Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/1627927480FB11ED9B35954DC4F9AE02.roa
File:                     1627927480FB11ED9B35954DC4F9AE02.roa (raw, json)
Hash identifier:          JGThLscl6gYWty7onPVj55tcNOzgZj9wzjYyxf+XyoM=
Subject key identifier:   E4:AD:6E:DE:68:28:8E:D1:FC:B9:1C:FB:BD:29:04:BE:C2:18:EC:1A
Certificate issuer:       /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Certificate serial:       026A
Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/1627927480FB11ED9B35954DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:56:54 +0000
ROA not before:           Thu 27 Nov 2025 00:47:29 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7575
IP address blocks:        192.94.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
                          rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
        Validity
            Not Before: Nov 27 00:47:29 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a43796-3c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:b5:ae:84:ce:f3:c0:9c:a2:cc:af:ce:f7:
                    b3:bd:57:be:a6:95:b7:fc:5c:ca:56:52:0f:a2:94:
                    94:36:3d:57:af:b7:89:60:23:38:49:ef:98:1f:75:
                    ad:2b:22:77:13:24:cf:00:b8:9a:21:47:b8:64:6b:
                    d7:c5:53:f8:f8:d1:40:87:b1:67:fc:21:19:93:40:
                    e0:ff:33:d8:ce:24:91:29:5d:ec:7d:13:d3:e7:4c:
                    04:c6:da:dc:2a:17:eb:68:1e:4e:4c:4c:97:6d:fa:
                    e0:16:cb:0c:fb:c2:de:1d:46:f2:69:17:fb:55:e7:
                    f9:8d:0e:66:de:45:77:6a:dd:5a:20:97:37:5b:6c:
                    3e:97:27:73:3e:69:7e:36:61:65:89:59:a2:6e:57:
                    8a:2f:7d:22:15:02:eb:cf:11:68:e4:92:7b:f1:b2:
                    90:fa:f5:4f:ff:c7:21:56:6f:2a:92:20:2f:28:c5:
                    ab:29:e2:8a:70:46:f9:42:27:69:3d:88:36:e3:63:
                    e6:90:be:c9:5b:8f:d9:8f:03:e7:16:8a:28:90:1e:
                    2c:7e:16:0c:e8:f2:2c:c3:a9:f6:44:b8:ac:aa:65:
                    88:26:36:3e:bb:c2:0e:bb:fb:f3:77:59:8e:9d:b8:
                    bb:7c:dd:34:c7:8a:03:1d:04:95:69:69:9d:74:11:
                    12:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AD:6E:DE:68:28:8E:D1:FC:B9:1C:FB:BD:29:04:BE:C2:18:EC:1A
            X509v3 Authority Key Identifier:
                keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/1627927480FB11ED9B35954DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:22:5f:1f:3a:5e:05:ea:48:f6:7c:97:f9:b6:4b:7b:f3:d6:
         ea:42:88:3d:e5:61:83:21:3a:b2:90:a3:8a:be:f4:e2:d4:6d:
         c0:3d:69:0d:10:37:5f:03:06:a4:9d:73:fd:82:0d:2c:54:3b:
         0c:d6:69:eb:1d:c1:bb:e6:6e:e7:4e:28:a8:ef:85:6d:59:89:
         ee:96:8e:60:b5:8c:4a:39:f4:49:7b:ee:15:f6:ae:c7:a9:61:
         62:f9:a3:71:9e:b0:66:23:f8:17:00:f4:3b:cc:00:07:77:0e:
         b3:17:fa:a8:da:01:6d:92:eb:32:39:8f:d6:6b:d5:05:6d:a8:
         29:d7:ba:9d:7a:ca:e3:d3:47:1b:f0:c3:64:4d:0b:c6:3a:a3:
         9e:ff:97:be:85:03:32:de:5a:8d:41:6d:38:bb:74:bb:19:a5:
         39:ae:a9:66:4d:37:33:8a:24:61:3a:6c:f1:88:da:12:ce:7e:
         3e:4b:5f:22:c5:16:80:0d:35:f3:21:62:2f:56:64:36:45:e7:
         b8:92:41:ac:de:59:bb:07:42:0a:b9:cd:ba:52:9b:1a:fa:a4:
         a5:3d:99:05:15:59:f1:d7:f3:cd:e0:31:5b:23:b0:67:88:97:
         93:0d:43:97:d9:98:af:93:9f:44:bd:4e:a7:7c:76:aa:25:70:
         1a:32:59:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:59 2026 by rpki-client