Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/608836D046B111E98B793856C4F9AE02.roa
File:                     608836D046B111E98B793856C4F9AE02.roa (raw, json)
Hash identifier:          j/7cfI/0+SrAI6zJ8aTltm4c8iKanonzyycpVr5NLNQ=
Subject key identifier:   80:D5:19:8E:1C:73:B6:5D:61:BE:E0:C9:49:80:06:7A:3E:B0:EE:57
Certificate issuer:       /CN=A918E6B7/serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46
Certificate serial:       10AA
Authority key identifier: 22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/608836D046B111E98B793856C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:16:52 +0000
ROA not before:           Fri 02 May 2025 17:57:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38809
IP address blocks:        203.26.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl
                          rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4266 (0x10aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E6B7, serialNumber=223BE19892E6E6CB406E5FA9956DDBCEA95CBB46
        Validity
            Not Before: May  2 17:57:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42e34-0674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:e1:2c:35:c9:7f:d5:e7:9f:84:12:44:83:
                    07:c0:98:83:07:40:20:e7:c5:90:1a:6c:ff:2d:88:
                    3a:96:f2:21:bc:19:87:d2:25:e1:d5:80:5c:0f:91:
                    89:31:16:14:77:b3:92:89:aa:24:e0:42:cb:db:16:
                    4c:62:4a:ff:f3:f0:71:bf:a5:9a:b6:85:8d:4a:dd:
                    c0:e8:4b:fc:a3:22:5c:b8:e8:86:cd:1a:d5:74:45:
                    79:ee:d4:10:1c:2e:ce:b4:9e:93:b8:b6:6a:ab:66:
                    31:b5:b8:92:f1:2a:c1:0f:af:4d:46:ec:6c:ac:3e:
                    39:62:60:aa:a3:7d:b3:d4:6e:4e:ed:16:1b:1a:6d:
                    78:20:93:c6:60:90:62:3b:cf:59:26:38:8c:0b:23:
                    eb:a1:f4:06:d7:64:a2:5e:d6:45:d5:26:58:3e:2c:
                    3d:f1:2b:cd:5b:d7:af:36:f0:2a:c3:f2:34:35:cd:
                    37:31:73:ea:89:b7:1d:8a:84:16:d6:bf:99:29:c0:
                    c0:01:ef:a3:c4:01:8f:66:02:95:72:37:4c:c7:64:
                    63:b2:e4:b8:fe:8a:5b:f1:57:f3:04:d0:a9:f2:50:
                    2b:02:b7:58:2f:e6:cf:b9:21:67:83:03:2b:75:12:
                    0d:c5:ae:08:fa:b9:10:cd:27:52:22:88:f6:f6:d9:
                    4e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D5:19:8E:1C:73:B6:5D:61:BE:E0:C9:49:80:06:7A:3E:B0:EE:57
            X509v3 Authority Key Identifier:
                keyid:22:3B:E1:98:92:E6:E6:CB:40:6E:5F:A9:95:6D:DB:CE:A9:5C:BB:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/IjvhmJLm5stAbl-plW3bzqlcu0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IjvhmJLm5stAbl-plW3bzqlcu0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/B6A9F26046AC11E996088348C4F9AE02/608836D046B111E98B793856C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.26.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:e8:c7:97:65:4b:4b:21:a8:d0:4d:8a:88:ee:80:be:85:62:
         e0:5e:39:e4:df:ad:4a:9a:c5:95:02:4e:c0:07:13:f9:9a:5d:
         bc:80:28:9b:2e:a3:fd:ff:49:54:b8:cd:90:99:3c:68:cb:bd:
         9d:99:22:8a:ee:aa:3f:1d:37:c7:b8:72:75:3b:26:19:0f:37:
         53:32:57:c6:b2:d2:d6:c2:3f:ff:3f:42:81:13:64:fe:29:a4:
         ae:d6:69:b6:f3:9b:f8:94:01:c0:d6:b5:55:51:f0:7b:d8:f5:
         c5:8f:70:fa:a3:b0:7c:8a:6d:d4:1c:f2:92:a2:f1:32:1b:9a:
         cf:bf:65:51:a2:05:0f:fb:ca:33:be:24:b8:7f:08:e9:a4:5b:
         28:c1:6a:a2:3e:da:b5:cc:99:cc:fa:3b:ad:1e:53:b1:e7:31:
         14:8b:65:77:62:d6:41:71:50:47:6a:5d:06:40:c7:16:d7:0e:
         66:c7:53:dd:59:20:f3:59:65:a5:f8:b2:c7:a8:a1:f6:5e:8c:
         6f:ab:96:bb:6d:1e:db:d8:e6:5f:f7:e1:1f:8d:50:f6:43:ec:
         1f:ce:fa:41:4c:ac:3b:7e:f1:b0:01:6b:fd:bb:04:73:f6:11:
         fb:2a:0c:48:0b:35:9d:14:68:7a:fc:0f:ae:8c:54:37:4b:5f:
         ee:28:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:49 2026 by rpki-client