Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/6A76054C222211F19C27099F3C3D8C67.roa
File:                     6A76054C222211F19C27099F3C3D8C67.roa (raw, json)
Hash identifier:          MpiKoxYJnNsJjTtWTryJas1e5Scy/NyWv0hZW7Vx2Hs=
Subject key identifier:   78:66:57:EB:73:4A:FA:7F:91:84:84:F8:28:78:A9:A4:2E:5C:61:AB
Certificate issuer:       /CN=A915D062/serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB
Certificate serial:       34
Authority key identifier: 47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/6A76054C222211F19C27099F3C3D8C67.roa
Signing time:             Tue 17 Mar 2026 16:57:44 +0000
ROA not before:           Tue 17 Mar 2026 16:57:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     136396
IP address blocks:        144.79.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl
                          rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D062, serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB
        Validity
            Not Before: Mar 17 16:57:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69b98807-d4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:31:53:7d:d5:2e:21:29:be:2c:6c:ac:f4:be:
                    4f:0e:b7:08:72:33:7d:d9:e5:50:c2:13:6e:bc:27:
                    0f:3a:02:52:21:30:f8:fd:31:3e:18:d5:93:f0:cf:
                    0a:3b:94:f0:94:3e:7a:fa:c7:0c:de:e4:ab:58:a6:
                    38:38:58:0d:17:3e:e9:17:10:5a:93:97:ac:1c:95:
                    fe:a9:6a:7b:b0:3f:da:14:57:61:54:c7:a1:87:d9:
                    c8:29:1e:be:86:dc:67:ff:95:30:e0:9f:3b:af:00:
                    db:f1:f4:77:7e:c4:b7:c2:bd:a0:5b:70:91:69:7a:
                    38:3f:6a:70:66:96:f4:f1:0c:04:3b:69:56:6c:dc:
                    41:b3:fa:4a:22:97:58:78:58:a7:b1:35:39:35:a7:
                    45:d9:71:4e:66:9f:d7:90:12:59:38:4f:fa:be:fa:
                    a0:89:06:7c:00:dd:92:3c:26:b9:34:4d:43:8d:69:
                    f5:38:8a:09:3a:82:6d:f7:b4:26:d2:ea:bd:b3:86:
                    41:0f:53:c8:e0:83:3b:b5:37:1c:c0:e3:bf:3f:95:
                    72:f8:81:97:b6:5f:27:64:60:f6:9b:bf:de:06:02:
                    38:a4:29:dd:c0:21:cb:8b:c9:9c:23:b0:ef:de:12:
                    c1:6f:03:a5:38:e1:af:57:06:e3:0f:10:4a:70:0d:
                    23:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:66:57:EB:73:4A:FA:7F:91:84:84:F8:28:78:A9:A4:2E:5C:61:AB
            X509v3 Authority Key Identifier:
                keyid:47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/6A76054C222211F19C27099F3C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:3a:bd:f6:e9:8e:d0:c4:d2:e8:5c:c8:d7:f4:0e:09:cd:de:
         4b:39:5c:23:77:3b:a0:29:a8:a9:ca:66:00:63:cf:24:d9:a1:
         e2:47:81:4f:47:66:46:99:75:2c:ab:ae:b3:17:69:84:36:c8:
         22:8c:0c:df:be:ca:ef:1b:a7:c1:17:1b:8d:56:93:9e:10:79:
         f9:3f:40:7f:fc:ff:2b:b1:58:2a:b3:30:5e:6b:a6:5e:0e:7b:
         e8:84:d1:5d:45:77:cb:72:d5:97:45:3b:08:8e:b2:da:10:a6:
         e5:6b:aa:eb:d1:dd:52:72:bb:5c:73:4a:03:45:c4:5e:08:b1:
         f1:c2:86:98:22:bb:fc:05:e2:78:09:1c:1c:99:32:e0:f2:09:
         1b:2f:67:9a:d7:16:70:d1:9c:e1:f0:36:ff:ce:08:65:a2:61:
         ae:c8:26:bc:c3:ae:3b:4c:20:40:77:fb:6f:4e:e1:8d:83:1f:
         1d:f1:8b:f5:37:9b:2b:4d:20:64:ef:42:88:b7:47:db:e2:e8:
         e1:52:2c:27:b6:b6:cf:26:58:fe:c6:d2:b6:f6:d5:7d:51:b0:
         d6:fe:7d:de:d2:15:52:7f:1d:a7:2e:fc:ae:e8:cf:25:7d:06:
         3d:46:75:1a:fe:6c:f4:10:1f:9d:cf:40:b9:eb:22:19:58:b8:
         1d:cf:40:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:15:15 2026 by rpki-client