Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/0A5276E04BB611EE8F105367C4F9AE02.roa
File:                     0A5276E04BB611EE8F105367C4F9AE02.roa (raw, json)
Hash identifier:          n7TN1uj8n4gchzijD1pavgoeUAqPKAEFZXgfq3z3jG8=
Subject key identifier:   95:9E:3D:55:45:36:6C:14:EC:84:B1:41:9B:D0:50:6F:17:FA:11:EB
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       35C6
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/0A5276E04BB611EE8F105367C4F9AE02.roa
Signing time:             Tue 31 Mar 2026 16:13:44 +0000
ROA not before:           Tue 31 Mar 2026 16:13:44 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     5065
IP address blocks:        122.8.80.0/22 maxlen: 22
                          122.8.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13766 (0x35c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Mar 31 16:13:44 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cbf2b8-8058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:ff:17:02:21:1b:c7:2e:34:92:ab:b1:e9:
                    72:ad:59:b9:70:8f:05:f8:b6:ea:f2:ee:cf:2c:55:
                    db:8d:06:2d:50:60:c6:5b:e6:89:7d:3c:83:01:ca:
                    58:6b:91:d1:b2:3d:a4:53:5d:fa:01:18:43:88:00:
                    58:af:48:45:a6:d1:81:80:47:ff:b1:cc:45:09:84:
                    7d:51:96:e6:b4:af:31:69:00:ac:87:56:74:62:7c:
                    79:4c:59:53:78:bb:fa:91:8e:ea:37:17:1f:05:ea:
                    ed:16:6b:ac:2c:a4:c1:c0:18:1c:02:4d:09:a0:9b:
                    1c:44:b3:e6:f8:20:ce:59:13:7c:3f:9d:5f:aa:94:
                    ae:a4:30:02:af:25:d9:f6:ea:5e:1d:bd:0f:e9:cf:
                    3f:8d:8a:51:09:da:93:3b:cf:31:bd:60:b4:5a:ef:
                    b5:09:10:69:b7:4b:06:65:c4:51:64:45:74:6d:f5:
                    ba:48:5b:e0:40:ae:25:8e:6a:7f:b7:d5:bc:ed:66:
                    96:24:a9:c5:36:7e:f2:93:ea:0f:6f:b9:ca:85:91:
                    04:47:61:bf:3a:2c:a6:d8:3b:16:fe:ba:5e:cb:e4:
                    99:ce:c6:70:63:a0:f5:61:0b:af:a7:3f:1c:9c:9f:
                    fc:1a:80:9c:f0:a4:b1:66:ea:a6:c0:97:81:52:90:
                    8c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9E:3D:55:45:36:6C:14:EC:84:B1:41:9B:D0:50:6F:17:FA:11:EB
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/0A5276E04BB611EE8F105367C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:23:c8:73:94:3a:23:cf:07:31:cc:9e:e7:05:82:be:68:11:
         aa:03:b2:3e:e0:60:a4:02:91:a5:06:30:f5:65:7f:f0:c7:37:
         20:64:a8:1c:cc:28:73:13:d3:69:28:86:d0:3d:55:8c:35:97:
         bd:53:c9:b8:bf:2e:95:2a:b2:2a:05:65:d9:66:23:51:5a:4f:
         17:01:6e:ef:fb:54:6c:8f:98:8f:91:cd:db:ec:49:17:4f:eb:
         34:de:b6:84:0c:c9:38:7d:ff:d0:4f:9b:ea:e7:9f:69:3c:63:
         06:86:01:e9:1c:c5:a2:f9:33:89:ea:46:18:1d:d6:a0:6e:ce:
         27:7d:2b:7c:9d:20:ab:aa:29:1e:cb:c9:63:b9:ae:3d:71:09:
         f6:7a:ea:3c:94:42:f7:7c:cb:7e:15:02:2a:22:55:30:15:7e:
         69:10:6c:b7:b2:63:4d:a1:6d:0b:f9:dc:4e:0c:3e:3f:08:58:
         0b:95:7d:59:53:9a:96:7d:50:26:f9:eb:31:06:8b:33:e7:e3:
         72:1f:36:49:b9:de:d3:6f:46:00:49:db:46:39:4b:6f:f3:75:
         9c:e9:30:9e:71:17:76:ec:6a:48:5e:ea:c8:c5:06:36:a1:7c:
         25:e3:bc:34:88:a7:44:ce:69:32:f8:17:a7:02:95:88:3f:7f:
         6b:b0:d9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:49:49 2026 by rpki-client