Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/3F2882786B9911F19129D9096D47A888.roa
File:                     3F2882786B9911F19129D9096D47A888.roa (raw, json)
Hash identifier:          LrMK47xAaSNKfir1pZggdafMp40B6KiAGZbM8Zztl8A=
Subject key identifier:   BD:99:2F:29:C6:BB:F9:E3:4A:81:06:33:16:5C:9E:30:65:7D:A5:91
Certificate issuer:       /CN=A91D2A6D/serialNumber=F6919381696AFB917D2A2FCE5F21C1D8533FF162
Certificate serial:       0A
Authority key identifier: F6:91:93:81:69:6A:FB:91:7D:2A:2F:CE:5F:21:C1:D8:53:3F:F1:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/3F2882786B9911F19129D9096D47A888.roa
Signing time:             Fri 19 Jun 2026 04:42:16 +0000
ROA not before:           Fri 19 Jun 2026 04:42:16 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     134573
IP address blocks:        134.65.126.0/23 maxlen: 23
                          134.65.126.0/24 maxlen: 24
                          134.65.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.crl
                          rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 01:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2A6D, serialNumber=F6919381696AFB917D2A2FCE5F21C1D8533FF162
        Validity
            Not Before: Jun 19 04:42:16 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a34c8a8-6a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:71:58:8e:f3:4c:bd:2a:a9:11:09:d4:e7:
                    16:a1:43:9f:bb:f6:25:06:f9:40:20:8c:4c:cc:61:
                    53:4e:8f:d5:08:b3:04:6a:4a:91:38:0a:a9:1d:a1:
                    15:85:48:36:e9:e1:1f:a4:c2:5c:35:6a:1e:a4:80:
                    5a:df:13:92:41:91:ec:4c:aa:b8:05:15:d8:4c:59:
                    3c:06:75:00:54:55:7c:7c:68:7a:6d:f8:4c:99:78:
                    62:64:44:68:a1:64:89:b8:7c:56:5c:5a:a0:ed:63:
                    d2:99:e5:42:14:23:9f:eb:22:80:18:36:54:f2:ef:
                    1e:0e:39:95:61:2f:db:84:73:5b:79:97:cb:2e:ba:
                    3f:c1:96:b0:0b:c7:30:d5:de:e5:4a:1a:ae:fb:c9:
                    b3:b2:d5:08:64:4f:87:3e:97:9d:ac:a8:09:18:2c:
                    8b:46:7f:dc:d9:02:5e:de:19:35:04:2a:b8:65:cb:
                    d6:31:df:a4:86:09:32:b1:8e:97:eb:bb:1b:f0:a7:
                    ba:8e:76:e5:3c:70:4b:83:06:3e:a0:48:f3:61:9e:
                    b9:37:fb:83:15:3b:38:f9:72:2e:bc:12:5e:48:dd:
                    34:d6:7f:71:7d:fa:f3:a4:29:cd:d3:ab:da:de:62:
                    08:be:e3:6a:0b:9d:90:f8:33:67:73:df:3f:79:85:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:99:2F:29:C6:BB:F9:E3:4A:81:06:33:16:5C:9E:30:65:7D:A5:91
            X509v3 Authority Key Identifier:
                keyid:F6:91:93:81:69:6A:FB:91:7D:2A:2F:CE:5F:21:C1:D8:53:3F:F1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9pGTgWlq-5F9Ki_OXyHB2FM_8WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/50B0C28660A811F1A3B5EB8E7947A888/3F2882786B9911F19129D9096D47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:cd:13:9c:e8:68:ed:f5:45:2a:86:6a:b2:7c:09:fe:42:1d:
         f0:93:bc:37:4e:3f:f0:e5:7f:df:25:89:8f:c6:a0:9b:6b:e2:
         39:d7:0c:3e:a9:87:7a:31:1b:b8:4a:48:be:0a:ee:46:59:eb:
         97:96:ad:eb:c0:9a:4b:d0:02:cb:8d:c8:67:98:82:27:e7:d5:
         f1:59:a1:c0:99:de:75:58:f2:8a:0f:8c:50:e5:0a:e6:b2:7c:
         18:74:cd:60:71:fc:0c:22:06:32:fe:f7:af:f7:0d:f9:5c:43:
         70:0e:fa:4c:ac:1d:ce:63:28:a1:da:c0:c4:6f:29:88:98:8d:
         1b:ed:94:fa:89:24:fd:c0:96:79:f2:24:1f:f5:5a:f6:50:b3:
         1f:0f:c6:b9:d3:f7:d3:b2:95:07:fa:70:77:8c:98:e3:aa:96:
         53:86:95:f8:67:67:9e:63:64:d0:55:97:b2:b4:de:71:64:bb:
         b6:ef:bf:8a:3e:16:87:af:d9:d1:8f:fc:47:c4:e4:25:9e:77:
         f1:f4:c2:25:e5:07:b7:67:42:3b:fa:14:81:fe:eb:3a:b5:46:
         56:20:c1:08:79:59:1c:45:ac:68:85:02:d9:61:86:0e:ae:88:
         c1:8e:10:89:1d:8e:81:7e:4b:e8:99:03:cc:44:9f:c9:b5:a4:
         43:b2:12:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:18:37 2026 by rpki-client