:04:f0:e1:ab:5b:8a:fe:c8:97:58:
                    52:3f:fa:24:aa:ff:86:37:be:8a:e6:e1:5b:a0:e6:
                    fb:d1:bd:2b:f4:2e:04:8a:7d:04:28:34:79:6a:a4:
                    c6:71:7c:67:db:bf:f4:97:ba:c2:ef:44:42:40:09:
                    42:e5:ea:41:41:3b:54:ee:77:78:90:92:e1:14:70:
                    c6:a9:0b:fe:71:8a:e9:af:70:3e:a8:00:4c:34:ad:
                    60:b1:de:3e:85:de:a7:21:3b:21:33:fb:32:46:c7:
                    ac:a1:ed:85:eb:9f:d9:9a:54:cc:da:78:a9:84:64:
                    6a:94:62:cd:ba:8f:b9:c5:29:f3:7b:20:61:d9:0a:
                    3f:5e:06:ad:8a:ae:c2:77:42:fc:fa:59:c6:94:4c:
                    36:1f:11:e6:09:dd:6c:99:bd:2f:ee:5a:e7:9b:49:
                    b1:52:ce:67:06:86:75:67:87:44:1e:9e:06:be:aa:
                    04:4b:ba:85:23:74:8b:7f:ff:a8:1c:51:0d:d4:02:
                    e5:51:2d:f8:63:01:ca:28:7d:87:43:aa:ae:51:57:
                    7b:32:ac:69:de:4a:ff:3b:2b:a3:74:76:03:fa:90:
                    da:c0:62:ca:b1:16:6e:ed:66:55:58:4f:5c:d5:79:
                    7f:ae:89:12:63:42:16:a9:1a:da:bb:2f:24:42:5b:
                    d3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6A:CA:3E:10:18:13:B8:81:79:DD:4D:DC:F9:54:76:AE:3C:1A:82
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/76F9B128436611F1B326F017BA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.53.89.0/24
                  175.176.143.0/24
                  182.237.58.0/24
                  203.173.110.0/24
                  203.173.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:7a:55:f9:7b:4a:b0:39:09:30:d6:56:61:fd:61:2b:56:
         cf:8b:75:ad:bb:2b:6d:95:2f:d1:d9:69:a4:89:4d:98:c5:69:
         cf:79:ad:6f:ea:1a:a2:5e:2e:cf:6b:76:8d:65:17:92:ff:53:
         5e:84:8e:19:bc:b1:3e:ea:2f:98:af:cc:0e:a2:fa:bd:93:7d:
         40:1d:7b:42:73:c0:bb:8e:9f:f9:32:a5:4e:b7:09:8f:a9:9e:
         ec:03:dc:88:a4:be:67:e3:12:6c:42:d5:b5:92:4d:ab:2e:f9:
         37:f2:22:53:f9:f4:3b:6b:2f:12:42:a1:ff:97:3f:d4:4e:25:
         69:3f:95:fd:ab:a7:a9:e1:81:7c:43:9e:ef:fa:2e:92:10:3d:
         76:91:92:ad:41:a8:99:c3:20:c6:dc:65:0e:f0:3b:53:36:17:
         29:f3:42:a3:b4:87:c9:e5:0e:77:6a:ef:ae:38:8d:ec:b1:af:
         2a:62:0c:29:06:97:89:59:77:b7:d1:1b:9e:09:9d:ce:aa:5c:
         c6:fe:af:42:76:e2:d1:b6:81:7c:2b:b8:5a:fe:77:2f:5e:fe:
         da:c9:65:d4:e6:66:81:14:52:e4:27:02:b5:2f:cb:8c:b4:25:
         29:b1:21:03:6b:be:b2:29:f5:f9:a6:89:79:0e:ad:96:47:51:
         30:47:36:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:30 2026 by rpki-client