Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/26D56F6425FF11EBAF634966C4F9AE02.roa
File:                     26D56F6425FF11EBAF634966C4F9AE02.roa (raw, json)
Hash identifier:          /kyIgZiBfNWT65KeLq4ju9c7Mhij++QBadeo1QUbPok=
Subject key identifier:   B5:E8:D8:3E:6F:CE:1D:16:C5:20:33:E9:A4:A5:88:43:49:AB:1E:E0
Certificate issuer:       /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial:       083A
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/26D56F6425FF11EBAF634966C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:44:32 +0000
ROA not before:           Fri 06 Jun 2025 21:41:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     10229
IP address blocks:        202.43.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
                          rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2106 (0x83a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
        Validity
            Not Before: Jun  6 21:41:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a45ee0-7529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:d2:e8:e8:cb:23:89:36:2a:81:c4:44:94:
                    ac:5d:3e:be:0a:30:93:94:fa:eb:62:49:2a:c9:1b:
                    98:60:98:9a:8a:be:17:5f:ef:79:2c:a6:b7:09:e4:
                    73:36:ea:14:0d:b5:f6:82:63:3c:3b:ee:ba:e6:25:
                    69:f2:59:62:bc:dd:68:ba:27:8c:b2:4d:fc:7f:84:
                    91:42:62:4c:1e:1f:d8:6b:6f:73:6a:04:bd:45:bf:
                    8e:1e:66:a3:07:e4:e6:b8:e1:c2:24:0f:cd:4f:f6:
                    6b:99:55:5a:e8:bb:34:67:b1:be:ee:5f:a2:72:c5:
                    d9:dd:31:d1:54:28:2c:d8:ba:9a:2e:0e:58:51:fc:
                    b6:27:17:34:f9:fb:10:91:f8:94:31:d8:bc:30:54:
                    f0:45:ba:53:9c:b4:2d:62:5e:88:48:b1:ab:3e:75:
                    f1:32:ff:63:91:e7:68:20:fa:40:8d:6a:66:94:d5:
                    ba:07:97:20:5f:2a:8a:ef:c6:68:77:38:9a:82:4f:
                    97:3c:7e:36:e9:84:5c:28:9e:d9:4c:97:9e:d3:97:
                    25:af:9c:e5:ad:6b:2b:6c:a5:87:8f:f3:bf:82:11:
                    d4:d1:45:f3:05:ce:22:3e:13:eb:20:57:0e:ba:3b:
                    d6:98:8b:2a:2a:ab:7f:66:16:5e:e2:d6:03:05:fc:
                    e0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E8:D8:3E:6F:CE:1D:16:C5:20:33:E9:A4:A5:88:43:49:AB:1E:E0
            X509v3 Authority Key Identifier:
                keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/26D56F6425FF11EBAF634966C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:cd:dc:11:dc:3e:99:8a:af:17:2c:d3:cc:38:58:57:88:79:
         d1:c8:62:60:b3:21:02:7a:90:6f:5a:03:ce:fe:52:5d:aa:95:
         5a:7a:97:17:a2:b7:16:c5:29:bb:d7:54:90:a0:26:94:c2:c1:
         06:a1:19:8d:92:c3:40:ba:45:96:2a:9c:a4:b6:cf:b1:34:e6:
         e7:75:12:5e:b9:cd:fe:72:52:a6:60:86:67:77:03:d7:7d:24:
         6b:45:3c:f5:06:07:59:3d:4b:0b:5b:38:a6:76:6b:e2:85:d8:
         bd:31:bb:c8:2c:b4:29:f2:96:3d:d8:ee:e0:c2:6a:20:7f:95:
         ff:59:ee:89:bc:63:0c:75:70:67:7c:57:f8:aa:0e:d5:29:78:
         1e:46:54:f1:2f:7a:e6:cd:5b:9b:d7:5b:b6:fd:ae:8d:2d:06:
         23:55:80:3b:a4:8b:54:4f:4a:91:bb:a4:31:0d:f6:4f:ea:a4:
         54:21:7c:f8:bc:9a:d7:9a:3a:de:38:ce:45:3f:64:e0:13:14:
         38:c0:ad:23:1e:c1:f3:77:cb:1f:8b:66:62:e9:74:26:b9:86:
         19:e1:0e:86:05:b6:7a:56:4a:53:10:46:12:a6:92:5c:ac:1c:
         27:7f:df:27:f8:a8:75:7e:4f:c5:2c:1f:0e:c0:f5:24:a1:f5:
         b7:fa:d8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:05 2026 by rpki-client