Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/C782AE14615911F08635B771C4F9AE02.roa
File:                     C782AE14615911F08635B771C4F9AE02.roa (raw, json)
Hash identifier:          dOTATPgFwoXXrO6+XdUeAHgywBcNivkuKnP4p0jaAms=
Subject key identifier:   F8:FC:9B:31:3F:9C:E4:B8:B2:06:7D:66:1F:12:CF:8F:26:C8:A0:E4
Certificate issuer:       /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F
Certificate serial:       0B3C
Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/C782AE14615911F08635B771C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:30:58 +0000
ROA not before:           Tue 15 Jul 2025 08:57:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9312
IP address blocks:        203.25.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl
                          rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2876 (0xb3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0A8, serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F
        Validity
            Not Before: Jul 15 08:57:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a469c1-87ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c8:40:ed:c3:f2:a7:32:ee:29:9f:50:89:6b:
                    af:11:e9:d2:f1:a3:79:6b:9c:91:68:f8:b7:cb:d9:
                    2d:ea:91:ef:df:16:e6:a8:54:5f:b2:bc:34:ae:8d:
                    f2:49:e0:e9:b0:06:09:2b:5e:de:cc:d8:ac:34:93:
                    eb:98:84:b6:e0:7a:37:e9:fe:e9:f7:b1:bb:5d:df:
                    b9:4c:f5:8f:86:2f:33:cb:1e:2c:c8:ca:76:fe:2a:
                    ce:de:0e:5d:7b:88:c3:83:97:71:06:8c:8c:27:73:
                    2b:71:b4:26:19:40:b5:80:ef:63:0e:ed:34:f6:3e:
                    5c:ba:d5:c4:b2:98:d5:fb:e5:cd:e4:d7:a4:cc:cd:
                    c8:67:87:49:ad:8b:84:fc:bf:28:86:20:26:9c:a1:
                    cd:04:07:c5:90:89:ed:ed:8b:0e:0b:2e:be:f2:30:
                    de:d9:84:ea:3b:70:a7:46:27:e8:34:05:cc:78:5b:
                    b1:bf:ff:86:81:1d:71:51:f0:64:4c:91:79:5c:db:
                    39:6d:ad:f6:02:78:9e:54:74:ca:e3:00:9f:2e:1a:
                    a3:92:aa:4e:25:ad:09:4e:c7:23:56:fc:8e:69:f1:
                    d2:06:30:55:47:cc:09:3e:41:6f:a0:a5:e0:0b:77:
                    dd:f8:31:23:39:53:d1:e7:7f:1e:54:a0:4d:84:0f:
                    8f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FC:9B:31:3F:9C:E4:B8:B2:06:7D:66:1F:12:CF:8F:26:C8:A0:E4
            X509v3 Authority Key Identifier:
                keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/C782AE14615911F08635B771C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.25.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:4b:5f:a3:d6:b4:06:f5:62:a8:88:7b:ea:0b:cd:b6:f7:70:
         12:94:56:1a:0f:d7:23:dd:91:4e:de:e0:1e:4b:35:8e:11:af:
         8c:56:71:d3:a9:f7:86:0e:a0:46:20:77:e5:66:dc:d6:cd:25:
         a2:dc:ed:b4:ff:fd:1f:f3:09:f1:d5:8d:1f:94:93:5a:03:15:
         e4:30:cf:68:09:2a:ae:b4:09:15:28:5d:6f:ed:25:df:31:aa:
         86:37:a6:e6:00:b7:8b:e4:2a:d8:31:4e:ad:c4:66:a5:b0:3b:
         df:53:19:9a:a8:c7:60:78:0f:d5:56:ce:2a:bf:8a:e8:fa:9d:
         1f:25:fa:fd:75:8a:c5:7b:3e:81:04:38:35:32:c9:bb:5e:02:
         b9:b6:48:80:a5:9b:cc:7a:2e:3f:86:1c:8d:ff:5a:c0:1f:7e:
         d4:27:f2:e7:b9:9c:6f:a2:db:cc:aa:92:a1:d3:be:28:34:cd:
         7f:a0:96:5b:82:15:86:58:ad:75:82:ae:06:6c:bc:6c:0a:25:
         01:a8:89:f5:d1:f0:29:08:05:65:01:24:6a:b1:dc:7a:0c:a4:
         d8:2e:8a:d9:c6:b0:5e:a0:93:f8:d6:d6:94:e5:89:71:17:02:
         d7:50:69:85:ce:aa:8f:80:51:12:f1:dd:fb:39:23:a2:f7:8e:
         20:2f:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:17 2026 by rpki-client