Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/75A05C926E8211EFA843807EC4F9AE02.roa
File:                     75A05C926E8211EFA843807EC4F9AE02.roa (raw, json)
Hash identifier:          3r1HaiLL43sVBBB2huoTtCYJ6+7KooZqwfPraUyOxeA=
Subject key identifier:   0C:94:0A:48:64:F6:9D:B1:08:B1:2B:41:D7:0D:77:80:B4:AA:E5:5A
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       0248
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/75A05C926E8211EFA843807EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:31:14 +0000
ROA not before:           Mon 23 Jun 2025 03:21:54 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     133956
IP address blocks:        83.118.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jun 23 03:21:54 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a485f2-2566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:43:b2:e0:dd:a9:2a:f6:2b:a6:fa:13:2a:
                    12:06:71:1e:25:93:aa:47:f8:cd:52:7c:80:5b:4f:
                    3a:6c:b3:cc:6a:f3:a7:45:83:08:a5:01:83:ae:c7:
                    67:5f:e2:d6:10:b8:7a:a0:06:fc:8e:b6:12:96:0f:
                    f3:b7:5d:8f:5a:38:59:de:3e:45:55:a7:ae:a4:5b:
                    6d:ad:40:1f:1f:04:f3:08:da:bb:fe:ab:f0:29:14:
                    91:86:db:37:58:95:3a:65:a1:70:d9:12:25:69:b1:
                    82:a1:69:d7:33:32:93:b5:34:9e:e9:6e:59:3d:43:
                    ff:ea:ff:c9:da:71:a5:9a:b5:be:f4:c4:20:1a:ef:
                    58:f5:61:5d:3b:67:f4:eb:2c:b9:f5:d7:38:86:b3:
                    9e:d9:a5:f8:6a:fa:39:44:ac:d2:8c:99:0b:90:58:
                    ca:98:6a:62:7d:1d:fa:7b:60:f3:b6:7c:ce:e2:23:
                    ee:bd:d7:9d:eb:cb:18:85:91:16:43:96:64:d7:10:
                    3c:31:19:ae:75:7a:99:c9:28:99:76:1e:7e:06:cf:
                    3d:0b:cd:d9:a2:01:7a:41:a7:17:e4:19:8c:f7:4d:
                    9c:f8:f2:ca:32:49:94:cd:f5:c9:b1:ec:3e:ca:2d:
                    d9:b0:4d:93:0f:a8:e1:44:2a:48:d8:1e:9b:20:57:
                    2a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:94:0A:48:64:F6:9D:B1:08:B1:2B:41:D7:0D:77:80:B4:AA:E5:5A
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/75A05C926E8211EFA843807EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:f9:e1:e4:2b:7c:44:a2:65:5c:61:59:79:e6:a7:3e:a7:dd:
         88:ca:d6:2a:84:1c:0f:d0:8e:81:4d:7b:c9:c1:bc:53:f1:03:
         ab:8c:18:e9:82:0b:10:70:23:4c:44:a5:06:43:85:17:9c:a2:
         aa:f7:3e:63:a3:15:ad:55:43:17:09:d6:e8:72:c1:26:a1:45:
         46:ed:cc:43:6a:91:42:fe:ad:6c:cb:69:2f:01:ab:5f:b5:13:
         b3:ed:a6:cd:eb:fb:87:21:3b:23:63:01:1b:bc:de:e0:53:f9:
         57:c7:c3:2e:f5:ff:89:47:4c:30:d5:30:c9:e6:a9:42:ce:53:
         f1:e9:9c:23:84:6d:ff:9d:e9:f1:bc:99:e6:be:a6:19:16:0e:
         3f:b5:32:91:59:6e:c7:36:c7:5a:c5:a4:25:3b:cd:57:16:d8:
         d9:ca:a7:9b:62:ff:5a:08:e2:30:09:35:97:2c:99:73:bc:b4:
         55:05:6c:ef:f0:8d:a1:72:c3:36:88:8e:d0:c2:05:55:92:c5:
         81:18:bd:04:7e:60:5c:4a:d5:ba:19:c7:33:c3:77:69:a0:fe:
         37:b4:5d:5a:62:64:9f:50:f2:53:8f:ca:39:39:b2:ac:0a:11:
         48:ac:72:12:61:fc:50:c2:99:fc:a9:5a:5c:e1:ca:65:bb:d1:
         46:e2:83:6a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKDcxRjQwMjE4QzFBRjQ3QzVFOTkzQTIxQTJCMjkyODRF
NEMzMkM5MzQwHhcNMjUwNjIzMDMyMTU0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODVmMi0yNTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn2FDsuDdqSr2K6b6EyoSBnEeJZOqR/jNUnyAW086bLPMavOnRYMIpQGDrsdn
X+LWELh6oAb8jrYSlg/zt12PWjhZ3j5FVaeupFttrUAfHwTzCNq7/qvwKRSRhts3
WJU6ZaFw2RIlabGCoWnXMzKTtTSe6W5ZPUP/6v/J2nGlmrW+9MQgGu9Y9WFdO2f0
6yy59dc4hrOe2aX4avo5RKzSjJkLkFjKmGpifR36e2DztnzO4iPuvded68sYhZEW
Q5Zk1xA8MRmudXqZySiZdh5+Bs89C83ZogF6QacX5BmM902c+PLKMkmUzfXJsew+
yi3ZsE2TD6jhRCpI2B6bIFcqqQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAyUCkhk
9p2xCLErQdcNd4C0quVaMB8GA1UdIwQYMBaAFHH0AhjBr0fF6ZOiGispKE5MMsk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy82REUzQ0U3QzM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9jZlFDR01HdlI4WHBrNklhS3lrb1Rrd3l5
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2NmUUNHTUd2UjhYcGs2SWFLeWtvVGt3eXlUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTUzNkMvNkRFM0NFN0MzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvNzVBMDVDOTI2
RTgyMTFFRkE4NDM4MDdFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAU3YuMA0GCSqGSIb3DQEBCwUAA4IBAQAS+eHkK3xEomVcYVl55qc+
p92IytYqhBwP0I6BTXvJwbxT8QOrjBjpggsQcCNMRKUGQ4UXnKKq9z5joxWtVUMX
CdbocsEmoUVG7cxDapFC/q1sy2kvAatftROz7abN6/uHITsjYwEbvN7gU/lXx8Mu
9f+JR0ww1TDJ5qlCzlPx6ZwjhG3/nenxvJnmvqYZFg4/tTKRWW7HNsdaxaQlO81X
FtjZyqebYv9aCOIwCTWXLJlzvLRVBWzv8I2hcsM2iI7QwgVVksWBGL0EfmBcStW6
Gcczw3dpoP43tF1aYmSfUPJTj8o5ObKsChFIrHISYfxQwpn8qVpc4cplu9FG4oNq
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:27 2026 by rpki-client