Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/264A19E27A3D11E99D212E62C4F9AE02.roa
File:                     264A19E27A3D11E99D212E62C4F9AE02.roa (raw, json)
Hash identifier:          ZNlFmUEdjmspwVR3vJVp1pZtAd6tFL84c0KkBQzXTzE=
Subject key identifier:   CA:B2:8E:B2:2E:50:48:F6:89:A3:B1:8D:99:11:43:52:49:2A:E3:FB
Certificate issuer:       /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
Certificate serial:       3586
Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/264A19E27A3D11E99D212E62C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:12:41 +0000
ROA not before:           Thu 08 May 2025 15:21:11 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     132313
IP address blocks:        43.245.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl
                          rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13702 (0x3586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127726, serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
        Validity
            Not Before: May  8 15:21:11 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42d39-ac55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:25:d5:ba:6b:66:90:59:db:3f:ac:32:8e:
                    1a:66:62:9b:51:86:7c:f4:09:33:ba:72:71:da:6a:
                    f3:67:28:11:d9:df:e4:36:35:93:05:1f:bf:17:26:
                    f5:bc:e5:6d:ec:e0:05:ba:d2:2b:3b:81:ce:84:e7:
                    9c:61:4a:a0:7e:62:bd:ad:a4:86:c3:78:3d:5e:36:
                    df:cb:59:b1:c1:27:d1:3b:de:a1:ef:3c:ed:65:8c:
                    f0:9e:2c:67:98:0c:6f:a4:30:6d:c5:f4:a0:21:28:
                    7b:e3:81:3a:fd:8b:77:ce:46:26:4b:b2:e5:c3:66:
                    86:21:76:7f:8b:35:34:1c:fb:25:8b:cd:27:01:12:
                    72:8d:7e:62:ea:8c:f0:f8:7f:84:19:35:23:12:d4:
                    16:ef:1e:b8:46:2d:7f:69:f8:e8:63:6d:88:9b:7c:
                    ab:c2:c4:2f:b2:b5:09:ae:69:6a:86:89:87:bf:3e:
                    2f:46:c4:b7:7a:aa:d4:8e:59:1f:ad:a8:cb:e9:28:
                    b6:45:46:72:9e:89:18:45:7b:71:e3:34:c2:49:43:
                    6a:d5:dd:9f:e7:3b:22:cd:bd:77:09:d0:18:b3:b8:
                    ac:93:77:43:9b:17:d9:cd:ea:52:a3:3a:0d:6d:ff:
                    39:95:64:39:f1:6f:d6:82:18:4b:2e:e0:99:84:aa:
                    d2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B2:8E:B2:2E:50:48:F6:89:A3:B1:8D:99:11:43:52:49:2A:E3:FB
            X509v3 Authority Key Identifier:
                keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/264A19E27A3D11E99D212E62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:a5:93:9e:ee:6e:7b:de:40:16:b1:da:da:80:cd:96:23:f9:
         53:8a:81:37:30:5d:be:95:d7:4b:01:41:68:ee:25:81:88:83:
         0f:3e:c1:e8:a9:20:48:46:f1:17:59:b8:06:45:41:ef:91:5b:
         98:f2:40:07:b5:cb:f6:12:d3:05:12:c3:ed:fd:64:bf:09:df:
         d0:33:c1:79:4d:16:07:0c:e0:0e:51:0d:f0:86:0c:cf:dc:01:
         01:88:49:0c:81:c5:79:68:1d:f1:ca:53:1c:91:c8:6e:08:62:
         86:56:ca:0f:87:00:f5:88:10:5c:9d:ae:41:99:a7:db:4a:7c:
         98:1e:21:29:0e:e0:19:6e:d9:a7:7b:8c:4d:c7:29:e4:8e:bb:
         98:58:65:a7:9a:c5:20:4f:fb:32:fc:88:e9:b5:bb:05:2c:19:
         c6:13:fe:38:01:b7:f2:f0:b9:72:d2:ba:07:9f:b5:42:47:c3:
         33:ab:10:d1:1e:c9:e9:b3:69:6a:e6:5d:c0:a1:51:e4:63:b9:
         bb:c9:0e:8a:19:5b:dd:2a:2e:04:cc:ab:c3:80:6e:c2:d2:cd:
         e8:5c:e4:9d:13:f9:87:ac:ae:28:38:16:82:c4:d6:a7:15:96:
         d6:3e:64:f1:bf:39:9b:19:88:d8:03:a5:9c:31:51:64:63:23:
         50:e9:ab:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:42 2026 by rpki-client