Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/0886DE60D4D311ECBE99375AC4F9AE02.roa
File:                     0886DE60D4D311ECBE99375AC4F9AE02.roa (raw, json)
Hash identifier:          Q+M0wOPGgg1Hskurs4am6L9I8fPJGpOHtrzr/zGhOeY=
Subject key identifier:   4B:50:CF:2B:4A:DD:2F:7F:0A:B1:CC:E4:5E:B2:0E:4A:FF:2F:F7:1B
Certificate issuer:       /CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
Certificate serial:       0841
Authority key identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/0886DE60D4D311ECBE99375AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:52:12 +0000
ROA not before:           Wed 10 Dec 2025 20:14:00 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     132825
IP address blocks:        185.135.72.0/24 maxlen: 24
                          185.135.73.0/24 maxlen: 24
                          185.135.74.0/24 maxlen: 24
                          185.135.75.0/24 maxlen: 24
                          185.135.76.0/24 maxlen: 24
                          185.135.77.0/24 maxlen: 24
                          185.135.78.0/24 maxlen: 24
                          185.135.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 20:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2113 (0x841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072, serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
        Validity
            Not Before: Dec 10 20:14:00 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a4529c-cdda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1a:1f:57:0c:c9:19:f9:d8:89:6d:dc:75:bb:
                    3f:3a:81:13:a0:4f:b8:0b:b9:6b:7e:ef:2e:8e:a7:
                    4d:2b:e9:db:51:e8:d7:2b:9d:b2:3d:b9:b3:a4:8d:
                    4b:bf:09:1c:54:85:0b:84:5b:06:86:6e:2c:86:89:
                    f6:e6:96:24:6c:57:6b:4c:e7:b8:f5:a0:33:39:47:
                    a3:d3:67:bf:61:7f:78:fc:a3:52:fc:44:6e:0d:97:
                    65:4f:3b:67:ca:b4:7f:8f:88:21:4d:2a:e5:e7:ad:
                    68:a7:e7:84:5c:76:07:eb:a2:2a:8b:b1:c4:7a:54:
                    e7:48:3f:b5:df:50:85:19:13:de:cf:d1:5d:57:8a:
                    8e:a1:93:af:04:8e:0d:28:ee:d0:f6:ec:05:ca:9f:
                    6a:fa:9b:6c:f7:52:42:d3:72:3f:f8:82:51:c1:9d:
                    65:3c:56:a7:ca:34:52:be:25:ab:b5:b5:1f:af:38:
                    82:a3:02:d0:2f:6b:cf:74:6a:90:b2:67:7c:b4:ba:
                    83:0a:ff:ae:ee:46:a3:7a:b8:89:e9:ba:1c:fe:81:
                    aa:57:25:b2:41:68:71:65:c5:80:f5:b3:13:a9:6f:
                    0b:e3:4e:5c:15:12:6e:42:0e:f7:7e:1b:7c:1b:33:
                    01:d2:86:40:8a:71:33:aa:b5:5d:a9:5a:0a:3e:d0:
                    f5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:50:CF:2B:4A:DD:2F:7F:0A:B1:CC:E4:5E:B2:0E:4A:FF:2F:F7:1B
            X509v3 Authority Key Identifier:
                keyid:B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/0886DE60D4D311ECBE99375AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:7e:20:d5:4a:f8:87:bd:45:ff:d7:5e:7a:b8:7d:01:a3:27:
         e8:8f:63:2b:e0:b6:01:8a:72:1c:7c:c3:20:8e:de:98:a6:85:
         18:09:4e:bc:0d:6f:08:37:71:e4:f6:a6:f5:c8:1f:fb:3f:4d:
         72:82:47:f7:c0:1b:6c:79:9f:e7:45:40:55:11:59:d4:25:15:
         0d:b2:3a:22:21:f7:27:9c:0d:36:5b:fe:9b:6c:fb:d3:19:5b:
         aa:f4:f8:60:33:6d:e8:c0:fb:02:8f:50:37:51:f4:1b:43:04:
         1b:b3:8d:b7:d4:1c:5f:ee:3b:bc:64:87:10:da:5e:21:0e:bd:
         53:68:d8:63:e3:f6:22:19:a1:19:2d:ae:84:2a:24:0d:3a:2e:
         b1:3f:2b:aa:70:78:38:66:3c:a7:d4:10:73:87:29:e9:7b:98:
         98:26:9d:ce:4b:0f:5e:68:95:c5:f0:31:a3:cd:97:3d:65:26:
         0a:de:b4:a2:87:cf:be:9d:82:d6:de:a8:6f:f3:fb:0c:fb:cd:
         b9:29:2f:2a:a1:ea:8c:e5:1f:95:16:e1:29:b7:67:35:fe:e1:
         b3:23:32:3e:10:24:2e:d0:63:90:09:aa:67:56:c6:d1:18:59:
         6d:98:9d:09:f7:c3:dd:00:2b:be:e0:74:41:55:c3:72:52:52:
         6c:fb:36:e0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMwNzIxMTAvBgNVBAUTKEI2NThFRjZCMjc5MjlDN0I3RjVGQjI2Q0I5RUU2QTQx
MkNFODVERDQwHhcNMjUxMjEwMjAxNDAwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTI5Yy1jZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2hofVwzJGfnYiW3cdbs/OoEToE+4C7lrfu8ujqdNK+nbUejXK52yPbmzpI1L
vwkcVIULhFsGhm4shon25pYkbFdrTOe49aAzOUej02e/YX94/KNS/ERuDZdlTztn
yrR/j4ghTSrl561op+eEXHYH66Iqi7HEelTnSD+131CFGRPez9FdV4qOoZOvBI4N
KO7Q9uwFyp9q+pts91JC03I/+IJRwZ1lPFanyjRSviWrtbUfrziCowLQL2vPdGqQ
smd8tLqDCv+u7kajeriJ6boc/oGqVyWyQWhxZcWA9bMTqW8L405cFRJuQg73fht8
GzMB0oZAinEzqrVdqVoKPtD1uQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEtQzytK
3S9/CrHM5F6yDkr/L/cbMB8GA1UdIwQYMBaAFLZY72snkpx7f1+ybLnuakEs6F3U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wNjlBMDZFNjBC
NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi90bGp2YXllU25IdF9YN0pzdWU1cVFTem9Y
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3RsanZheWVTbkh0X1g3SnN1ZTVxUVN6b1hkUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjMwNzIvMDY5QTA2RTYwQjVDMTFFQjk5QTE3NTYyQzRGOUFFMDIvMDg4NkRFNjBE
NEQzMTFFQ0JFOTkzNzVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDuYdIMA0GCSqGSIb3DQEBCwUAA4IBAQAXfiDVSviHvUX/1156uH0B
oyfoj2Mr4LYBinIcfMMgjt6YpoUYCU68DW8IN3Hk9qb1yB/7P01ygkf3wBtseZ/n
RUBVEVnUJRUNsjoiIfcnnA02W/6bbPvTGVuq9PhgM23owPsCj1A3UfQbQwQbs423
1Bxf7ju8ZIcQ2l4hDr1TaNhj4/YiGaEZLa6EKiQNOi6xPyuqcHg4Zjyn1BBzhynp
e5iYJp3OSw9eaJXF8DGjzZc9ZSYK3rSih8++nYLW3qhv8/sM+825KS8qoeqM5R+V
FuEpt2c1/uGzIzI+ECQu0GOQCapnVsbRGFltmJ0J98PdACu+4HRBVcNyUlJs+zbg
-----END CERTIFICATE-----
Generated at Fri Mar 6 02:38:17 2026 by rpki-client