Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa
File:                     3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa (raw, json)
Hash identifier:          yp2GNRBW0NjoaaOZb8eQwby83Uf2YcRRk6siCmApIlM=
Subject key identifier:   81:26:98:14:40:91:9D:A9:3D:DB:DD:22:E6:1A:24:71:31:F7:55:00
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3D9E
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa
Signing time:             Thu 06 Aug 2026 15:11:11 +0000
ROA not before:           Thu 06 Aug 2026 15:11:11 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     133448
IP address blocks:        101.55.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 14:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15774 (0x3d9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug  6 15:11:11 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a40f-446f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:d1:ca:a8:87:8e:54:ab:64:5d:79:c0:87:
                    8b:a6:07:88:bd:8a:b2:27:d6:25:7e:f9:87:6a:86:
                    fe:9c:75:ab:6c:ce:2f:83:28:6b:0d:53:2c:aa:78:
                    0e:e3:6c:8c:60:4b:26:0f:73:73:4b:85:4b:d1:db:
                    98:c2:fa:d2:17:9c:0b:97:cf:62:4a:72:9c:8a:95:
                    7d:28:e7:81:35:27:7e:8a:af:cc:e5:ae:40:20:07:
                    69:46:49:ff:1f:39:21:15:16:99:39:e7:41:c2:f3:
                    0d:89:4d:a2:6d:14:c3:89:4e:18:8a:5a:e5:95:e4:
                    0d:ec:4d:00:1d:0e:a3:c3:3d:b6:0a:e3:39:38:e2:
                    74:7b:04:4c:85:e4:ed:f6:c2:4d:d3:36:85:04:ef:
                    82:67:7c:b4:0f:5e:cc:9d:43:7a:5e:70:ef:58:7c:
                    74:56:49:6c:42:eb:71:12:b3:1c:7d:b7:34:c2:f0:
                    47:37:8f:97:eb:f1:93:12:b4:0c:e7:80:a4:c6:fd:
                    09:61:76:38:6c:30:b3:ed:d4:85:25:bb:9a:52:b1:
                    33:92:e8:11:63:74:49:af:89:32:1e:1c:a2:b3:24:
                    78:07:60:5f:d7:64:5a:a6:59:ee:07:67:7c:bd:f8:
                    97:63:d2:93:69:4e:8d:a1:4d:01:7e:5d:fc:e8:13:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:26:98:14:40:91:9D:A9:3D:DB:DD:22:E6:1A:24:71:31:F7:55:00
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.55.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:57:c4:4c:0f:41:ab:af:f5:58:1a:00:e2:f8:59:00:25:3e:
         82:58:d5:f2:b0:77:ad:bc:5a:dc:76:4a:6c:68:65:b0:96:98:
         f9:5d:35:2c:cd:83:4c:3c:bb:dd:d9:82:e0:06:8d:cf:06:fc:
         c7:b1:7f:d5:e4:57:1b:a0:ef:8b:34:64:1b:e9:40:06:92:c5:
         1a:ce:9e:26:ea:be:75:f2:fc:4f:4f:68:08:fb:55:3a:da:c7:
         28:83:98:32:3b:44:ab:e5:e4:93:89:4f:cb:a4:9e:c7:5c:53:
         2c:86:40:71:44:08:37:e3:4b:e9:b3:af:f0:73:bd:91:8f:f7:
         21:87:6d:82:be:d8:70:23:05:15:32:21:a7:cc:7d:03:19:5e:
         88:7f:ac:01:0d:ca:75:4b:43:9d:7f:be:64:bb:88:51:e5:95:
         83:28:62:ff:e8:6d:1f:ba:e6:38:9d:82:b7:8f:3f:2d:e2:96:
         3a:c9:af:49:8f:64:04:4d:db:34:1d:1c:83:c6:a7:1f:27:33:
         f9:79:4f:18:e5:8f:0c:6f:36:d0:44:4b:ab:94:c7:3a:b2:3d:
         8f:8e:62:94:c3:20:ac:27:cb:60:f9:02:b7:75:30:20:b2:71:
         2f:83:b4:2e:29:8d:b3:65:c2:31:33:4b:72:60:a0:e3:c0:61:
         4f:3a:e1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:12:43 2026 by rpki-client