Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8CC1AF1417DC11EE959DE671C4F9AE02.roa
File:                     8CC1AF1417DC11EE959DE671C4F9AE02.roa (raw, json)
Hash identifier:          wyS0hB9hlamFhnUTh6Gv6KcrrBw3EQZa9bUf+tLTABQ=
Subject key identifier:   FA:7F:E7:39:FD:10:90:72:EC:25:3C:7B:A5:5C:1A:61:A4:A0:74:A8
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0DC0
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8CC1AF1417DC11EE959DE671C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:42:15 +0000
ROA not before:           Sun 02 Nov 2025 19:08:17 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     65013
IP address blocks:        58.26.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3520 (0xdc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Nov  2 19:08:17 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48887-b612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8f:85:ee:cb:7a:26:13:fe:b0:39:b5:a8:8d:
                    6f:1a:c1:da:a9:b9:fc:e1:c3:f4:f8:39:02:4c:ef:
                    2d:4d:96:ee:86:c9:27:e3:3e:0e:83:eb:18:50:22:
                    f2:9b:db:4f:54:84:e3:3a:be:70:8c:4e:46:1c:21:
                    48:e2:36:b0:ec:e0:8e:17:32:dc:bd:96:d4:b2:f2:
                    5a:18:46:be:4e:cf:57:a2:c8:86:f0:66:bf:f3:51:
                    5c:53:12:4e:db:6e:dc:bb:ee:4e:0e:d9:a4:97:8a:
                    9a:f8:88:03:c4:90:04:3d:0e:62:9e:25:73:04:3d:
                    44:be:bf:c0:9f:b1:f7:77:31:f6:db:21:5d:e7:cc:
                    8d:b4:6d:b9:90:fc:a8:1f:da:84:95:c9:7a:01:18:
                    59:52:c3:c0:9d:16:85:62:0b:41:70:3b:a7:34:99:
                    23:e6:be:c3:52:f9:c3:bd:c7:6e:74:ba:c2:e3:b6:
                    8a:e7:32:e0:1f:12:b7:9b:b9:19:82:a7:e5:40:1f:
                    da:b8:1e:76:08:88:77:87:69:eb:f7:0a:db:17:05:
                    25:37:43:01:da:1c:c9:5f:c3:e4:8a:4d:8e:56:1f:
                    2c:d5:e8:22:45:68:07:71:5f:e5:68:0a:04:b8:1a:
                    62:e9:e0:c1:f2:9a:63:cb:81:49:16:9a:d3:1e:a6:
                    b1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7F:E7:39:FD:10:90:72:EC:25:3C:7B:A5:5C:1A:61:A4:A0:74:A8
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8CC1AF1417DC11EE959DE671C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.26.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:fb:6e:f0:97:17:4c:e1:25:03:03:03:3d:56:47:e2:22:a3:
         c7:0e:45:f6:b6:24:ef:7b:dc:ba:4f:3e:06:39:eb:f7:30:21:
         1e:91:fa:56:d6:ff:07:fc:ee:6b:14:47:71:0a:d9:d8:20:7a:
         b7:cb:ce:c8:37:7b:14:79:cf:0e:e0:f5:ee:fd:df:8f:30:20:
         0b:43:54:1b:bc:38:e3:5f:5f:28:f3:48:cf:38:4b:54:16:f4:
         d7:65:2a:05:38:87:85:21:30:79:dc:f7:a3:34:c4:8c:d6:fa:
         e2:95:94:2d:66:5e:c0:f7:ee:ba:b0:4a:f8:a7:3a:17:73:e7:
         6b:90:b0:1e:00:62:1b:fd:70:57:ff:d6:38:32:36:c7:0d:ae:
         73:40:12:1d:2f:6c:08:25:e9:0c:0d:99:ac:91:a0:64:7b:e3:
         a3:41:e3:e1:f8:4d:22:42:ab:5e:95:f0:5e:d7:bc:cf:72:80:
         b4:ee:69:82:b5:3b:c7:4f:27:42:b6:25:76:f2:48:5a:ec:df:
         27:62:e2:76:56:80:55:6c:67:5e:7d:c5:7b:eb:b4:7e:dc:9e:
         a2:10:30:e4:0f:68:c9:47:be:34:05:b1:70:ff:02:a6:27:6a:
         c9:76:c1:74:c8:26:66:98:fa:3b:1a:d6:57:49:29:6a:56:54:
         02:90:92:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:55 2026 by rpki-client