Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/6C330F2C7E3711F0BFE28E3AC4F9AE02.roa
File:                     6C330F2C7E3711F0BFE28E3AC4F9AE02.roa (raw, json)
Hash identifier:          BWaNHny2e3ZN/ISYIPnmyOoTBNJKkaA7dWCtdQu35jQ=
Subject key identifier:   E3:78:61:11:83:6D:34:D8:4F:E4:30:51:07:6F:53:5B:C5:8F:B0:42
Certificate issuer:       /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Certificate serial:       03D1
Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/6C330F2C7E3711F0BFE28E3AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:30:30 +0000
ROA not before:           Thu 21 Aug 2025 02:34:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     55408
IP address blocks:        192.82.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
                          rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977 (0x3d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
        Validity
            Not Before: Aug 21 02:34:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42356-ea5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:b0:24:d6:f2:9e:49:5e:34:0f:46:36:54:
                    ec:d5:d0:10:3a:23:89:0d:7e:36:61:e6:d5:78:9d:
                    06:2a:86:1c:8c:66:1e:fd:19:22:fc:fe:bc:10:c7:
                    fe:a0:0c:16:d5:f9:9b:a4:89:0a:a1:b2:e2:a4:23:
                    ea:4e:4e:4c:3f:fc:9a:1e:ce:a1:e4:7a:4d:93:60:
                    58:7b:c1:2f:ed:fc:d1:f0:59:84:66:e5:bd:fa:05:
                    60:bf:9b:2a:79:27:8f:f6:65:db:0b:ad:dc:09:35:
                    d4:39:45:80:6b:e7:24:be:8d:bc:e1:e4:f4:08:cb:
                    90:79:56:2f:75:d5:c1:c3:07:94:dd:8a:1e:87:01:
                    7a:5c:31:b4:71:d6:0d:a6:9a:fa:63:7a:c1:bc:48:
                    1c:18:20:42:58:11:86:8d:02:13:7e:f7:a4:2c:e0:
                    d5:22:f2:57:2f:0f:03:2e:ef:0c:d6:50:0f:1f:10:
                    bb:77:05:e4:3a:4b:ba:f1:a9:9a:d9:a3:7d:b5:bf:
                    ac:f5:64:f6:89:9b:1e:1e:ab:44:f8:41:b1:6c:3c:
                    e3:fb:21:63:57:c5:0c:f9:92:b4:10:94:0e:ec:16:
                    ed:f8:ce:5f:ed:6c:40:07:e4:ad:c3:8d:e4:47:cc:
                    c8:78:7d:20:37:73:f1:fa:35:a3:36:d1:39:b4:a7:
                    04:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:78:61:11:83:6D:34:D8:4F:E4:30:51:07:6F:53:5B:C5:8F:B0:42
            X509v3 Authority Key Identifier:
                keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/6C330F2C7E3711F0BFE28E3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:45:71:6f:c3:69:23:02:c2:1c:b1:00:77:10:6d:80:54:de:
         c7:f5:04:cc:79:e1:29:4b:76:07:62:7e:29:63:e3:30:e6:f9:
         79:74:47:93:9c:af:23:f8:9b:77:b3:9b:c8:0a:9c:77:90:c2:
         aa:40:a3:7d:0e:8c:6c:d3:92:e1:ac:96:bf:68:4f:3f:df:6c:
         cd:cf:73:2e:22:64:8c:ef:42:04:c2:4f:d4:4b:56:ae:43:8c:
         8d:ef:46:cf:57:f7:fd:e5:91:2b:ce:02:c7:85:b1:00:c0:70:
         26:28:1e:e8:27:40:99:4a:01:cc:be:a2:49:eb:c9:3b:24:27:
         73:57:a6:81:d5:8d:98:1b:3c:36:5c:51:8c:c5:80:c2:19:5f:
         82:9f:69:33:e6:7b:2c:92:b2:f6:26:a4:3a:b0:a7:5d:cf:4a:
         8f:a9:c5:6e:d2:08:55:8b:89:5e:18:a4:9e:fa:42:c1:cf:3a:
         81:40:8d:74:51:43:c5:81:8d:fb:51:97:bc:d0:2a:7a:b4:10:
         d4:6e:90:ff:9c:f1:27:23:93:35:9d:8a:af:01:bd:48:a5:38:
         e1:fd:b5:dd:4b:51:81:77:cc:d1:b4:ab:03:b0:e6:d1:ca:75:
         d1:2e:5f:06:9e:35:2b:f3:00:e6:8c:a7:af:5c:6e:a0:1c:2a:
         9e:9f:51:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:16 2026 by rpki-client