Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/8C7D223C2DAB11EF88127264C4F9AE02.roa
File:                     8C7D223C2DAB11EF88127264C4F9AE02.roa (raw, json)
Hash identifier:          18T8dqrb31atCAaKR8ddYqk4Fx8QZQe+kHL0u3VnNZM=
Subject key identifier:   9A:C1:E5:3B:C1:E5:DB:7E:8D:EB:19:23:40:E8:D0:54:CC:09:F6:86
Certificate issuer:       /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial:       0197
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/8C7D223C2DAB11EF88127264C4F9AE02.roa
Signing time:             Wed 25 Feb 2026 03:23:55 +0000
ROA not before:           Wed 25 Feb 2026 03:23:55 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     10111
IP address blocks:        157.10.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
                          rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:28:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
        Validity
            Not Before: Feb 25 03:23:55 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=699e6b4a-3fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:cb:bd:d0:41:9b:6f:4d:05:80:a7:e7:25:
                    57:20:89:d6:b9:f7:f2:7f:e1:7e:1d:58:be:0a:34:
                    e8:d8:98:6f:ec:ae:a8:bf:94:a9:b9:d7:59:85:35:
                    76:b4:0c:d5:35:40:d8:60:7e:d3:c1:28:af:f2:de:
                    22:1a:ba:08:93:fa:91:ee:7f:f6:7c:38:26:79:23:
                    6d:da:73:6e:ea:2b:50:f3:ca:7f:1c:59:67:a0:22:
                    3a:6f:64:b8:03:7b:47:a3:b3:cb:c7:3a:16:b9:d7:
                    14:20:59:03:6a:b1:7e:dd:90:5c:a1:14:7f:24:22:
                    81:95:41:34:d7:c7:78:99:1c:bb:a5:81:28:1e:74:
                    7c:5d:64:8e:61:1c:c6:f5:73:9e:9c:60:07:22:89:
                    00:8f:94:64:5a:0a:da:8f:b2:98:2f:ad:6e:ee:ab:
                    9b:c0:e4:06:0e:a6:7f:03:2d:45:25:53:d9:4a:0e:
                    f8:be:bc:ec:06:e8:91:76:40:3a:86:b3:f2:47:36:
                    8c:72:21:a8:df:95:66:8d:96:e8:69:4b:a1:aa:fe:
                    3c:56:80:11:39:ed:35:1e:26:bf:b2:9c:52:a1:26:
                    2f:92:fd:bd:12:71:bc:9c:b1:9a:ed:47:da:fd:49:
                    5d:84:0f:8f:a7:e5:a7:6a:f2:81:36:47:b3:66:9e:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C1:E5:3B:C1:E5:DB:7E:8D:EB:19:23:40:E8:D0:54:CC:09:F6:86
            X509v3 Authority Key Identifier:
                keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/8C7D223C2DAB11EF88127264C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:8e:83:67:3f:43:52:d6:96:04:04:50:b1:b8:29:f7:b1:0e:
         4f:55:2d:45:81:4a:d7:73:cb:a4:6e:89:7f:c1:45:b7:6e:f9:
         9a:28:f8:d4:f8:b3:29:20:4f:20:48:11:49:e7:d2:b0:69:ae:
         f1:b3:b9:cd:98:a4:8c:f5:ce:fb:6f:12:af:3a:dc:1f:22:2d:
         c3:da:67:ab:37:b4:24:3b:b0:de:41:73:6c:11:7a:99:58:db:
         d9:6e:71:04:a0:0f:7e:77:70:4b:d0:35:c5:10:cf:4f:8c:42:
         16:95:4a:e3:ef:6d:c7:08:67:b4:56:e2:a3:1c:09:1e:3d:94:
         09:1d:01:bb:50:81:81:f5:28:15:a9:2d:20:c5:f1:ed:97:04:
         75:b6:14:fe:07:b3:d3:f7:19:14:13:38:96:c6:a5:3f:f9:a5:
         34:e6:3b:50:59:a3:f8:26:2f:af:00:e2:91:b6:d8:72:d2:7f:
         18:de:3e:0e:94:2c:b3:65:03:f2:97:ef:5b:5c:1a:b1:3f:f1:
         fe:1b:a6:50:22:dd:32:ad:e3:ad:ff:58:24:2f:b8:fe:af:aa:
         71:3b:4d:fc:bb:d2:4d:ed:73:59:7e:fd:cb:b2:98:ea:88:8d:
         d8:b6:9a:de:5e:15:10:37:b4:c4:ec:88:de:3a:1e:9a:38:2c:
         69:76:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:28:44 2026 by rpki-client