Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B97B96023FC11F08333A921C4F9AE02.roa
File:                     9B97B96023FC11F08333A921C4F9AE02.roa (raw, json)
Hash identifier:          sggZ4pWsQYkjjsUH8qd3Jz/BCFYjfUD09tWB4I+JbQI=
Subject key identifier:   E3:D8:BB:3E:9C:B2:34:BA:08:EE:A6:25:D6:8A:F3:63:9D:AC:36:9A
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C5D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B97B96023FC11F08333A921C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:47:21 +0000
ROA not before:           Thu 08 May 2025 15:55:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153282
IP address blocks:        161.248.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11357 (0x2c5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:55:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1f8-b470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:de:c0:9d:cd:a2:85:e7:89:4a:32:85:57:67:
                    c0:63:0a:60:ef:6f:41:22:b9:f7:f9:80:25:08:35:
                    a0:a3:8f:87:6a:bf:31:ab:21:5c:72:6e:41:4b:43:
                    bd:5c:87:ab:88:99:b6:b9:af:75:14:90:3a:4f:2b:
                    71:97:24:69:ce:85:02:22:6b:62:8e:82:2d:5d:1c:
                    23:90:30:4e:1c:3d:d4:7c:79:50:d5:4d:03:2e:66:
                    d6:d2:a0:1c:6a:ce:2e:5e:3e:4e:f7:46:2d:30:a1:
                    d7:bc:a0:5d:b1:35:b4:d6:4e:da:59:dd:fd:7c:c0:
                    40:e4:f1:fd:d1:b3:3d:0e:d1:3a:92:bc:55:82:6a:
                    c3:54:98:81:eb:31:72:55:1d:be:ca:b5:c3:59:8f:
                    0f:06:36:e8:a2:30:4a:36:46:da:8a:4f:be:d4:13:
                    cb:5b:a9:d3:6c:27:c2:b8:ea:28:b1:fd:3c:f4:42:
                    09:95:12:ae:99:6d:e9:7a:71:19:ae:e0:b8:4d:e2:
                    e1:d5:39:ac:41:74:63:52:4a:a8:9f:55:e9:3f:69:
                    15:ed:c4:dd:f1:8f:d1:e2:c2:32:42:7b:e7:99:ed:
                    f6:a9:64:e2:44:a7:7f:80:fc:db:ce:da:5f:3b:e7:
                    55:be:93:f5:ab:e5:74:0a:b4:af:65:3f:3c:ae:ce:
                    7b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D8:BB:3E:9C:B2:34:BA:08:EE:A6:25:D6:8A:F3:63:9D:AC:36:9A
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B97B96023FC11F08333A921C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:f4:6f:a3:c6:b4:9e:1f:13:ed:6a:9c:1a:c1:b8:f4:36:
         7d:cf:7e:01:d8:12:26:1f:dd:88:5e:d5:88:09:35:bf:21:20:
         5e:9a:a4:4a:57:c3:70:f3:41:8f:9b:26:38:b6:82:dc:3e:f0:
         49:0d:da:f4:19:ec:65:b4:8f:1a:48:d3:31:25:0a:61:5f:ac:
         0b:4c:71:fa:9b:44:62:d1:95:80:69:6b:3f:73:56:91:4e:fd:
         5c:3e:88:ce:38:a5:f6:42:01:17:45:40:7c:7e:b0:3f:66:e5:
         e0:c3:78:52:dd:a1:53:0b:af:a6:4a:d3:6d:a1:16:a9:b2:7e:
         19:d5:66:f2:02:91:e6:33:36:e4:b4:b3:72:32:6a:fa:3f:99:
         19:65:bd:34:9a:1e:99:a8:ff:04:10:16:ba:37:b5:25:89:24:
         9d:ad:fa:dd:d4:8d:89:6e:2c:6c:ad:d7:4e:72:a5:69:da:9a:
         e1:e4:38:b3:1d:4c:0a:35:62:f6:51:91:5e:ff:db:db:18:95:
         85:4c:4f:20:6f:56:52:7c:65:47:47:09:b2:70:11:55:cf:30:
         d2:aa:0e:f7:85:a6:56:3a:22:2a:ce:19:bf:c5:6b:b1:c6:06:
         43:6a:7c:8d:c7:b3:36:9d:db:40:6b:63:25:9c:1d:d2:45:2f:
         df:ef:94:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:54 2026 by rpki-client