Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/226B7BC2AAC611EE9F22785DC4F9AE02.roa
File:                     226B7BC2AAC611EE9F22785DC4F9AE02.roa (raw, json)
Hash identifier:          /nObZEdhHIQ9A8Keqjb2QjCOjvfkh8nk67S98ZEYSvQ=
Subject key identifier:   F8:76:01:F7:AB:F6:EA:7B:D1:C6:2C:76:5F:57:47:41:49:34:0F:28
Certificate issuer:       /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
Certificate serial:       0DF5
Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/226B7BC2AAC611EE9F22785DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:17:50 +0000
ROA not before:           Thu 20 Feb 2025 18:56:38 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     18060
IP address blocks:        163.47.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3573 (0xdf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
        Validity
            Not Before: Feb 20 18:56:38 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a42e6e-67e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:b1:4e:40:13:a2:56:ec:2b:cd:d0:d4:ae:
                    f6:79:f1:6e:7b:34:be:ef:08:13:30:15:02:3a:f4:
                    25:7c:0c:ec:b1:22:01:d7:30:96:38:70:11:6b:71:
                    c9:c1:28:ed:8f:fc:f3:9c:99:b5:b1:6e:1e:0b:da:
                    d5:1e:fb:dd:f1:c2:ba:a1:2a:a2:c1:83:07:5f:9c:
                    ea:1c:81:c0:11:94:ab:98:f0:d9:98:e8:27:5c:75:
                    26:1a:19:bf:15:25:ae:f3:31:90:48:c3:e1:b1:10:
                    b6:98:e9:39:29:2f:b3:3d:84:f9:cf:11:46:e7:5e:
                    cb:58:fc:97:66:d4:5b:ef:0b:5b:4c:52:96:88:53:
                    2b:0d:1c:63:c5:ac:f7:54:7b:7d:c4:73:ed:05:d5:
                    aa:8b:71:eb:c7:65:8c:78:c6:6f:85:bf:66:0f:e3:
                    1e:8e:16:26:6f:cd:31:67:62:08:5a:ea:c5:10:69:
                    a2:8a:cd:53:b5:01:d4:71:16:bc:3d:fe:e0:3b:26:
                    4e:8d:df:a8:12:1d:a8:c5:b0:ca:a9:07:42:8e:c8:
                    62:2e:d4:c5:e1:33:11:ec:53:03:c8:06:2c:24:be:
                    15:b4:6a:7d:46:5d:19:10:4f:4d:5d:40:9e:e4:3c:
                    8e:ff:b1:86:37:57:29:88:03:43:20:6d:6f:f3:68:
                    a1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:76:01:F7:AB:F6:EA:7B:D1:C6:2C:76:5F:57:47:41:49:34:0F:28
            X509v3 Authority Key Identifier:
                keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/226B7BC2AAC611EE9F22785DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.47.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:ed:fe:37:63:b9:bb:9f:2b:ac:3a:d6:34:e0:88:fa:fc:7f:
         28:e4:fb:36:e0:62:5d:f1:64:5a:8b:b3:e4:4e:0b:b7:32:8e:
         2c:28:bf:44:b7:9b:0b:1b:b8:25:ea:f2:c6:a4:41:ad:dc:fa:
         5e:53:c3:25:8c:82:16:fa:11:43:42:51:53:62:24:e0:24:63:
         a8:b5:ec:c4:31:e1:21:52:4a:de:a8:61:93:c3:bd:a3:fb:9f:
         e7:8a:c4:25:57:56:9f:84:f8:44:97:e3:c2:e4:37:c3:39:9f:
         97:d3:9d:b0:08:47:18:13:ee:82:6e:21:aa:12:c7:ff:6e:6f:
         02:d5:34:ff:b3:1b:a8:c0:3c:fd:1c:f5:a2:56:00:7f:6e:71:
         8a:f5:00:a2:32:76:f6:f9:ec:e1:31:8d:6c:1b:61:cf:99:eb:
         03:c6:9d:41:15:3a:01:33:1a:0a:12:19:ca:05:62:a9:72:ed:
         9f:ed:be:98:03:a9:b1:c8:5d:18:05:d2:6b:60:c9:8f:de:bf:
         fd:3f:5e:af:53:70:0c:fc:66:c4:9a:5c:79:ba:12:a8:97:9e:
         8d:1b:19:e5:75:c2:0e:92:8d:17:ab:73:8f:03:4f:e9:a4:b2:
         90:15:0c:3b:ce:5c:0b:fc:30:69:9b:ea:71:87:b7:9a:2a:9a:
         da:77:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:38 2026 by rpki-client