Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/26CABD66DB4011F0B92C4C778FD3641D.roa
File:                     26CABD66DB4011F0B92C4C778FD3641D.roa (raw, json)
Hash identifier:          77vlGPsTBdhPDBopo52mzOrA60Cg+50amZ8+PMCNaP0=
Subject key identifier:   21:C7:05:E9:B5:1E:77:45:C6:50:EA:EA:2E:D2:08:4E:C2:0A:74:D0
Certificate issuer:       /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Certificate serial:       37
Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/26CABD66DB4011F0B92C4C778FD3641D.roa
Signing time:             Sun 01 Mar 2026 06:00:40 +0000
ROA not before:           Wed 17 Dec 2025 12:02:02 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137127
IP address blocks:        144.79.158.0/24 maxlen: 24
                          144.79.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
                          rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
        Validity
            Not Before: Dec 17 12:02:02 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d608-2cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:c2:57:c8:e3:3a:3a:be:de:85:37:15:04:
                    c8:ad:d7:c5:2e:59:fa:57:22:fb:47:95:e1:6e:c3:
                    88:56:ec:5c:b8:fa:36:55:c6:45:fb:49:34:9d:b4:
                    2d:ae:1b:16:69:56:17:f5:68:9c:ef:1f:2a:63:fe:
                    06:54:94:9f:c4:ce:67:f4:d6:82:bb:16:bf:79:dc:
                    71:98:13:75:55:a8:73:21:a4:44:c7:82:89:32:d7:
                    fe:01:6b:c1:65:46:50:c0:e4:68:ae:24:c5:4e:59:
                    21:3a:32:e6:dc:0b:49:b0:c2:48:1c:50:6d:6f:b6:
                    7c:ca:42:ca:21:72:5d:77:3e:53:54:05:c8:13:c0:
                    14:73:33:c6:e8:cd:44:31:4b:d2:6b:b1:89:d2:63:
                    00:02:8d:23:b4:b2:ed:05:9e:49:64:98:24:42:d3:
                    4a:43:2d:76:00:9d:55:9f:35:09:7e:17:79:a7:76:
                    f5:70:41:a4:75:98:b5:4d:3b:7e:9d:da:df:70:b6:
                    ed:fc:89:c4:8c:31:e2:b7:1b:c4:6d:88:ef:48:0c:
                    9e:93:ca:92:be:29:a4:1e:01:74:6e:07:4b:8f:39:
                    59:6e:3a:78:1a:bc:f5:69:aa:1d:7d:ca:9a:6e:e5:
                    79:0e:26:14:b9:9a:79:fb:0f:49:23:2c:dd:64:79:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C7:05:E9:B5:1E:77:45:C6:50:EA:EA:2E:D2:08:4E:C2:0A:74:D0
            X509v3 Authority Key Identifier:
                keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/26CABD66DB4011F0B92C4C778FD3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ee:ef:e2:72:a7:98:d7:8b:a2:70:2e:a3:3d:f2:7d:56:64:6e:
         6f:2a:c6:02:15:67:1d:b6:63:e9:db:db:ae:c7:38:be:93:be:
         f3:02:7d:4f:00:4b:21:d7:b5:fe:bb:dd:6c:96:97:81:1f:03:
         18:9b:24:77:27:69:39:3c:af:7b:e1:32:eb:f1:b2:4c:ca:02:
         7f:c2:61:d4:ce:aa:1e:08:36:cc:f7:41:45:46:63:e1:c2:73:
         16:36:9c:da:56:58:ca:4a:14:49:f9:5b:0c:a0:82:26:6b:b2:
         81:0a:6f:33:2e:5a:ad:73:91:d7:70:4b:dd:c1:64:ed:0e:0d:
         df:46:35:f8:f1:ba:92:bb:ac:b8:1e:35:be:92:39:f8:24:1b:
         69:62:8b:c5:b8:2f:b7:ce:78:98:f2:09:e4:a2:ed:47:15:3c:
         94:4f:35:25:19:92:57:7a:89:6c:a7:38:30:a9:39:10:e0:04:
         00:fa:a1:a9:62:41:29:eb:51:fc:89:67:25:db:6d:26:6b:33:
         0d:09:a1:a0:87:ad:73:6c:a2:f3:26:a2:2d:1d:d5:48:70:69:
         16:9a:6b:2f:f2:30:9f:40:ca:f3:04:6e:0e:ed:50:eb:66:0d:
         1e:f7:20:ea:19:d5:dd:d5:f6:b8:b0:77:c8:fb:aa:a8:3c:1c:
         a7:a0:48:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:28 2026 by rpki-client