Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/069626A6ABC211EA9C9FC06EC4F9AE02.roa
File:                     069626A6ABC211EA9C9FC06EC4F9AE02.roa (raw, json)
Hash identifier:          Xj75wdoJA4H5cage9i7OZfhVlh4VIUA5DPJUPWxAGIQ=
Subject key identifier:   C3:1D:B8:6B:29:12:03:12:D2:48:F9:7A:0C:2F:EF:47:B6:07:DC:44
Certificate issuer:       /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial:       13FD
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/069626A6ABC211EA9C9FC06EC4F9AE02.roa
Signing time:             Mon 02 Feb 2026 15:11:22 +0000
ROA not before:           Mon 02 Feb 2026 15:11:22 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     54994
IP address blocks:        167.179.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5117 (0x13fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
        Validity
            Not Before: Feb  2 15:11:22 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6980be99-e203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ff:f3:97:10:a1:6a:dc:01:33:24:5f:19:d0:
                    09:88:e5:dd:ee:04:14:85:ba:62:d8:5a:2b:0c:d5:
                    19:75:70:33:4a:40:c3:79:ca:73:20:9a:bb:21:31:
                    45:36:15:a0:f3:f7:6a:1a:07:48:51:54:ff:86:ad:
                    a0:17:a0:34:37:58:48:09:6f:b4:4c:cb:90:c6:d4:
                    e5:c4:e1:1d:c2:e8:b9:7b:22:1b:14:e7:6c:ce:29:
                    28:36:7f:48:5e:01:c9:d8:19:f7:48:d7:61:be:74:
                    a9:b4:43:18:28:c4:fc:b3:21:fe:3e:bf:75:5c:8e:
                    e5:d4:cd:22:ac:54:3d:8c:5d:2a:d2:e4:89:61:62:
                    ac:4a:be:33:de:d0:21:28:8a:a8:c6:fd:aa:f6:78:
                    a5:96:91:39:80:6c:42:5f:55:cb:89:56:94:a9:33:
                    44:ec:15:7d:30:c0:9f:f4:b8:8e:04:90:58:87:76:
                    1b:6c:ea:96:30:72:2b:9b:4b:f5:a2:8b:78:68:fb:
                    fe:eb:cb:69:48:fb:9f:05:39:77:fa:5c:13:d6:68:
                    9f:29:8f:0e:ab:17:ab:5b:21:40:82:3c:68:15:42:
                    1d:84:23:e7:b6:27:83:86:92:da:13:c3:c1:80:f2:
                    de:a9:17:39:43:91:ee:ac:13:5d:f4:38:fd:c3:7e:
                    19:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1D:B8:6B:29:12:03:12:D2:48:F9:7A:0C:2F:EF:47:B6:07:DC:44
            X509v3 Authority Key Identifier:
                keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/069626A6ABC211EA9C9FC06EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:ab:bf:e6:4f:17:a4:43:69:4a:1f:72:3c:d1:8c:e1:c2:2b:
         cb:02:d2:f8:04:c8:72:31:61:d9:55:02:0a:52:70:53:87:ef:
         75:a9:54:7e:7e:10:8e:3e:e9:ba:a4:74:b2:c7:c5:93:5e:00:
         1c:80:62:44:ff:f5:39:be:29:4a:a6:9b:89:44:6d:88:dc:a2:
         9c:2e:f9:04:a5:4a:a4:50:0d:aa:32:93:a6:29:21:58:31:9c:
         5b:10:f4:fd:d3:c1:ce:e3:67:df:44:da:7a:1a:c0:e2:70:5b:
         15:c9:ff:98:48:75:16:15:29:ea:4c:08:94:25:5e:9e:fb:8c:
         44:56:85:4a:01:5f:8e:ad:12:83:90:68:99:99:de:07:64:48:
         1b:00:d2:db:46:6e:98:a4:43:e2:38:a4:3d:7e:bd:1c:e8:37:
         e1:62:34:a8:23:51:1c:6b:c9:1f:a6:17:81:5b:ac:a7:c0:2c:
         1d:18:c8:ca:81:fa:45:89:00:28:12:1d:f8:63:9f:c0:b6:ad:
         0d:ad:ad:d4:29:19:7f:14:c8:41:49:4f:91:32:40:26:1b:38:
         6f:dd:90:94:de:7e:00:b0:49:26:8f:a7:81:57:92:2a:b8:ea:
         33:4d:f0:43:58:09:a3:e6:45:3e:b4:30:da:d4:73:3b:7f:51:
         c6:94:ef:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:37 2026 by rpki-client