Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16353960DFCB11EB8FA1794CC4F9AE02.roa
File:                     16353960DFCB11EB8FA1794CC4F9AE02.roa (raw, json)
Hash identifier:          BdBMjKAmQsyAjushsFz5LIlAy5IVB7vYcqJf1THSTcw=
Subject key identifier:   DF:8A:CF:88:30:4C:E5:B8:6C:78:FE:CB:01:C7:92:65:EF:C2:FA:1D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D283
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16353960DFCB11EB8FA1794CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:20:29 +0000
ROA not before:           Thu 08 May 2025 16:01:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134342
IP address blocks:        45.126.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53891 (0xd283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:01:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bbad-8491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:26:0d:1e:25:7c:12:7f:7b:51:82:79:7f:e5:
                    ef:30:f7:76:4f:24:00:55:7a:d6:f7:55:a7:4a:84:
                    84:e6:c1:5d:c0:3b:e7:7d:79:1a:1f:dc:d5:f5:ba:
                    03:55:93:3d:67:11:03:3f:36:e1:b3:1b:34:bb:6f:
                    d2:41:63:c6:68:67:f5:73:e1:f5:fa:72:0b:1b:ef:
                    a4:65:7f:a6:77:87:a2:9a:b7:db:4e:a6:bc:a7:f1:
                    d7:5b:2d:bb:f3:82:06:ce:26:26:64:61:4b:ae:56:
                    17:70:1e:50:d3:58:e0:1f:67:92:0a:6c:3e:40:ec:
                    d1:77:71:69:88:87:aa:0e:07:d5:c7:96:e9:56:23:
                    bd:b8:f2:c7:26:2f:a9:9a:e2:4a:2c:10:ac:07:b9:
                    3e:b5:d6:77:0e:0a:a0:40:7f:85:b3:4f:99:39:80:
                    4d:e1:77:4f:3c:d1:d0:05:39:58:f2:6d:28:a1:74:
                    76:07:d2:0a:73:d5:6d:2d:c3:53:61:70:6d:34:07:
                    a4:57:90:03:94:de:7e:2f:c4:39:9b:80:3c:8a:33:
                    51:5c:98:cf:8f:84:c9:71:fa:a7:b5:b6:09:36:e0:
                    80:e4:96:ff:24:49:e6:14:1c:f6:86:f7:d2:d8:1c:
                    cc:05:13:03:26:9c:84:30:5b:d9:28:f3:14:b8:7d:
                    9c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8A:CF:88:30:4C:E5:B8:6C:78:FE:CB:01:C7:92:65:EF:C2:FA:1D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16353960DFCB11EB8FA1794CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:57:90:3c:b9:07:1b:9b:35:65:83:0e:db:cb:72:ae:d8:a9:
         8b:e3:be:56:db:b3:3c:12:b1:99:23:92:56:89:ab:02:c8:2b:
         6c:33:ee:0c:64:2a:eb:86:2e:24:0d:46:b7:fd:5e:6c:15:ca:
         ba:60:b3:cb:83:ca:e5:65:b8:6c:f8:04:5a:c9:b5:78:1d:b8:
         9e:98:e2:2c:c3:08:48:ef:db:7f:93:1e:f2:c9:de:fc:67:20:
         a1:16:3f:14:41:1b:12:5a:ac:f9:4b:94:84:11:82:a8:84:0c:
         a9:09:48:ae:67:4a:57:29:1e:29:2c:ea:fe:80:c1:7d:27:19:
         89:37:6d:67:5c:c9:8c:cf:42:a8:2a:c9:f3:45:b1:84:39:57:
         ec:21:ee:84:fa:1c:54:25:b5:45:9c:d3:43:d1:d2:c5:df:1d:
         86:d1:0a:fe:14:77:67:38:c1:b5:fb:2d:88:c8:9e:9e:17:66:
         a2:1d:1b:4f:1a:cc:ae:6d:ac:0a:d3:45:7b:98:51:7b:e5:a1:
         00:b8:77:40:75:57:eb:d4:4b:0f:d7:75:3b:41:4c:ae:9c:75:
         34:e1:b0:91:2c:e1:87:32:02:f0:3c:e5:63:22:43:b9:62:65:
         de:ae:1f:61:21:27:82:52:cd:16:d1:11:57:43:6f:17:7e:14:
         fc:db:fc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:53 2026 by rpki-client