Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/9D1066F8474111F08A856E0FC4F9AE02.roa
File:                     9D1066F8474111F08A856E0FC4F9AE02.roa (raw, json)
Hash identifier:          3mUKIpK5ysDArEDV3XnxBsCBKd6j9sbsM4R0Fe9UpVo=
Subject key identifier:   BB:2C:AC:DA:63:F8:85:91:A1:7A:B9:B6:00:56:77:5B:74:5F:DC:8E
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       2039
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/9D1066F8474111F08A856E0FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:12:34 +0000
ROA not before:           Sat 30 Aug 2025 16:35:26 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     148981
IP address blocks:        121.62.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 16:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8249 (0x2039)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Aug 30 16:35:26 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48fa1-efa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:90:62:6a:27:28:cb:ad:75:60:4f:c0:1f:
                    0c:22:58:0a:6d:43:20:6c:a6:51:32:5a:41:a1:05:
                    4a:f1:3a:08:1a:6b:02:d9:f6:8b:b1:3a:c5:f6:9c:
                    6b:70:45:62:9e:b6:6a:6e:ab:c6:a9:28:13:69:b8:
                    1a:e6:92:e7:86:5d:11:c4:96:84:96:a0:ef:df:44:
                    2c:4c:88:ec:7e:fc:f9:21:38:f4:04:8a:c4:30:ba:
                    73:07:fa:ca:14:ab:74:ec:e9:13:90:94:d6:13:82:
                    f3:b1:3e:8a:0c:15:25:6e:eb:6d:59:2c:2b:6a:82:
                    cd:a9:d3:5d:e8:63:65:89:0f:8c:d6:5f:67:3d:13:
                    34:c2:6d:65:f7:6b:c8:2d:33:0b:11:11:bc:29:e1:
                    0b:5c:9a:bc:36:0e:a5:5d:b5:dd:b3:f4:55:02:cb:
                    a7:ae:d6:32:71:0b:90:23:60:1c:ce:de:62:ed:c1:
                    8b:d1:e3:1b:aa:52:43:71:89:cd:85:23:d2:6c:8e:
                    8d:63:f3:73:ea:03:a8:9c:aa:c3:5f:d7:de:71:c6:
                    33:7d:e8:62:9c:eb:da:c1:50:4d:9e:db:9b:b9:54:
                    08:da:e9:38:f7:57:61:51:66:3b:a8:c3:2d:9f:d9:
                    2a:15:d8:90:27:0b:f8:5e:39:5f:30:d9:7c:68:25:
                    2e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2C:AC:DA:63:F8:85:91:A1:7A:B9:B6:00:56:77:5B:74:5F:DC:8E
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/9D1066F8474111F08A856E0FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.62.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:b7:ec:6b:98:5e:81:ea:70:3c:bd:b6:7e:cc:f1:81:50:0f:
         16:18:58:66:a4:b2:a7:b4:e4:93:c8:6e:0b:6b:2d:a5:a8:5b:
         15:41:51:9e:40:b8:e2:a7:82:94:6d:3f:0b:cb:88:e4:e4:97:
         fa:bb:24:55:6e:f6:e5:4a:11:8c:6f:73:cb:7d:eb:c8:9b:81:
         ac:d6:63:48:e8:0e:95:0e:d0:96:63:16:29:94:54:48:d1:56:
         34:ba:12:69:9a:c6:93:14:47:87:ca:77:d7:4c:ac:28:2c:a3:
         18:6b:e5:f3:de:33:3a:db:35:b5:dc:aa:8d:ef:0a:da:ca:53:
         ba:51:75:a7:79:33:08:12:20:21:a8:c6:87:91:87:67:12:b1:
         8a:85:bb:d2:03:66:a6:57:93:32:1c:c4:2c:19:c3:7d:90:61:
         15:d0:46:5d:4e:e4:22:79:5e:f9:0c:d1:fa:39:67:f0:df:4d:
         ee:e4:dd:0b:46:7a:37:f4:bb:71:08:03:56:31:a6:9a:14:9b:
         43:2f:d1:f4:c2:f9:4d:74:cd:39:dc:a2:83:b4:03:49:da:7d:
         ac:f8:81:08:db:2a:6e:bc:31:da:23:04:16:4c:c9:ef:1a:ad:
         77:d5:8e:1a:86:4c:a8:25:27:19:e3:cb:41:47:2c:a7:f7:14:
         37:0e:8f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:47:04 2026 by rpki-client