Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/F17996F2B21C11EFBDB2BA25C4F9AE02.roa
File:                     F17996F2B21C11EFBDB2BA25C4F9AE02.roa (raw, json)
Hash identifier:          VXtDiwiZo4Ue40kQIlfUesjgEwjjrX0+c0GVZ1Q0Ke4=
Subject key identifier:   5D:39:51:57:C7:22:CD:16:63:05:0F:41:CE:DC:CF:F1:50:FB:73:D4
Certificate issuer:       /CN=A919DA26/serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
Certificate serial:       F6
Authority key identifier: 25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/F17996F2B21C11EFBDB2BA25C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:07:29 +0000
ROA not before:           Fri 03 Oct 2025 02:58:20 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150329
IP address blocks:        193.36.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl
                          rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DA26, serialNumber=252C00E97E7A786959388CF204A4C7E645580C68
        Validity
            Not Before: Oct  3 02:58:20 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a40fe0-f298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:f8:e5:02:70:4f:3f:91:2a:11:b6:1e:b1:
                    15:0f:56:98:43:fb:0b:8b:5c:ba:ab:c0:3d:43:a7:
                    d9:d3:16:c5:f8:d8:83:73:0e:bb:72:ff:3d:1c:cd:
                    40:92:1b:35:6e:b6:d8:fc:02:fa:5b:1e:7c:f3:4e:
                    dc:87:98:22:f3:c0:4c:8c:50:a0:e1:16:b0:a6:71:
                    82:dc:fd:98:4c:96:9d:66:b6:8f:6a:13:41:e3:2c:
                    f6:b6:8a:48:27:7e:74:c5:54:3b:83:c2:83:78:3a:
                    7b:cf:01:28:01:6c:4e:12:ad:36:7e:3d:d9:4c:d3:
                    a2:1d:06:4e:8c:7c:05:e7:33:e5:a4:da:21:dc:bd:
                    66:d8:21:f4:19:aa:fb:66:4f:25:96:c5:24:4f:f4:
                    d4:5d:e0:39:dd:fa:ab:e8:84:b0:bc:5b:1a:6b:c9:
                    12:7b:60:1f:e5:51:6e:49:47:e7:e2:c9:3d:1d:a2:
                    cd:c3:eb:70:9d:7a:69:40:48:50:54:38:51:7b:94:
                    4a:1d:73:6d:50:38:46:11:dc:95:d9:d2:4c:3d:fc:
                    35:72:ba:dc:40:37:6b:f8:59:9d:fb:bb:eb:5a:b7:
                    28:b2:e3:df:d7:b3:7f:b1:ff:a7:89:35:fc:60:ca:
                    d2:e0:56:2a:49:1a:32:37:d9:e9:77:2a:d6:55:b2:
                    ed:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:39:51:57:C7:22:CD:16:63:05:0F:41:CE:DC:CF:F1:50:FB:73:D4
            X509v3 Authority Key Identifier:
                keyid:25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/F17996F2B21C11EFBDB2BA25C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:72:23:d2:54:4d:cb:9b:f1:5a:69:c7:c6:ce:1d:26:38:6d:
         fd:71:43:a0:d5:be:ea:4b:cf:a4:ab:7b:96:7f:eb:f6:96:e0:
         2d:b0:6b:0b:a4:93:1d:82:b9:19:d9:e3:27:12:b8:2a:f1:ec:
         27:46:33:ed:aa:80:04:cf:a8:54:ba:95:e9:3c:b0:2c:74:a4:
         4c:e0:9c:0a:8b:23:23:65:e4:64:aa:1f:8b:06:1d:47:3e:45:
         c4:ea:7c:6d:16:7d:73:ec:73:a4:71:19:fb:da:48:68:51:ac:
         5c:4f:15:d5:ef:41:ff:81:e3:80:dc:df:e2:c5:89:98:4b:87:
         04:72:46:8b:71:10:2f:3b:30:aa:ba:87:f9:25:1f:10:5e:28:
         35:70:a4:73:41:14:5c:6b:57:a0:bf:0b:68:38:f2:1c:26:75:
         bb:30:11:07:84:46:0a:8a:0c:55:e1:00:67:23:6c:f3:ee:4f:
         be:7d:a0:ca:11:3d:59:39:80:c3:2d:53:1b:8f:96:35:72:ff:
         da:21:26:d0:14:10:be:e8:ff:14:d3:f3:86:13:13:a8:f2:d2:
         d8:20:d1:ef:e7:60:c7:a2:b6:af:9f:95:8d:36:1b:24:c3:78:
         db:f0:fc:9d:73:e5:22:ea:b0:17:d3:dc:f5:0b:49:73:1b:82:
         69:4e:ed:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:32 2026 by rpki-client