Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa
File:                     0FE13C92EBB411EE9D86095BC4F9AE02.roa (raw, json)
Hash identifier:          YDCHKzV19Ubj3YzIiUsWRoQfZaKPPY3EdfIFom647Eg=
Subject key identifier:   9F:5D:44:20:16:12:55:92:D9:8E:B0:CC:DE:BA:29:69:29:2B:FD:6B
Certificate issuer:       /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial:       018C
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa
Signing time:             Tue 03 Mar 2026 04:40:17 +0000
ROA not before:           Tue 03 Mar 2026 04:40:17 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     139623
IP address blocks:        2401:7f20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
                          rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
        Validity
            Not Before: Mar  3 04:40:17 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a66631-17df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c1:52:6e:96:f5:8b:86:be:8e:db:5d:fe:f4:
                    31:c8:69:b2:a9:41:56:2d:1b:60:fb:90:5c:3c:33:
                    21:c7:4c:bb:f3:b6:40:db:8f:cc:f4:8c:c5:2a:df:
                    da:d4:a7:2c:57:f1:37:b8:85:f9:98:2c:29:5d:66:
                    ba:2a:90:37:a2:bd:10:a7:03:79:a2:5a:aa:f7:e7:
                    9d:f0:e9:c1:0a:f8:01:bc:50:2b:d3:ae:2a:e0:48:
                    57:67:a2:75:ff:dd:12:af:d9:72:41:b3:71:af:dd:
                    d6:d3:99:ee:78:9f:58:92:6a:67:d0:3e:cb:80:13:
                    ea:f2:e5:28:fc:1c:48:a4:15:03:9d:25:78:7c:e6:
                    68:f7:0d:73:cb:47:13:98:63:21:eb:28:a0:b6:27:
                    da:09:b3:a9:8d:ec:ae:52:9a:bf:f5:55:a7:b4:ab:
                    56:90:cb:a5:18:ef:5d:1c:af:da:64:37:70:4b:e9:
                    e2:ee:56:79:14:00:7e:f2:eb:6c:ac:7d:d4:e4:99:
                    f6:d7:e1:0c:57:3d:81:bc:14:49:dc:f0:6d:09:e5:
                    c3:a0:99:1f:4e:4e:de:4f:8c:17:03:81:8b:66:b2:
                    42:2b:66:17:16:77:56:58:4e:2d:2f:41:ab:ae:e7:
                    94:39:9e:4c:0f:20:c1:3f:8a:ce:ed:88:d0:9b:ef:
                    43:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5D:44:20:16:12:55:92:D9:8E:B0:CC:DE:BA:29:69:29:2B:FD:6B
            X509v3 Authority Key Identifier:
                keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/0FE13C92EBB411EE9D86095BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:66:22:93:66:38:d4:b9:b4:fd:f2:26:c6:31:9c:33:36:70:
         07:81:e7:90:76:35:27:61:65:1f:20:24:23:3e:02:6e:bc:8f:
         a7:b7:95:dc:d7:46:36:21:3d:df:a3:9b:0e:c5:82:25:6b:eb:
         3e:50:fa:2a:fd:b8:8e:78:b0:50:bf:3f:e6:d4:52:09:3d:19:
         2d:9d:6b:41:55:a0:50:f5:cb:8c:23:8c:3c:e1:be:61:47:52:
         6b:d8:1b:ec:ec:2d:fa:72:de:74:11:70:d6:29:71:be:36:3e:
         e0:99:31:a5:d8:2a:16:e2:ab:2d:66:b4:38:19:58:f4:e8:51:
         7e:7e:a1:9a:23:81:f0:13:4b:dd:25:36:d0:cc:96:1e:bf:5d:
         01:8f:f3:5e:24:33:45:08:dd:c2:76:d1:0f:85:11:5c:52:6c:
         27:23:dd:46:50:61:30:21:1f:25:13:7c:cc:df:c7:b3:33:70:
         65:6b:4e:9e:ea:e0:84:36:b2:9e:dd:fd:fc:2a:17:3f:21:b4:
         83:be:2d:99:22:43:72:2e:ee:08:10:7c:83:59:eb:9f:8a:4a:
         20:06:13:47:04:85:af:c2:2c:58:f0:2a:f5:4a:62:a4:fd:8e:
         ff:d1:1d:8c:e4:7e:5f:9f:b8:56:bf:de:d8:5e:69:e3:9e:a4:
         8f:fb:b1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:34 2026 by rpki-client