Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/6193036675CA11F1B93BCE9E67A30FBC.roa
File:                     6193036675CA11F1B93BCE9E67A30FBC.roa (raw, json)
Hash identifier:          v1F73588I5TIbxHibltwszQp+2stCp9gQQEXZntRoSg=
Subject key identifier:   C4:BB:81:A2:C0:57:6D:CC:39:F4:DC:21:09:D7:17:33:4F:A2:49:4E
Certificate issuer:       /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial:       3635
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/6193036675CA11F1B93BCE9E67A30FBC.roa
Signing time:             Thu 06 Aug 2026 15:10:54 +0000
ROA not before:           Thu 06 Aug 2026 15:10:54 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     9949
IP address blocks:        134.75.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 14:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13877 (0x3635)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
        Validity
            Not Before: Aug  6 15:10:54 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a3fe-9701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f7:43:71:0b:76:83:86:ef:d4:98:5c:30:c4:
                    b3:fc:60:2c:38:dc:8b:84:ba:12:88:c3:3c:69:1d:
                    85:76:c5:e4:49:31:e9:95:fc:08:ca:a3:ab:60:96:
                    6a:17:9f:ea:d1:66:c1:0a:24:92:18:fa:79:a1:da:
                    3d:6a:74:83:f3:17:3e:c4:ee:b4:b9:3a:e6:b4:ee:
                    46:47:2f:0f:9d:0b:56:b5:6d:b6:02:48:b8:f3:60:
                    d2:ce:e1:45:b1:95:cf:12:90:7b:18:86:0f:67:98:
                    6e:2e:53:e9:a0:23:4c:b4:d0:8f:bb:1a:fe:55:9c:
                    4d:4e:6f:d9:33:72:75:13:ab:57:43:85:e5:c8:26:
                    b4:f4:04:df:4e:53:c5:8a:6f:f6:98:79:3e:21:e8:
                    c7:3a:5a:94:f3:49:9a:ad:81:80:b6:9a:1f:83:c9:
                    e1:ae:4b:08:ed:a3:c4:4e:ee:f0:36:7e:5c:e8:6c:
                    38:7a:e0:5e:7e:23:b6:09:11:87:16:cb:00:88:ed:
                    8e:c8:27:c8:1c:93:8d:85:f5:1d:9b:a4:ca:10:5a:
                    34:44:96:90:5e:36:49:83:13:9d:37:ca:5f:40:52:
                    a2:29:ff:ea:37:b4:e2:7c:35:08:3a:9f:12:a1:85:
                    6c:ec:2f:03:0f:49:57:e5:60:74:6b:c2:11:80:44:
                    d5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BB:81:A2:C0:57:6D:CC:39:F4:DC:21:09:D7:17:33:4F:A2:49:4E
            X509v3 Authority Key Identifier:
                keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/6193036675CA11F1B93BCE9E67A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.75.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:39:60:4d:51:61:fc:3e:60:22:36:0b:14:55:92:b5:a5:78:
         b4:3a:5d:b1:86:c0:47:91:ec:ee:8f:fc:df:0c:d2:e7:43:c4:
         42:87:d2:f5:a5:b2:a3:b2:35:61:63:77:25:59:84:ff:45:ed:
         49:c9:21:9c:a9:e7:88:10:b6:4b:11:f2:f4:d4:6c:e6:9e:5d:
         07:54:55:fc:d0:ca:87:70:8d:a4:ce:c4:cd:7d:77:6f:05:fe:
         32:0f:d8:43:00:17:d3:0b:0d:dd:28:f6:8c:ba:b2:35:4b:83:
         c0:75:61:3a:00:9b:a2:73:07:72:e5:f6:ce:b7:a1:fd:1a:90:
         83:54:77:7d:e8:0e:ec:a0:7e:0d:3a:68:fa:37:a9:00:50:a6:
         8f:68:41:c8:0f:c3:87:01:bd:41:22:14:9e:bb:ae:bf:50:79:
         eb:73:a7:03:78:0f:75:ba:f6:8c:bb:45:26:db:ac:8e:98:7d:
         20:44:6b:1a:0b:71:13:2e:fa:37:20:f3:a5:03:5b:4f:b0:71:
         44:35:46:4a:0b:67:c5:de:91:5b:1f:96:93:9f:65:5e:c1:24:
         29:f1:bc:e2:02:94:04:dd:f5:37:66:45:43:44:fd:01:05:05:
         31:60:8f:f1:24:79:3f:c1:fc:45:57:14:f2:25:59:14:48:f1:
         49:96:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:56:08 2026 by rpki-client