Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/A4B9732E372211F088B77741C4F9AE02.roa
File:                     A4B9732E372211F088B77741C4F9AE02.roa (raw, json)
Hash identifier:          uZoFjlWd0s35bUyaKBjteCw8B5zIPfjlCTUifO0BOtw=
Subject key identifier:   C5:B7:BB:4C:33:F7:E9:7E:43:2C:48:C4:31:A4:28:0D:55:5A:71:04
Certificate issuer:       /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial:       02A4
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/A4B9732E372211F088B77741C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:21:49 +0000
ROA not before:           Wed 03 Dec 2025 01:59:38 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     394695
IP address blocks:        65.254.64.0/19 maxlen: 19
                          66.116.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
                          rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676 (0x2a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
        Validity
            Not Before: Dec  3 01:59:38 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a483bc-20be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:04:0b:27:3d:63:7a:b1:1c:f5:6e:9e:fe:62:
                    e9:e5:c2:3b:c3:5e:5a:85:d1:12:b3:99:39:cf:16:
                    88:a6:16:c9:18:12:6b:aa:1e:3b:79:6f:8d:bb:b7:
                    3f:f9:87:84:42:ea:74:0f:9c:97:36:e4:57:a6:41:
                    30:e6:45:bb:10:50:4f:a4:ed:87:94:85:64:bd:97:
                    4a:a3:1e:ba:cc:af:a0:e5:d1:89:90:ac:d0:0f:12:
                    e1:b2:7a:79:e1:40:d5:0a:5b:74:5b:0b:a2:a7:0a:
                    2f:de:3e:2c:94:77:03:2a:25:2a:36:63:b6:c0:8c:
                    9f:97:69:85:f9:03:3e:b2:26:9b:e4:ec:cf:18:ce:
                    79:2d:8f:fa:33:e1:8f:b6:19:98:0a:ba:a4:d6:d4:
                    46:e2:e0:42:dd:2b:83:bf:e3:b4:bd:a1:8b:65:b8:
                    01:99:83:49:a5:6a:53:d1:89:27:5d:76:fa:dd:96:
                    58:ca:e4:8e:a9:7d:ff:ee:d0:4a:23:5a:3b:2d:90:
                    a9:36:6b:f3:af:cc:8d:e1:55:22:44:8b:9b:1d:e6:
                    16:86:6f:1f:c5:16:5f:7b:ac:19:1a:8f:c2:5c:7b:
                    62:1a:14:f8:7f:b7:19:73:c5:d0:e7:6d:1e:aa:88:
                    c3:83:df:fe:df:ad:f6:5d:c0:7d:fb:5c:fa:ea:56:
                    d6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B7:BB:4C:33:F7:E9:7E:43:2C:48:C4:31:A4:28:0D:55:5A:71:04
            X509v3 Authority Key Identifier:
                keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/A4B9732E372211F088B77741C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.64.0/19
                  66.116.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         04:71:87:6b:21:bb:43:af:dc:08:e2:4e:a0:4c:dd:6f:11:60:
         ea:6e:a0:4e:e9:61:90:f3:99:9f:93:67:d2:4c:1f:f3:7a:d1:
         b6:4a:9c:39:6d:2a:81:d9:2f:2b:67:84:ce:3f:0e:82:b6:01:
         4d:07:3d:bc:dc:83:b5:ec:00:ce:5b:84:76:e3:05:cc:6c:83:
         f4:cf:62:26:06:fa:1b:30:e0:af:21:98:c2:9e:13:58:ad:48:
         da:a1:b7:d0:7a:73:53:fd:ae:7b:4e:3b:af:6d:98:26:4a:79:
         b2:b6:76:c6:79:fc:c6:44:b8:61:71:b5:67:50:6e:3c:20:16:
         60:08:4f:6d:32:bb:e9:42:5f:31:e8:77:10:6e:eb:03:24:08:
         86:e2:e6:5a:7b:60:01:46:8f:3f:33:87:08:78:2f:ec:fa:e9:
         32:64:d6:03:88:58:a9:06:d0:b1:96:1b:29:ff:af:a4:8a:c3:
         6e:fd:0d:e8:2f:d8:96:3d:01:67:b4:ae:db:d1:f1:06:c6:b8:
         42:69:ee:b9:36:81:56:31:1f:da:03:03:1c:20:9a:cc:e0:c7:
         67:b6:0b:bc:22:45:83:ec:d7:cb:bf:bd:ff:41:96:62:6a:f7:
         84:8d:69:a5:c1:53:40:84:aa:ae:44:15:4d:81:81:e1:56:53:
         13:57:d3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:17 2026 by rpki-client