Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/82A6D4C4373711F0B4C22F6AC4F9AE02.roa
File:                     82A6D4C4373711F0B4C22F6AC4F9AE02.roa (raw, json)
Hash identifier:          2dB8losCkzflgKLeyufFpykKeZbPyeG/91dZ2ar3/fk=
Subject key identifier:   84:61:0C:58:B0:4A:CE:BA:C4:B9:E4:E8:94:D0:E9:70:FB:86:3A:3A
Certificate issuer:       /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial:       02A5
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/82A6D4C4373711F0B4C22F6AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:21:49 +0000
ROA not before:           Fri 27 Feb 2026 15:17:14 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        65.254.64.0/19 maxlen: 24
                          66.116.128.0/18 maxlen: 24
                          66.116.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
                          rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
        Validity
            Not Before: Feb 27 15:17:14 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a483bd-9e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:1d:48:a2:8f:30:e7:23:59:6c:51:67:c3:
                    d8:c4:c6:0e:6f:1e:90:9d:18:10:f1:13:ca:82:6b:
                    36:62:a4:60:de:6c:58:c5:1f:09:d0:60:5a:ca:20:
                    2e:6b:76:a1:a4:a4:94:4a:6b:44:ae:75:bb:57:2d:
                    67:3d:60:6a:ff:27:86:d6:78:a6:c2:b1:94:d5:2a:
                    13:94:0a:a2:02:6f:41:08:c8:2d:2a:50:41:ea:26:
                    87:3d:7f:8e:24:34:d1:7c:9b:9f:64:eb:72:27:79:
                    03:03:db:dd:fc:92:21:be:33:ad:34:c6:98:53:1c:
                    f3:39:49:fb:98:fd:48:19:77:7d:3f:60:e8:76:32:
                    e7:13:f1:cd:ff:ea:f0:db:c6:31:de:5e:ce:01:53:
                    85:09:82:9e:be:ba:d7:ac:13:a6:ba:ed:14:97:44:
                    9b:0d:b1:af:8e:b9:33:42:f0:fc:f8:3f:de:3a:d4:
                    f8:97:c4:39:62:36:d9:ad:20:bc:52:a7:aa:0a:be:
                    d1:ec:8e:de:8d:8a:fa:16:7e:65:5d:81:91:b8:a3:
                    d5:e0:d4:89:84:44:77:65:94:bf:c8:e3:05:5e:65:
                    c4:74:ef:78:f6:3c:6c:cd:f3:0e:47:d1:c2:0b:47:
                    e9:8d:6d:fc:ec:16:2f:1d:bc:62:3e:96:e5:9f:df:
                    42:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:61:0C:58:B0:4A:CE:BA:C4:B9:E4:E8:94:D0:E9:70:FB:86:3A:3A
            X509v3 Authority Key Identifier:
                keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/82A6D4C4373711F0B4C22F6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.64.0/19
                  66.116.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b7:f4:99:68:8a:86:9a:e2:4a:47:98:ed:8c:d9:d7:6e:d6:31:
         f6:51:32:2a:66:57:06:a7:11:eb:15:83:0e:7f:27:ba:86:28:
         45:2f:32:02:7b:f8:ca:9b:63:ee:a1:2b:a3:9a:73:55:e9:a6:
         2f:0e:a4:40:02:84:85:02:39:9c:2e:43:02:6a:8a:72:40:0e:
         ee:71:4a:64:79:27:54:3b:5a:15:c7:f0:2c:d9:f7:28:b5:af:
         5d:16:98:e8:cf:b4:6b:62:c1:fa:fa:3d:07:50:a2:b8:d2:84:
         a2:7c:31:c4:fa:d8:db:d8:49:ca:3e:a0:b4:f1:31:54:40:9e:
         20:da:30:fa:ac:90:a7:3e:f3:9e:4c:77:fd:c4:1a:26:c4:f9:
         a6:48:95:d6:41:72:d9:f0:d3:83:1d:12:0b:ae:53:63:7b:8b:
         6d:49:f5:9f:bf:4e:db:71:9f:0d:50:f0:fd:1b:64:34:74:d1:
         55:84:60:e9:97:46:c4:60:64:f1:23:ba:6a:1f:a8:30:52:12:
         d6:67:34:1f:a3:ac:a2:15:e8:e5:d0:d2:b5:2a:a9:56:d8:38:
         e3:7b:84:0c:b6:e2:40:4d:e0:8b:73:b1:09:1b:97:42:e6:26:
         61:d9:f4:5c:44:9f:9e:eb:84:c2:34:a7:18:39:a8:ea:83:6e:
         e8:c3:27:22
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB
RTdEQ0M3NjEwHhcNMjYwMjI3MTUxNzE0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODNiZC05ZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxeQdSKKPMOcjWWxRZ8PYxMYObx6QnRgQ8RPKgms2YqRg3mxYxR8J0GBayiAu
a3ahpKSUSmtErnW7Vy1nPWBq/yeG1nimwrGU1SoTlAqiAm9BCMgtKlBB6iaHPX+O
JDTRfJufZOtyJ3kDA9vd/JIhvjOtNMaYUxzzOUn7mP1IGXd9P2DodjLnE/HN/+rw
28Yx3l7OAVOFCYKevrrXrBOmuu0Ul0SbDbGvjrkzQvD8+D/eOtT4l8Q5YjbZrSC8
UqeqCr7R7I7ejYr6Fn5lXYGRuKPV4NSJhER3ZZS/yOMFXmXEdO949jxszfMOR9HC
C0fpjW387BYvHbxiPpbln99CqwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIRhDFiw
Ss66xLnk6JTQ6XD7hjo6MB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG
QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzc0OEUvNEQ3ODkyNkE0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvODJBNkQ0QzQz
NzM3MTFGMEI0QzIyRjZBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQFQf5AAwQHQnSAMA0GCSqGSIb3DQEBCwUAA4IBAQC39Jloioaa4kpH
mO2M2ddu1jH2UTIqZlcGpxHrFYMOfye6hihFLzICe/jKm2PuoSujmnNV6aYvDqRA
AoSFAjmcLkMCaopyQA7ucUpkeSdUO1oVx/As2fcota9dFpjoz7RrYsH6+j0HUKK4
0oSifDHE+tjb2EnKPqC08TFUQJ4g2jD6rJCnPvOeTHf9xBomxPmmSJXWQXLZ8NOD
HRILrlNje4ttSfWfv07bcZ8NUPD9G2Q0dNFVhGDpl0bEYGTxI7pqH6gwUhLWZzQf
o6yiFejl0NK1KqlW2Djje4QMtuJATeCLc7EJG5dC5iZh2fRcRJ+e64TCNKcYOajq
g27owyci
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:11 2026 by rpki-client