Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/4DAFC184ADC011ED897A4050C4F9AE02.roa
File:                     4DAFC184ADC011ED897A4050C4F9AE02.roa (raw, json)
Hash identifier:          v2saofmL0m7GfqQUIwDfIhLfQiWIxApSuK3jNuC63SE=
Subject key identifier:   7C:26:FC:E6:04:2B:B5:FC:A1:9F:4C:F6:4E:11:23:4E:6B:9A:01:F0
Certificate issuer:       /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Certificate serial:       0AA6
Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/4DAFC184ADC011ED897A4050C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:00:44 +0000
ROA not before:           Thu 30 Oct 2025 20:09:09 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     58877
IP address blocks:        137.166.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
                          rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2726 (0xaa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
        Validity
            Not Before: Oct 30 20:09:09 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4468b-07b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:cd:75:f8:61:a9:4f:0d:4a:6f:65:6e:44:
                    91:5e:27:aa:17:59:d7:dd:d8:78:f6:67:d6:ee:5d:
                    4f:b5:61:04:9b:f9:23:0b:73:88:f5:b2:b7:44:63:
                    ce:ad:9c:be:1d:46:75:c0:4c:a8:8f:51:f8:f1:63:
                    2a:6b:ea:5b:5d:93:af:f5:6f:b7:a6:aa:15:41:49:
                    fb:9c:11:a4:9d:3d:30:e0:7e:7c:cb:c2:50:1a:95:
                    f6:b8:69:7f:24:05:ba:bc:80:be:98:6b:eb:bc:d5:
                    f3:99:36:02:23:01:c6:24:d0:7e:9b:bb:36:4c:04:
                    a4:fc:ce:62:8a:a8:91:c3:8e:76:1a:f5:11:2c:ac:
                    4b:17:56:b5:c9:d2:f3:63:01:fd:56:12:21:7c:b3:
                    64:00:da:d0:be:b2:79:12:8f:df:15:06:97:80:ec:
                    c9:5e:ed:aa:a4:91:77:d7:90:c7:44:d2:98:d6:d6:
                    e8:20:28:d4:f4:fd:f6:7d:06:ab:a7:f3:95:c7:77:
                    0b:d4:a7:d7:0b:a9:71:8c:08:44:1d:e6:cd:d9:f6:
                    da:d4:b0:6e:6a:79:36:c6:96:ab:83:df:1a:21:bf:
                    c0:8e:58:21:93:15:d9:5f:16:ab:62:3d:8d:e1:b1:
                    21:93:8a:89:9a:2b:5f:84:e4:a1:c3:49:5c:40:d0:
                    fe:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:26:FC:E6:04:2B:B5:FC:A1:9F:4C:F6:4E:11:23:4E:6B:9A:01:F0
            X509v3 Authority Key Identifier:
                keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/4DAFC184ADC011ED897A4050C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a2:75:64:2f:72:25:a9:17:c5:fa:6e:67:ee:8f:ca:98:c2:7e:
         58:e4:96:d5:42:4d:0c:0e:e8:e7:52:f8:b0:82:46:76:bb:66:
         62:96:f3:aa:26:c6:cc:2b:85:ab:ec:cc:c8:68:02:dc:10:1f:
         e5:4b:fb:b1:17:12:71:7a:48:ca:75:f7:15:b3:d4:44:8d:a9:
         af:3b:f3:62:92:82:53:cb:3d:d1:72:7a:1c:a1:d9:78:31:e8:
         6b:a2:e6:91:4b:8c:44:b2:3e:68:b0:08:e0:99:c7:a9:be:79:
         f1:07:eb:c7:b0:a4:fc:6c:cc:50:83:0b:d0:13:5a:e1:52:bd:
         af:b7:1b:d6:0e:91:71:4a:40:5d:66:67:f5:60:07:70:9c:f1:
         05:39:aa:4f:eb:e2:17:94:f2:10:26:04:fc:d1:77:96:56:0d:
         c7:b9:a1:63:82:9f:bf:05:0f:35:a8:50:22:82:d7:2a:0b:9a:
         e7:53:d6:39:0b:19:b7:26:22:74:c6:32:c2:da:cd:09:07:83:
         17:41:3b:77:ed:68:b8:a0:11:c8:fd:19:96:0b:8c:d6:50:c2:
         1a:1a:d5:33:ff:00:94:41:f2:56:63:cc:d9:6e:eb:e5:43:4d:
         75:4d:d1:c4:c8:e6:31:ef:eb:a2:96:e7:c5:f5:4f:42:0f:77:
         c3:3e:f1:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:19 2026 by rpki-client