Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/8CFEF8EE50AE11EBB71FB743C4F9AE02.roa
File:                     8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (raw, json)
Hash identifier:          J94u9FnrIiwrzDJWeFDOpq+HwbLatBCEAzqVSnk5AQ4=
Subject key identifier:   BC:42:64:1A:89:EE:9D:5C:37:DD:4A:67:19:11:FA:86:8F:68:81:C5
Certificate issuer:       /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Certificate serial:       076F
Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/8CFEF8EE50AE11EBB71FB743C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:40:47 +0000
ROA not before:           Tue 14 Jan 2025 22:01:17 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     1221
IP address blocks:        203.26.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl
                          rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:58:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1903 (0x76f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
        Validity
            Not Before: Jan 14 22:01:17 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a3fb8f-b572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:18:49:27:40:3c:a8:da:2b:be:a1:a4:44:5a:
                    b1:ae:52:ab:28:b4:98:31:36:93:2b:5a:47:1e:00:
                    b4:3c:20:f9:12:2b:b0:aa:c3:b0:ee:08:11:e1:eb:
                    59:e6:34:aa:dc:a3:74:a5:b9:c5:06:d4:ba:2a:49:
                    99:bd:92:af:ac:ea:1e:29:b8:9b:1e:2a:a8:67:2a:
                    d9:31:e7:dc:13:dd:57:b4:b3:5b:99:0b:25:1c:2b:
                    d8:ba:33:56:2b:ba:7e:da:32:c5:d2:8d:15:90:78:
                    b9:f7:34:65:62:a2:eb:e7:a0:73:82:90:8a:d0:f2:
                    78:c8:38:d5:da:ce:0c:95:2d:84:44:ee:0e:78:67:
                    4b:0c:b2:9b:40:3f:f8:7b:85:b0:1a:79:73:ce:9e:
                    ba:1c:8b:20:b2:aa:3e:2a:6d:7f:70:2c:67:c6:e6:
                    0e:d5:f4:b9:b3:03:88:97:5d:70:09:b7:bd:f5:70:
                    8e:47:8a:1c:13:48:ac:11:dd:bc:e7:28:4e:d7:f2:
                    47:2b:b7:31:b2:f0:c9:ea:41:59:55:07:6a:f5:52:
                    e8:9b:af:81:fe:b1:7b:86:03:45:0d:4f:c4:1a:c3:
                    19:23:9a:72:a8:ce:24:15:78:4e:89:7c:88:65:1a:
                    4e:b2:8e:06:62:8a:25:b8:d0:83:95:be:5c:b5:94:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:42:64:1A:89:EE:9D:5C:37:DD:4A:67:19:11:FA:86:8F:68:81:C5
            X509v3 Authority Key Identifier:
                keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/8CFEF8EE50AE11EBB71FB743C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.26.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:30:84:25:2b:8a:eb:8d:28:18:ea:08:13:de:59:5c:6d:ba:
         29:bb:f5:83:f2:9a:48:e6:87:f2:8b:f6:29:6b:7c:69:f2:bd:
         ee:64:66:9e:79:77:7d:c5:63:7f:07:1f:eb:3d:0a:f8:24:92:
         07:33:5d:d7:b6:08:db:78:b6:ef:fc:fc:0b:d7:98:3f:9a:6d:
         e7:03:b5:ef:31:ab:88:51:ca:51:b2:82:47:8f:dc:7a:ea:3a:
         f6:0b:60:b2:67:4b:75:df:f5:52:c8:55:db:f8:31:3b:9a:dd:
         d5:6a:75:f3:64:2c:ba:87:48:df:1d:38:2a:e5:ce:03:78:c2:
         b3:55:02:c2:4b:90:78:69:81:b0:dc:c1:a8:42:a3:47:02:d6:
         9f:4b:a0:ce:f8:f6:97:c9:f0:78:dd:e4:55:28:d0:3c:e1:0d:
         30:09:30:d9:59:db:5d:19:24:a8:ff:6d:36:92:6b:84:d5:0e:
         54:79:4d:63:c3:04:13:c3:45:8b:f9:cd:5f:9c:d6:8a:2b:15:
         6f:bd:41:50:85:fc:97:65:1b:b2:ac:13:db:ee:3a:4a:cd:de:
         e6:92:5b:6c:9d:fe:a9:ef:bf:de:75:ae:46:3b:75:fa:88:80:
         63:85:c6:e4:b5:18:9b:eb:5e:05:3d:bb:5c:f8:56:94:8f:94:
         d7:5b:3e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:00 2026 by rpki-client