Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/26B79D64E9FE11EF8751AE17C4F9AE02.roa
File:                     26B79D64E9FE11EF8751AE17C4F9AE02.roa (raw, json)
Hash identifier:          CSwNiNiHBOdBkX8QVfEy5RdNRxWDtIIzMJX3lDPz73I=
Subject key identifier:   F5:AB:EE:5F:DC:86:81:5C:89:37:20:D8:06:35:E1:C2:EF:B9:B7:E4
Certificate issuer:       /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial:       01BA
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/26B79D64E9FE11EF8751AE17C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:25:20 +0000
ROA not before:           Mon 29 Dec 2025 04:23:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     64250
IP address blocks:        124.4.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
                          rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
        Validity
            Not Before: Dec 29 04:23:40 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48490-154d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0a:0d:df:4f:d0:c5:cd:da:0f:1c:f3:1c:f8:
                    33:e1:6e:41:48:04:a3:b0:c8:9f:3d:e9:3d:6c:0d:
                    2a:6f:05:0f:16:f0:8c:86:5d:1f:18:0d:8e:c2:60:
                    38:08:30:b1:c7:ac:cb:d3:eb:b5:e6:97:b5:88:87:
                    57:e4:36:62:0c:9e:b8:ab:75:b9:b6:34:b4:40:6b:
                    ad:88:68:af:5a:1f:64:df:0c:ac:01:cd:89:8e:46:
                    c8:a5:bb:08:88:49:c8:1d:b5:33:2b:3d:0b:1b:93:
                    a3:ff:2b:f4:cf:c1:17:b1:a0:bc:c5:54:d3:e7:ef:
                    2b:fd:05:17:16:59:38:a6:2e:b6:20:0e:a5:6c:5d:
                    c5:6f:95:ca:23:f0:53:e1:72:d0:d8:e7:02:cc:d2:
                    1f:8e:3f:1b:e0:9a:ed:e5:37:24:21:53:64:3f:89:
                    3a:9f:66:35:e1:ef:b5:98:a2:f1:13:4d:53:7a:1e:
                    22:a1:fb:88:1e:84:1e:27:d6:69:02:d1:93:de:bb:
                    46:e6:44:f2:57:f0:06:ad:2d:64:94:53:2e:a3:d3:
                    a0:79:95:6a:3c:59:df:a8:db:9e:6f:68:4e:55:72:
                    51:63:cb:9f:62:5d:64:13:6f:c8:c4:f7:78:b8:9b:
                    96:e2:4e:37:9b:21:e8:c2:93:bf:47:41:42:89:e6:
                    3a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AB:EE:5F:DC:86:81:5C:89:37:20:D8:06:35:E1:C2:EF:B9:B7:E4
            X509v3 Authority Key Identifier:
                keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/26B79D64E9FE11EF8751AE17C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.4.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:df:cc:ae:2b:dd:b6:a6:d6:3a:a9:31:d6:44:f6:21:b9:04:
         0a:a5:41:74:78:60:00:f2:e5:fa:b7:a1:09:99:09:64:9a:26:
         f2:17:49:73:af:75:c5:80:3d:e5:0b:98:73:db:ae:39:ac:cc:
         a6:3a:f3:b9:d8:af:e5:22:d5:4e:34:a8:0c:24:23:ee:0d:f0:
         ab:a5:be:00:82:63:f4:12:22:e3:47:cb:4a:b3:4d:fc:48:5e:
         56:a8:3b:e6:3b:46:72:29:89:6f:5f:c7:a9:24:cc:79:ed:30:
         51:92:95:6b:6b:c8:69:33:0f:91:48:a1:fc:81:0a:2e:9a:bc:
         42:11:4d:d3:ba:1e:b9:08:7e:86:02:ab:85:e7:e1:0d:93:61:
         51:09:ef:b1:16:d2:98:16:21:78:6f:f6:67:c4:5f:47:15:b8:
         72:ea:77:a6:45:28:f3:6b:ad:01:0e:28:7d:ef:3e:14:ff:87:
         1d:69:45:8f:66:95:2a:b6:c4:51:b0:07:4e:25:f8:c9:16:05:
         d7:31:6f:33:c7:5a:f5:29:24:59:4f:d7:cb:17:11:34:6b:43:
         c0:f2:31:10:5d:91:a7:e4:ca:c2:10:c9:ad:0f:ee:50:c7:fe:
         54:c2:32:a4:f6:cb:8d:5b:a2:f1:07:6f:84:82:d4:2f:8a:bc:
         1e:ef:d2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:02 2026 by rpki-client