Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/5AD6391EBC1111EE92B7B02DC4F9AE02.roa
File:                     5AD6391EBC1111EE92B7B02DC4F9AE02.roa (raw, json)
Hash identifier:          hATJvamaCvPfNlmGPH6z8CZsqAHlGjD5jOnNXFe7igo=
Subject key identifier:   49:27:B9:4C:77:26:A2:5F:A8:8A:30:8A:B3:5E:F2:D2:BE:87:82:96
Certificate issuer:       /CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
Certificate serial:       01DD
Authority key identifier: C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/5AD6391EBC1111EE92B7B02DC4F9AE02.roa
Signing time:             Mon 27 Jul 2026 05:54:21 +0000
ROA not before:           Mon 27 Jul 2026 05:54:21 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     45960
IP address blocks:        192.82.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl
                          rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E070, serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
        Validity
            Not Before: Jul 27 05:54:21 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a66f28c-a08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:ff:8f:7b:c8:fd:51:24:1a:fb:68:02:72:
                    b2:13:4a:92:ee:7b:fd:66:d5:1b:11:40:47:33:e3:
                    e2:51:0a:ac:bd:8c:83:a2:0f:34:5a:d7:27:cc:7c:
                    a6:30:a3:f8:0b:30:07:3f:50:d0:08:5f:b1:27:e3:
                    38:17:d5:92:75:42:28:d4:59:34:d7:f0:1f:c1:02:
                    a8:7a:c0:a0:48:43:ea:1e:0c:79:d3:46:d9:5f:f6:
                    b6:52:91:2f:10:2d:d4:ee:f9:47:00:e9:6b:b3:48:
                    86:b9:9e:18:cb:f9:b9:4b:b7:8f:12:01:09:d7:34:
                    2c:ff:ee:cb:da:2a:0c:af:f6:d2:5d:18:1a:b3:f5:
                    a8:df:09:f6:9d:f4:ca:98:5d:20:ff:d0:5a:1f:f5:
                    6a:4d:61:1a:e4:a5:1c:41:12:4e:56:cc:be:3c:f6:
                    04:19:19:f6:30:17:4c:a1:1e:e9:17:28:f9:f1:b0:
                    b8:21:d0:fa:df:9f:37:5d:76:f7:71:4c:58:79:ac:
                    6c:af:22:86:ee:a0:40:f5:d2:2e:fb:8a:53:c2:f1:
                    2b:27:b3:37:1f:96:d4:6b:32:17:1f:d9:c5:15:06:
                    21:c5:e9:9f:33:38:9c:77:e7:78:05:19:39:86:e8:
                    b9:35:cf:e2:01:25:66:a1:6e:1b:32:49:e9:4d:11:
                    15:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:27:B9:4C:77:26:A2:5F:A8:8A:30:8A:B3:5E:F2:D2:BE:87:82:96
            X509v3 Authority Key Identifier:
                keyid:C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/5AD6391EBC1111EE92B7B02DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:be:79:e5:ed:8b:81:f3:cd:45:54:11:12:c5:f4:a3:f4:95:
         49:39:d7:45:bf:b8:e8:4c:22:ca:a9:5c:e0:f5:4f:97:1f:a3:
         c2:1d:51:e9:61:21:4a:40:7f:da:d3:a6:e3:85:3d:93:75:66:
         46:48:18:20:e9:dd:d5:41:e7:6c:cd:6c:58:5a:85:e6:f7:9f:
         7c:b1:56:9d:6d:11:94:a6:6f:4c:95:9a:a9:e6:a6:fe:1e:7d:
         1a:74:b9:ea:85:f7:cb:89:6f:0a:5f:0b:c4:c6:0f:a2:2b:27:
         b9:b3:72:b7:9a:0f:5a:7a:d6:f7:eb:0a:fb:a5:b1:e3:f2:b3:
         12:64:f3:27:35:6d:44:4f:e5:86:f2:73:94:f5:f2:6d:d8:fe:
         a1:60:06:8f:9a:e0:c8:2e:79:6a:83:e2:51:d2:b2:8e:d7:ca:
         a7:66:10:df:4a:74:4d:ef:e9:9a:7f:81:81:4e:f9:84:b3:16:
         d6:b6:a2:00:36:60:f1:83:0e:86:78:28:df:0e:a7:07:cb:52:
         9e:f7:f8:41:c1:3d:c9:4c:ab:78:9c:08:37:b2:72:f7:d5:d6:
         dd:2c:f8:d7:13:fe:b1:7a:12:94:29:4e:83:ee:b3:2c:48:8f:
         7b:9d:8b:a1:43:69:4b:e1:31:e2:94:c1:8e:4b:14:5f:09:ef:
         66:7d:9f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:20:27 2026 by rpki-client