Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/A297874813A911F1B9392CB0413D8C67.roa
File:                     A297874813A911F1B9392CB0413D8C67.roa (raw, json)
Hash identifier:          MxvTFf8SXvvxP5oPM6no80ur4w4Wx2WVPyl0DRP35J0=
Subject key identifier:   56:F9:30:9B:8E:ED:60:67:DD:85:9F:86:7E:9F:0B:EF:99:09:69:80
Certificate issuer:       /CN=A913BE1E/serialNumber=17393F20D13130F9544FE8EC1BB0F7E8805E824E
Certificate serial:       3D
Authority key identifier: 17:39:3F:20:D1:31:30:F9:54:4F:E8:EC:1B:B0:F7:E8:80:5E:82:4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fzk_INExMPlUT-jsG7D36IBegk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/A297874813A911F1B9392CB0413D8C67.roa
Signing time:             Mon 02 Mar 2026 23:25:44 +0000
ROA not before:           Fri 27 Feb 2026 06:57:52 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136396
IP address blocks:        144.79.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/Fzk_INExMPlUT-jsG7D36IBegk4.crl
                          rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/Fzk_INExMPlUT-jsG7D36IBegk4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fzk_INExMPlUT-jsG7D36IBegk4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BE1E, serialNumber=17393F20D13130F9544FE8EC1BB0F7E8805E824E
        Validity
            Not Before: Feb 27 06:57:52 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a61c78-4dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:9c:1e:71:0f:5f:17:e9:fc:6a:67:ab:21:
                    d2:ea:ad:fc:20:29:d6:02:63:62:03:27:ec:7a:b9:
                    2d:58:6e:b8:9f:b8:d2:5a:bc:93:f9:43:9f:7a:63:
                    04:7b:bb:73:26:89:61:0f:2e:16:4d:d2:7c:ee:ff:
                    9d:73:2b:55:3b:ec:ef:20:d7:8e:8a:92:f6:99:13:
                    e2:d6:b0:b3:f2:68:d0:33:59:82:73:ab:18:8f:75:
                    fa:6e:e2:f9:3e:c5:cf:91:66:1a:48:88:4a:e0:f6:
                    1d:54:1f:3d:da:1e:07:49:8f:81:9a:7a:e1:1d:43:
                    9d:4a:88:83:22:c6:c2:6a:2c:54:00:e6:2f:72:90:
                    92:f7:cd:ba:e8:3e:6e:97:53:59:c5:11:6b:4f:f0:
                    44:e8:da:c4:54:01:5a:e6:1d:97:64:f0:16:04:94:
                    37:3b:80:26:04:02:ab:af:f3:e3:2b:83:22:56:21:
                    79:5d:17:11:07:90:33:56:3a:4f:b1:16:65:b3:c2:
                    05:cc:54:62:a4:28:c9:21:b2:5f:87:59:2c:16:47:
                    57:10:75:ec:f6:d6:a7:29:df:8c:eb:52:c4:86:80:
                    ea:63:dc:31:f0:5c:16:78:35:dd:32:5f:1e:00:71:
                    36:26:23:cf:f5:7e:28:59:4b:0e:4f:f1:cf:60:bf:
                    80:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F9:30:9B:8E:ED:60:67:DD:85:9F:86:7E:9F:0B:EF:99:09:69:80
            X509v3 Authority Key Identifier:
                keyid:17:39:3F:20:D1:31:30:F9:54:4F:E8:EC:1B:B0:F7:E8:80:5E:82:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/Fzk_INExMPlUT-jsG7D36IBegk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fzk_INExMPlUT-jsG7D36IBegk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/A297874813A911F1B9392CB0413D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:f6:f9:2d:02:b0:78:4f:c1:60:5a:2e:e0:ff:9f:7c:e3:57:
         ac:62:5a:74:0f:c6:b2:86:43:ba:6d:5b:2e:78:c8:8d:4f:f1:
         6f:61:0a:7e:a8:3e:6b:e3:a3:bb:dc:6c:f4:f8:51:f8:1f:a7:
         74:3d:b0:63:6a:b2:c7:ff:f2:6a:77:7e:c0:1f:d7:5d:45:19:
         aa:e1:f7:61:f7:e9:fa:25:b1:23:5e:05:4b:9f:86:10:c5:48:
         5d:bd:48:49:fa:f7:21:fc:5e:af:03:44:21:66:35:9e:7d:ca:
         6e:35:64:d6:f0:6b:b1:db:61:a6:c1:b2:12:74:f4:59:b0:a2:
         d4:a7:37:b2:8d:5a:bd:1d:a2:35:ba:b2:29:e7:96:09:4c:fd:
         24:90:4c:c0:06:54:49:ae:80:bc:59:90:a0:c4:42:2c:5a:a7:
         03:e8:0e:12:1f:2b:64:ef:f0:12:b9:11:d7:da:e3:ae:b8:e3:
         38:05:96:ac:b0:8f:65:d1:df:68:0e:3c:31:87:35:4a:fb:ef:
         6b:2c:b7:80:02:09:7f:b9:1f:e4:e2:85:24:2f:e8:7c:a7:c8:
         ff:63:a7:9d:85:ce:3d:79:d6:08:41:a1:83:c3:66:24:ff:ed:
         66:f3:bc:b5:ed:73:b4:16:46:eb:14:28:a7:11:e8:31:a2:a6:
         fb:fb:2f:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 13:55:03 2026 by rpki-client