Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A63A29461AF11EAB55FB65CC4F9AE02.roa
File:                     4A63A29461AF11EAB55FB65CC4F9AE02.roa (raw, json)
Hash identifier:          YF+zHUWyYSGIg++qcTmO/wWmDxDUqb6phOM7PCSzhS0=
Subject key identifier:   D2:83:10:13:C0:48:CF:E0:EC:AC:71:03:8E:3D:CB:7E:82:1E:00:D1
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B53
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A63A29461AF11EAB55FB65CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:28:32 +0000
ROA not before:           Mon 14 Jul 2025 14:51:02 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     36040
IP address blocks:        2001:fb0:109f:12::/64 maxlen: 64
                          2001:fb0:109f:14::/64 maxlen: 64
                          2001:fb0:109f:18::/64 maxlen: 64
                          2001:fb0:109f:19::/64 maxlen: 64
                          2001:fb0:109f:8007::/64 maxlen: 64
                          2001:fb0:109f:8009::/64 maxlen: 64
                          2001:fb0:109f:8010::/64 maxlen: 64
                          2001:fb0:109f:8013::/64 maxlen: 64
                          2001:fb0:109f:8014::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15187 (0x3b53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:51:02 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4935f-3de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:1c:13:7f:04:8f:31:61:5f:8c:4b:85:53:
                    ac:1c:c0:c4:62:ea:04:0e:e8:c1:88:0d:92:d5:63:
                    65:b4:d8:f6:47:46:b1:0c:d4:aa:fe:12:ed:e2:9a:
                    5f:d2:25:c7:23:58:1b:57:38:fd:4f:30:92:0f:e2:
                    9d:ee:7e:c8:60:7f:c5:a2:60:e2:b7:42:68:7c:28:
                    93:a1:07:db:da:9d:35:a4:70:26:32:c4:ae:f0:ae:
                    29:15:fa:4a:12:e3:c2:e2:96:d1:71:e5:b3:f7:70:
                    a6:53:ca:e4:72:1a:28:7d:bb:9c:64:da:d9:bc:4e:
                    5f:e4:a7:96:5e:47:60:a6:ef:99:40:3d:6a:d3:2a:
                    3e:ef:81:25:d5:b0:b3:1e:f3:e0:bd:02:af:b1:01:
                    af:7c:52:a1:04:28:45:ba:34:7d:ec:7b:05:c6:ea:
                    01:b9:09:8a:8b:61:32:b9:50:dc:2c:e5:15:76:80:
                    0d:e5:85:c6:27:31:d8:af:85:b2:74:97:80:59:9e:
                    de:83:be:40:57:ae:b3:bb:52:7e:61:fd:04:97:38:
                    01:23:ea:56:d4:52:90:d7:cf:cb:bb:4c:f1:c3:47:
                    c3:a6:a7:18:60:04:44:c7:8d:27:24:d5:82:7d:26:
                    b8:5e:85:b6:91:62:e3:01:3d:10:55:aa:ec:ae:7b:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:83:10:13:C0:48:CF:E0:EC:AC:71:03:8E:3D:CB:7E:82:1E:00:D1
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4A63A29461AF11EAB55FB65CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:fb0:109f:12::/64
                  2001:fb0:109f:14::/64
                  2001:fb0:109f:18::/63
                  2001:fb0:109f:8007::/64
                  2001:fb0:109f:8009::/64
                  2001:fb0:109f:8010::/64
                  2001:fb0:109f:8013::-2001:fb0:109f:8014:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         60:ee:93:da:c0:d6:d5:41:35:dc:93:01:e5:ca:55:ea:86:52:
         6c:65:23:30:be:e7:94:82:36:01:ef:e8:fc:18:d0:c3:46:7d:
         5e:a4:b4:ae:49:35:9e:23:cb:6a:58:e6:ac:30:6e:8d:2b:69:
         65:06:8f:e4:68:68:f4:5d:5c:4a:2b:a3:8e:13:a8:3c:b1:f3:
         be:85:15:4c:ff:50:f6:5c:cc:a7:2c:5f:71:11:ac:e8:4d:88:
         d1:a1:57:f5:93:21:76:77:0c:79:2d:e1:e8:6e:a9:ab:32:03:
         d6:ef:b1:26:8c:77:d3:35:33:31:62:ce:09:b7:b2:ed:1c:ce:
         ff:14:d6:e9:a3:5b:e2:14:02:e7:83:50:a5:40:9c:0d:b6:81:
         46:db:c7:70:a0:73:c2:c2:86:ab:8d:89:23:cc:1e:8d:74:aa:
         70:ed:15:97:81:72:5f:c4:37:08:d4:10:0f:1c:99:73:54:cf:
         79:3e:b2:ab:e7:2e:2d:61:1c:58:80:1b:30:60:d3:10:30:1f:
         50:69:0a:12:29:77:98:f2:78:39:af:64:b9:9b:f1:1b:93:99:
         ef:4b:a8:ae:83:c4:ad:c0:19:c3:ea:9c:3d:a0:39:e5:24:e4:
         62:7d:30:1b:01:d2:d5:4a:85:5d:69:b7:3f:cc:d6:4a:c0:7a:
         b2:66:de:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 08:45:18 2026 by rpki-client