Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/6295E05C002811F1A0212657466F56BC.roa
File:                     6295E05C002811F1A0212657466F56BC.roa (raw, json)
Hash identifier:          vn1sEpRUE9UycK5/EPmrrOfrA/wVRIL/ARhmehWhyGo=
Subject key identifier:   87:A7:FB:FD:28:BE:A3:6A:B4:17:01:68:D3:50:3C:27:B9:48:4B:A0
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0BF4
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/6295E05C002811F1A0212657466F56BC.roa
Signing time:             Sun 01 Mar 2026 18:02:34 +0000
ROA not before:           Mon 02 Feb 2026 11:14:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     197450
IP address blocks:        45.115.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3060 (0xbf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: Feb  2 11:14:48 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47f3a-b569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:d5:13:84:64:df:51:04:58:c8:b8:70:75:
                    a5:4d:71:11:dd:bc:ce:ef:2c:e5:4f:81:3c:64:eb:
                    8a:00:14:b3:f2:9a:55:cf:2b:6d:e0:53:bb:62:9d:
                    37:bb:e6:1d:20:6b:71:60:71:74:ef:ba:6e:d5:a1:
                    56:0c:8d:1e:d2:5c:af:ed:79:7b:0f:a3:a8:78:1a:
                    b5:35:37:20:27:d9:41:63:a4:07:be:cf:b0:3d:66:
                    18:5f:c5:04:7b:b7:73:c2:b1:f8:3b:af:64:48:d4:
                    e0:27:2c:85:75:22:c8:bc:54:c0:44:18:bb:4f:20:
                    21:37:93:2a:39:1c:3e:24:b1:e9:be:b8:9f:b8:fc:
                    97:13:24:f4:53:9f:0b:61:db:32:48:2f:48:1d:e6:
                    5d:83:15:bd:d5:80:9e:8e:0f:1a:1d:df:e8:2c:e6:
                    bf:d6:78:33:25:a7:11:0d:eb:49:b2:ba:67:ea:da:
                    ca:a7:01:34:af:56:ea:5e:2e:8b:e6:66:ff:4d:62:
                    de:d0:49:bd:a6:e2:b1:4f:ef:6d:ef:61:77:96:b2:
                    b8:e5:08:70:f3:71:4d:7b:6f:34:6d:08:b4:d5:4f:
                    2f:01:dc:91:da:19:9d:b6:11:16:f8:84:a7:6f:e0:
                    d4:9d:c0:92:0f:d1:5b:01:75:5c:a5:83:9f:77:0e:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A7:FB:FD:28:BE:A3:6A:B4:17:01:68:D3:50:3C:27:B9:48:4B:A0
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/6295E05C002811F1A0212657466F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:43:9b:6f:c9:cf:7c:44:cc:d6:12:c7:ac:6b:77:cf:38:79:
         a0:48:a6:58:a9:19:0a:cc:ab:11:18:93:e5:20:cf:aa:b3:94:
         ce:7d:56:79:c9:05:ae:01:ff:c2:7a:96:c9:fd:96:fb:44:31:
         3a:eb:0c:14:80:e8:cf:d4:d0:bc:97:d8:af:5d:13:64:32:c7:
         56:e4:a8:fc:39:65:6a:ed:af:16:44:6d:8d:dd:d0:e1:89:89:
         23:93:55:a7:d4:97:29:a1:01:03:ac:d8:87:c1:4a:97:97:77:
         9b:91:47:6d:83:cc:d1:8d:06:0a:bc:b8:3f:df:cd:88:b3:bd:
         9b:d4:62:e3:94:17:0f:70:bb:09:60:14:b6:57:38:44:b3:a9:
         f3:3d:bf:4f:84:5e:9f:3b:ef:30:4a:a2:40:86:00:e4:8c:c5:
         a1:93:ce:2f:bb:37:c5:8c:2a:91:bc:f3:ab:ca:7c:25:13:17:
         2e:36:48:78:1a:bc:64:24:66:bd:29:4d:91:03:22:6f:7e:c7:
         bf:f7:23:a7:6a:f1:23:92:49:be:b8:34:6b:be:cb:02:66:ed:
         b0:5c:72:3d:9a:7a:64:be:0f:97:60:88:2c:87:94:e4:a8:7d:
         1a:d8:5c:b4:b5:83:d3:72:2f:05:4c:1e:9c:b8:7c:e3:60:90:
         b1:9f:c8:e3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICC/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC
RjZCMTIyQUUwHhcNMjYwMjAyMTExNDQ4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2YzYS1iNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsnTVE4Rk31EEWMi4cHWlTXER3bzO7yzlT4E8ZOuKABSz8ppVzytt4FO7Yp03
u+YdIGtxYHF077pu1aFWDI0e0lyv7Xl7D6OoeBq1NTcgJ9lBY6QHvs+wPWYYX8UE
e7dzwrH4O69kSNTgJyyFdSLIvFTARBi7TyAhN5MqORw+JLHpvrifuPyXEyT0U58L
YdsySC9IHeZdgxW91YCejg8aHd/oLOa/1ngzJacRDetJsrpn6trKpwE0r1bqXi6L
5mb/TWLe0Em9puKxT+9t72F3lrK45Qhw83FNe280bQi01U8vAdyR2hmdthEW+ISn
b+DUncCSD9FbAXVcpYOfdw46KQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIen+/0o
vqNqtBcBaNNQPCe5SEugMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND
NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzhCMkIvQkZERDIyMkUzQzQ0MTFFQUFFRTZGNzBBQzRGOUFFMDIvNjI5NUUwNUMw
MDI4MTFGMUEwMjEyNjU3NDY2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQALXMaMA0GCSqGSIb3DQEBCwUAA4IBAQAEQ5tvyc98RMzWEsesa3fP
OHmgSKZYqRkKzKsRGJPlIM+qs5TOfVZ5yQWuAf/CepbJ/Zb7RDE66wwUgOjP1NC8
l9ivXRNkMsdW5Kj8OWVq7a8WRG2N3dDhiYkjk1Wn1JcpoQEDrNiHwUqXl3ebkUdt
g8zRjQYKvLg/382Is72b1GLjlBcPcLsJYBS2VzhEs6nzPb9PhF6fO+8wSqJAhgDk
jMWhk84vuzfFjCqRvPOrynwlExcuNkh4GrxkJGa9KU2RAyJvfse/9yOnavEjkkm+
uDRrvssCZu2wXHI9mnpkvg+XYIgsh5TkqH0a2Fy0tYPTci8FTB6cuHzjYJCxn8jj
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:24:34 2026 by rpki-client