Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/E166AF6C7DBB11E8B2F55A1CC4F9AE02.roa
File:                     E166AF6C7DBB11E8B2F55A1CC4F9AE02.roa (raw, json)
Hash identifier:          HLjSIYtjXtx1taTVjzrvHsrBb9bP9yfl7hOESvIsT6Q=
Subject key identifier:   4A:E1:C4:A7:70:60:FD:45:30:C1:F8:EE:55:D7:84:7A:51:C7:CC:DE
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2BAF
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/E166AF6C7DBB11E8B2F55A1CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:22:49 +0000
ROA not before:           Fri 02 Jan 2026 16:12:52 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132681
IP address blocks:        49.231.25.0/24 maxlen: 24
                          49.231.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11183 (0x2baf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:12:52 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a49209-bc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:d3:88:8b:6e:80:ed:5e:ea:dc:98:59:9e:
                    09:26:8b:a0:e8:d5:aa:a9:90:df:e8:1b:07:91:d7:
                    56:03:11:ab:51:ad:2f:a2:72:7a:31:b5:09:bd:ca:
                    7a:02:47:1e:62:17:95:ff:6a:e4:0f:c2:67:d1:1b:
                    a8:b4:45:a6:04:20:ad:e1:82:3f:d3:70:09:a8:17:
                    8f:b2:4a:cc:b4:77:03:4e:a6:74:4b:72:80:7d:4f:
                    73:28:d3:8c:bb:ab:1d:a7:bd:18:51:e1:86:74:34:
                    b5:f8:df:5b:83:ff:d4:c2:54:17:f0:69:7d:92:e6:
                    5e:82:b3:97:b9:d9:97:92:a8:4b:5c:9d:b4:bb:42:
                    1d:b0:38:4c:ea:f1:46:17:89:56:b9:bb:ce:d9:a8:
                    f3:88:86:cb:a0:da:91:df:e0:9d:02:78:31:0c:2f:
                    85:2d:be:e4:55:d0:9b:e0:32:a1:1e:93:1d:f9:d8:
                    88:d3:eb:3c:b2:f6:b1:46:d7:41:e5:b6:a3:ec:09:
                    0d:80:8e:f0:95:62:13:1f:66:1a:62:b4:05:27:82:
                    f9:b7:e6:db:18:fe:f0:90:1b:3e:d2:39:85:f4:89:
                    e3:a5:12:af:56:55:e0:f5:bb:44:f9:f7:c0:ec:e5:
                    0e:2b:94:74:c4:c0:46:3a:1b:5c:80:ec:ce:ec:e8:
                    69:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E1:C4:A7:70:60:FD:45:30:C1:F8:EE:55:D7:84:7A:51:C7:CC:DE
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/E166AF6C7DBB11E8B2F55A1CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.231.25.0-49.231.26.255

    Signature Algorithm: sha256WithRSAEncryption
         a9:9e:c3:b9:ed:26:51:6a:6b:72:e8:0e:2b:7d:ef:af:9e:cc:
         6b:c0:0b:e1:65:db:03:4e:9b:ea:f6:3f:8f:4d:59:5d:0e:27:
         fd:05:0a:88:a3:20:2c:a6:40:2d:5e:02:d7:c0:88:42:c4:b2:
         e1:8a:ff:ff:9e:ba:07:57:3b:5b:c3:bd:f6:c3:5c:81:64:65:
         8e:3c:ae:2c:9f:b4:86:c8:6c:33:b7:ce:7e:c6:c8:a1:96:c7:
         61:b2:e4:3f:25:4f:4a:ee:75:c1:a7:62:87:8d:58:44:74:52:
         b6:e1:1f:b6:53:7e:62:06:6b:9d:70:37:0f:fd:bc:f4:69:83:
         c5:37:9d:2a:ba:d1:4d:a3:8e:1b:2b:48:dc:f8:37:c6:53:a9:
         aa:d7:11:8b:26:82:84:69:7b:74:79:b0:72:f8:ad:be:69:76:
         39:93:52:65:c0:c8:e9:15:10:6d:3d:96:18:64:07:84:40:7e:
         31:67:ed:56:2f:10:68:01:c5:45:94:d6:9a:25:cf:21:66:9c:
         a6:c8:cd:1c:61:df:fa:7f:21:e4:7f:90:34:73:7f:ba:fe:03:
         76:39:3f:06:c9:03:84:39:56:8a:99:e9:22:3e:72:6b:0e:73:
         83:cc:17:0f:ca:2f:23:de:77:9c:b2:3d:8a:25:8a:fb:5c:60:
         92:3e:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:16 2026 by rpki-client