Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/167F2222E8D211F091D937E6616F56BC.roa
File:                     167F2222E8D211F091D937E6616F56BC.roa (raw, json)
Hash identifier:          hqoxp1DZQxlSqrDmlnlQZc0fxw5C7ZE4Da6abuSlt+s=
Subject key identifier:   BD:BB:77:B3:DC:6D:A0:A8:A8:7E:C0:72:45:22:CA:16:AA:2F:EB:38
Certificate issuer:       /CN=A916BCBA/serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
Certificate serial:       2B
Authority key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/167F2222E8D211F091D937E6616F56BC.roa
Signing time:             Sun 01 Mar 2026 05:52:45 +0000
ROA not before:           Sat 03 Jan 2026 18:29:07 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139016
IP address blocks:        144.79.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl
                          rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
        Validity
            Not Before: Jan  3 18:29:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d42d-0b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:34:ad:4b:c4:be:a0:06:8f:a6:14:59:50:12:
                    6d:85:7b:c4:f4:92:d4:31:62:5b:0d:ca:96:ed:f0:
                    78:e7:7f:9d:9b:8b:c0:12:ab:7c:ae:c2:eb:14:c0:
                    01:76:6c:75:91:a0:0f:9e:1c:75:42:e7:4c:29:57:
                    6c:5a:d2:6f:71:bc:cf:f7:4d:fd:1b:03:32:8b:ca:
                    02:b8:b3:b4:c6:af:ab:cb:51:da:b5:d5:5f:fd:73:
                    0d:0d:4e:ec:80:ae:84:87:36:b5:db:17:fc:80:ae:
                    f4:a6:71:91:ae:fe:27:63:40:e5:96:b7:1e:7e:14:
                    e1:02:e6:a9:27:74:a4:df:a6:86:b7:db:3f:32:3c:
                    cb:d3:32:18:98:c9:48:12:db:65:66:3f:f5:82:99:
                    e2:f2:b8:57:8b:5d:60:ee:ff:18:ac:20:27:7f:f8:
                    41:80:93:18:20:2e:43:d6:2e:7f:dd:20:a6:3c:65:
                    3d:f3:6f:b0:73:59:0e:70:a4:fb:86:39:16:c1:bd:
                    76:0c:56:02:a1:3f:bf:13:6b:a2:6d:9f:55:bd:73:
                    a2:5d:35:be:40:2a:23:72:65:6f:03:dc:00:d0:c5:
                    54:3b:d4:6a:62:36:06:e1:65:6e:7a:87:0c:c2:20:
                    28:0a:62:e9:b7:ea:81:f1:36:bb:b8:e7:02:44:9c:
                    1b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BB:77:B3:DC:6D:A0:A8:A8:7E:C0:72:45:22:CA:16:AA:2F:EB:38
            X509v3 Authority Key Identifier:
                keyid:19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/167F2222E8D211F091D937E6616F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:32:bf:6a:0e:b2:f4:1a:e0:11:c1:b2:8b:48:6e:1e:bb:ab:
         3b:4d:f5:6e:4a:42:f7:fe:04:a9:03:d7:b9:6b:d1:71:3c:11:
         0d:08:87:57:8a:10:ad:0f:a8:38:47:71:31:20:62:a5:73:73:
         4e:3d:32:ee:54:55:61:0e:e2:6c:71:2f:ee:02:ab:7f:02:a1:
         e4:ba:e6:76:92:92:aa:a2:48:3a:14:17:e0:62:07:7e:6d:d8:
         5e:ab:af:57:b1:73:6f:c6:06:5b:2a:90:78:a6:da:fa:6b:3c:
         d6:36:8d:e7:71:9e:6f:2b:16:03:c1:c8:9e:0d:ac:00:5c:1d:
         65:1b:8e:29:83:e6:48:81:21:41:3f:9b:0c:33:d9:4e:84:0d:
         21:ec:3c:ab:74:ae:1a:d2:78:34:81:1d:60:93:39:29:0e:62:
         3c:55:6e:2e:cd:6a:6a:e8:ff:07:10:86:f7:bc:a9:10:c0:b2:
         46:df:11:6a:c3:9b:db:a0:70:f9:7a:ea:a2:74:11:e3:93:70:
         07:90:17:8c:33:b3:d9:54:34:3b:ad:93:79:a4:f9:93:b3:e1:
         18:c0:f1:a5:0a:7e:34:a1:a0:8f:54:8e:e0:15:1a:a8:2b:6d:
         94:19:33:a9:2c:47:3f:05:92:4c:c8:f2:dd:1f:ad:a4:e8:94:
         76:b2:49:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:02:10 2026 by rpki-client