Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/F0D7EB5097FA11EE90066875C4F9AE02.roa
File:                     F0D7EB5097FA11EE90066875C4F9AE02.roa (raw, json)
Hash identifier:          6vqRkfNyBAwDiXHf3koAV6uBX2r6Cd6TaI9BMlOpzvA=
Subject key identifier:   7D:C2:97:D5:D5:AC:31:BE:68:A4:77:E5:C2:FC:59:F8:EB:81:B2:7C
Certificate issuer:       /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial:       01A5
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/F0D7EB5097FA11EE90066875C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:28:27 +0000
ROA not before:           Wed 31 Dec 2025 03:22:44 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4764
IP address blocks:        203.22.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
                          rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060
        Validity
            Not Before: Dec 31 03:22:44 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a414cb-ddbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:84:04:6d:03:97:93:e0:f9:90:4e:27:b3:
                    0a:56:bb:91:16:1b:81:26:9b:e9:9a:76:b6:15:7a:
                    9a:34:9f:b0:ff:42:ae:41:85:7d:fb:31:be:b1:9a:
                    a0:30:26:5c:59:4e:db:0c:d5:23:39:39:cf:92:76:
                    98:cd:bc:0e:5c:67:cb:d0:93:80:40:60:f2:c2:0d:
                    77:f1:db:16:44:3e:9e:f9:5e:a9:be:04:39:20:35:
                    ff:fd:b7:d8:be:9f:43:29:9c:4d:60:64:0c:82:ac:
                    e6:23:50:ce:80:74:72:be:3f:97:b8:d7:5a:02:47:
                    22:01:30:69:e6:2d:ee:72:61:c0:15:b6:54:66:92:
                    ec:dc:cf:5d:55:4d:7b:72:aa:00:f1:71:bc:74:25:
                    20:73:f5:43:38:49:09:ce:e7:f7:71:88:d9:44:4f:
                    6f:6f:23:d2:4b:e6:6a:a4:6a:8d:e2:57:02:71:59:
                    3a:6e:ba:20:46:c4:73:e8:eb:2a:42:0b:12:86:62:
                    80:b7:0d:be:04:30:be:74:00:cb:9c:df:87:a2:72:
                    1b:78:0b:ba:d0:1d:b4:c0:a1:76:fc:7a:61:c6:57:
                    b1:4a:e5:65:ea:52:d1:10:7e:6a:a6:60:95:a2:8a:
                    9b:7a:7e:e3:5f:ed:f6:3e:19:27:39:62:ee:64:65:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C2:97:D5:D5:AC:31:BE:68:A4:77:E5:C2:FC:59:F8:EB:81:B2:7C
            X509v3 Authority Key Identifier:
                keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/F0D7EB5097FA11EE90066875C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.22.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:47:f2:57:16:71:ac:b2:47:5b:ae:74:ed:d8:cd:47:fe:50:
         d9:3e:47:37:d3:b3:b2:c7:5b:2b:ac:dc:35:4f:90:96:ca:c6:
         e0:d8:ab:60:2a:9e:91:d0:c6:f9:27:5f:6b:8d:05:06:e2:37:
         85:83:3e:d2:df:dd:5e:83:9f:6a:dd:97:21:f5:b6:ab:e2:25:
         38:f9:03:26:38:20:be:79:aa:a1:9a:a0:eb:71:37:ef:22:c5:
         36:3a:83:e6:21:d8:ce:db:9a:8c:8b:18:dd:4f:df:82:74:6c:
         e4:75:80:6d:a4:87:c2:2d:a2:c1:af:66:68:a1:41:7e:8b:8c:
         e9:d1:5f:d5:9f:43:53:35:45:80:88:52:0e:cf:7d:81:48:1a:
         d4:22:e0:1a:4c:9b:e4:5e:e6:d1:58:aa:20:69:d7:43:02:d9:
         f2:57:86:3b:c1:5c:a9:bc:ee:db:58:91:4b:a1:69:20:c6:bb:
         68:3e:f4:13:4b:29:da:3e:44:a4:41:ae:30:b0:05:fb:02:ad:
         c8:5b:b9:e3:26:b8:a9:bf:55:08:f8:54:c1:b6:5f:f6:bb:21:
         e1:8e:7f:f7:59:7b:e4:dd:66:1a:88:87:e4:8a:4b:bc:2b:14:
         e5:43:17:9c:8d:57:dc:66:da:44:ab:4f:89:37:31:ec:04:77:
         6f:27:b3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:48 2026 by rpki-client