Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/01C299E0662611ED94A8DA42C4F9AE02.roa
File:                     01C299E0662611ED94A8DA42C4F9AE02.roa (raw, json)
Hash identifier:          Ebcz0szc+qJ7hYkDqsXxSwbk8Yhl04m2PX1xj7QFIzk=
Subject key identifier:   9D:FC:74:45:64:22:F2:6E:9F:BC:DC:99:24:28:3C:CA:29:A9:46:C6
Certificate issuer:       /CN=A9131359/serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
Certificate serial:       02CD
Authority key identifier: E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/01C299E0662611ED94A8DA42C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 01:51:30 +0000
ROA not before:           Thu 03 Sep 2026 01:51:30 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     4764
IP address blocks:        192.150.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl
                          rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 01:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131359, serialNumber=E9576D32CDA19BB86F3C162EC9FD36D3FD25B9C1
        Validity
            Not Before: Sep  3 01:51:30 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a98d2a1-a721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6c:56:5a:69:2d:f6:fe:19:5c:67:41:a0:79:
                    b1:31:e9:e8:ef:ea:ff:89:54:d2:24:25:ab:a2:16:
                    af:94:cc:75:e6:29:80:1e:78:29:31:06:5c:5e:4d:
                    fc:0d:8e:87:e7:56:a0:2a:4a:f6:02:bc:e4:ba:92:
                    b3:4f:43:78:5e:6c:63:68:ac:3c:17:73:ae:7c:42:
                    08:01:be:be:63:ff:ce:88:3d:e9:5e:f7:3c:e9:23:
                    22:b8:a1:51:1e:d4:40:5e:fe:09:92:bc:5b:0a:4f:
                    98:bf:58:02:cf:19:17:cc:9c:27:8a:73:56:af:de:
                    7a:7c:21:09:91:d3:79:cc:72:a7:94:d5:f5:bd:1f:
                    fa:39:3f:e3:07:eb:c8:77:02:78:7f:a1:49:cd:55:
                    9f:9e:c4:ab:f8:d9:12:0c:ac:7d:5d:0c:c2:d4:d8:
                    63:8e:32:b3:85:4c:0a:a3:e0:29:b5:29:d9:9d:c2:
                    a0:6e:b6:0b:96:f6:d2:41:04:b5:e3:36:d1:7c:53:
                    fd:f8:9f:c4:77:86:90:ab:cf:03:07:e1:34:f7:50:
                    f7:f4:61:18:dc:24:1b:71:dc:85:12:e9:09:a1:1a:
                    ba:37:62:8e:81:d3:75:9e:05:24:40:2a:67:43:05:
                    c2:a0:34:f5:d9:25:c7:06:47:fc:ff:81:ef:71:b9:
                    7d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FC:74:45:64:22:F2:6E:9F:BC:DC:99:24:28:3C:CA:29:A9:46:C6
            X509v3 Authority Key Identifier:
                keyid:E9:57:6D:32:CD:A1:9B:B8:6F:3C:16:2E:C9:FD:36:D3:FD:25:B9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/6VdtMs2hm7hvPBYuyf020_0lucE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6VdtMs2hm7hvPBYuyf020_0lucE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131359/CA9A34B6662311ED91855D42C4F9AE02/01C299E0662611ED94A8DA42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.150.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:d9:cf:6c:f1:9a:63:98:1b:6a:4f:13:94:f8:e6:65:57:9f:
         74:46:ac:02:68:ad:b6:79:53:ac:21:33:27:5c:0d:a7:f3:49:
         49:a4:07:6b:cc:41:2a:7c:2c:5c:1e:09:d0:1e:33:1a:dc:74:
         03:d5:3d:16:25:ce:c6:03:f3:a9:a3:2c:53:d0:c6:bb:cc:75:
         d5:59:f9:8a:50:4b:05:f9:f7:84:a6:b4:d3:7f:42:96:9e:8d:
         e3:66:f0:22:1c:af:32:79:b0:94:45:42:6b:ec:a0:9d:fa:9b:
         11:0f:d6:3c:61:0c:43:f1:dc:6b:43:05:37:6e:cd:0e:c8:01:
         91:e9:28:d7:57:75:64:7e:33:cc:2d:d7:e2:f5:9a:cc:77:5d:
         70:c5:e4:d0:cd:b9:e6:1d:28:a3:77:28:9b:d4:7b:f0:62:37:
         c4:c0:8d:69:1d:a8:e3:91:21:dc:27:cd:f7:dd:dd:d9:38:36:
         c0:41:7a:7f:ae:ef:16:ea:99:19:a2:06:f4:c8:34:09:e7:1e:
         32:8a:97:3e:4c:d0:a7:2c:76:f0:49:55:b6:a8:14:8c:3c:1f:
         03:ad:3c:4b:71:99:2b:3c:90:c9:77:53:5f:4d:66:18:39:c6:
         9c:29:ff:a1:27:ab:4d:6a:10:6d:7d:ce:3b:de:b7:a6:53:1c:
         10:92:43:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:01:44 2026 by rpki-client