Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/6F5F30B8B56111EE91C72951C4F9AE02.roa
File:                     6F5F30B8B56111EE91C72951C4F9AE02.roa (raw, json)
Hash identifier:          dah/3/ypf+hEWNUOIDeyyUD/b92XWbsj2RzQqTtYlqg=
Subject key identifier:   28:C0:33:7F:54:C7:74:BB:E4:61:D5:A2:0B:11:A3:18:55:10:8C:45
Certificate issuer:       /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
Certificate serial:       01B6
Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/6F5F30B8B56111EE91C72951C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:15:32 +0000
ROA not before:           Fri 15 Aug 2025 05:12:56 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     13517
IP address blocks:        64.124.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl
                          rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197277, serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
        Validity
            Not Before: Aug 15 05:12:56 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a58d74-8dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:21:65:9d:01:2b:39:5d:a7:82:70:98:63:
                    df:e0:9c:94:1f:6a:be:6f:2c:f4:76:f9:92:16:ee:
                    ec:a4:97:75:73:66:38:02:6c:ba:ae:38:74:e3:81:
                    00:b4:f6:bf:cc:ce:be:c2:a5:86:1e:7b:2b:ce:b2:
                    0c:1c:8f:a1:02:a7:02:f7:2d:9b:68:fc:5a:30:56:
                    84:d8:42:ff:38:e7:18:17:a0:7a:32:4f:c0:61:34:
                    99:9b:06:3b:ca:0c:ea:ac:b0:d7:26:bb:40:5f:6a:
                    44:7a:85:e8:da:85:4f:a4:f7:e0:35:32:ac:fb:4b:
                    e5:72:ef:c2:b1:fb:36:d7:f5:0f:2f:0b:6e:67:56:
                    a7:13:04:03:54:d4:aa:b8:73:01:49:d4:ec:ed:cd:
                    4b:8c:46:e7:3f:59:75:66:c2:b7:14:4a:07:11:9a:
                    84:ba:a3:d6:6b:6b:13:37:ab:5d:ef:6c:36:3a:4e:
                    07:6f:65:85:d0:44:97:55:7c:e7:82:64:fb:95:58:
                    8d:00:bf:59:49:35:42:f5:7d:c6:2f:4d:57:d5:b2:
                    47:54:6f:b4:d3:ba:59:f7:a2:e3:cd:e1:7e:fd:93:
                    32:19:f9:21:de:37:db:e3:0c:f8:03:71:8b:0a:a8:
                    62:a4:31:bd:a6:82:f1:d5:54:7d:a0:82:92:c9:54:
                    5b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C0:33:7F:54:C7:74:BB:E4:61:D5:A2:0B:11:A3:18:55:10:8C:45
            X509v3 Authority Key Identifier:
                keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/6F5F30B8B56111EE91C72951C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:f4:e1:69:40:07:d9:53:06:e9:8e:cc:a7:7b:54:7f:82:bb:
         34:6b:94:5f:d0:66:26:8b:5e:00:05:d3:46:2c:e4:e2:51:6e:
         04:f7:de:6b:fe:2e:36:2f:70:de:bd:33:85:c9:73:fe:37:58:
         2a:7d:a3:ed:4a:7f:14:8d:ce:07:55:ff:11:dd:73:10:03:5d:
         25:f6:0c:bb:06:1d:88:75:24:09:63:89:15:da:99:b0:ea:5a:
         27:5c:85:45:d3:06:b8:f8:a8:25:32:47:54:99:6c:29:1c:9d:
         0d:dd:08:e9:5a:51:7c:fb:00:4a:5a:7c:c4:d6:7c:eb:9d:cd:
         04:8f:2e:16:ec:a1:55:41:44:c3:af:45:14:59:e9:a5:15:6f:
         42:ba:f8:c1:2f:fc:d4:63:12:a6:f4:8d:d6:92:46:fc:57:f7:
         1d:b4:5e:b0:67:2f:2c:4a:34:63:c8:10:38:ad:2a:29:77:ea:
         3b:82:9c:a7:42:42:7c:98:a5:92:fc:f7:bc:19:f8:32:9a:c1:
         ad:ea:e1:21:cf:ee:54:a3:a5:69:10:42:f5:2b:6c:b5:ae:f3:
         f3:71:b0:84:15:65:c0:d7:c3:db:a9:48:04:8b:da:a7:92:ef:
         23:20:91:28:7e:d6:13:72:18:61:17:31:14:27:77:f5:ab:f0:
         30:0b:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:57 2026 by rpki-client