Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/FBA017C0B26F11EF9B327759C4F9AE02.roa
File:                     FBA017C0B26F11EF9B327759C4F9AE02.roa (raw, json)
Hash identifier:          Qmb5CZlRJ9SRPdF9+9wPc93vQjmXJvRUUhlA9HA/iv0=
Subject key identifier:   F7:5F:DF:1D:B6:D5:D2:A4:A3:A6:30:F5:B6:76:0C:C8:C1:15:29:D9
Certificate issuer:       /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Certificate serial:       0AB0
Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/FBA017C0B26F11EF9B327759C4F9AE02.roa
Signing time:             Mon 30 Mar 2026 20:25:16 +0000
ROA not before:           Mon 30 Mar 2026 20:25:16 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152918
IP address blocks:        210.16.122.0/24 maxlen: 24
                          210.16.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
                          rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2736 (0xab0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
        Validity
            Not Before: Mar 30 20:25:16 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69cadc2c-097a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:b6:e2:a9:c4:7b:78:c4:00:74:ee:1f:16:
                    e8:93:21:e4:5f:42:fc:23:27:03:09:0b:53:42:48:
                    57:fd:1d:70:33:97:e8:c5:04:8e:cc:4b:c4:6f:c4:
                    2d:9d:6d:b3:1a:77:4a:0b:38:0b:9e:7f:00:4a:c3:
                    ba:88:87:b2:0c:26:88:11:8a:7c:22:b2:82:3a:d6:
                    8d:41:15:02:c2:e9:b4:74:91:44:60:4b:f4:c9:ac:
                    a4:8c:26:3f:66:9a:9e:d9:a1:93:fc:92:bb:37:4f:
                    15:fa:31:f5:f3:2a:fa:68:66:d0:5f:91:09:5d:6d:
                    93:d0:74:b1:04:ce:f0:e2:0f:b7:ca:f4:14:98:2f:
                    d0:2e:76:e5:79:2f:35:26:70:d1:ce:bf:49:b8:f9:
                    f6:a2:61:74:05:a3:b1:2d:28:cc:8c:a7:92:68:09:
                    f1:ce:d7:62:85:f7:79:89:8f:27:a0:ba:c4:65:06:
                    05:91:f4:1b:74:00:51:45:c9:36:79:32:1f:ce:d5:
                    9b:bf:01:ee:47:20:6b:a8:fc:51:d3:df:1e:15:94:
                    58:df:91:fc:e1:18:34:20:d9:90:0f:0c:7c:7c:7c:
                    b9:51:a0:20:c9:5e:96:15:58:84:2c:87:e2:c7:dd:
                    83:9a:01:9f:a2:1a:40:89:fb:36:e2:7f:fa:7f:08:
                    66:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5F:DF:1D:B6:D5:D2:A4:A3:A6:30:F5:B6:76:0C:C8:C1:15:29:D9
            X509v3 Authority Key Identifier:
                keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/FBA017C0B26F11EF9B327759C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.16.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:d8:04:f1:7c:9e:6a:23:52:12:77:df:23:19:76:24:da:c3:
         f2:b4:b3:5b:95:56:db:5a:e5:95:d9:09:b8:37:40:88:73:a2:
         57:4b:b0:b8:c8:52:61:e0:d3:13:35:1b:de:31:65:fc:9b:7a:
         0b:29:b7:03:4f:dc:9d:a9:9a:8e:fb:b7:23:c2:e3:a8:c9:c2:
         f3:d4:3e:8b:fc:33:5d:88:7e:8a:3d:fd:79:04:6d:d1:7c:48:
         73:19:d8:32:f5:f0:ce:f1:93:21:b1:c6:49:7b:e9:03:2b:b8:
         15:17:f5:2f:ac:ea:41:e1:2f:b6:36:82:fa:01:ab:da:2f:3a:
         af:ec:43:a0:62:26:39:26:c0:9e:4d:9d:2e:79:bd:8e:88:30:
         10:38:db:fa:14:a2:82:bc:a8:df:24:00:ed:5d:d1:be:24:df:
         1b:48:28:68:e0:bc:4d:b7:87:26:53:86:8d:08:91:f6:93:56:
         09:8c:8d:9f:c7:3b:81:a9:30:73:bf:bb:b0:9b:98:0d:71:5f:
         88:8c:2e:2b:24:03:9e:7d:5e:89:ed:64:d3:89:7f:e6:c8:f9:
         b5:e2:ea:2e:03:42:46:89:5b:fb:40:e0:ff:a2:1f:43:af:8d:
         af:8f:05:b6:07:f2:ce:a4:66:98:a4:45:25:c6:33:6f:b6:cc:
         fe:cd:97:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:05:07 2026 by rpki-client