Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/678B44F28B9F11EA97BB8046C4F9AE02.roa
File:                     678B44F28B9F11EA97BB8046C4F9AE02.roa (raw, json)
Hash identifier:          SntS7Vg1oFYriW3szo2h4z7g9R8/MBi6lWybX6Gw4N8=
Subject key identifier:   DD:2C:C5:0A:98:CA:FF:01:E8:5F:08:D2:DD:DA:B0:46:62:6C:FD:5C
Certificate issuer:       /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial:       19DA
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/678B44F28B9F11EA97BB8046C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:50:53 +0000
ROA not before:           Fri 20 Feb 2026 17:15:01 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     53813
IP address blocks:        175.45.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6618 (0x19da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
        Validity
            Not Before: Feb 20 17:15:01 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48a8c-f5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:11:22:98:3c:18:36:b7:3f:5c:0f:4b:f6:c9:
                    66:d1:18:3f:d4:68:68:12:f7:28:18:70:c8:81:fc:
                    df:4b:f8:80:45:9e:8b:b0:d1:07:ce:8c:f9:5f:63:
                    ef:13:b0:55:d0:8c:6c:39:88:ca:ed:7b:24:bb:9b:
                    f9:dd:56:e8:cc:f6:89:3b:97:44:ad:c9:b4:94:de:
                    b2:cc:fd:3c:98:b1:2b:9b:e7:b2:3e:b2:be:9c:ba:
                    3f:39:e0:bb:da:da:5f:49:a4:45:02:b0:c2:c8:ed:
                    49:4f:a0:ff:36:36:33:83:17:88:28:99:04:25:4b:
                    04:4b:74:f3:c5:9a:a7:a2:61:43:07:3f:75:28:2a:
                    57:e4:ad:23:44:6d:15:6b:c6:f2:62:79:ae:75:69:
                    83:a1:3f:ed:c4:6a:63:54:6c:3e:0b:67:13:e0:3c:
                    2d:d4:08:1a:bb:39:7e:b9:59:f6:06:97:16:3b:d0:
                    39:76:b7:46:85:d6:49:ac:c7:52:54:d4:7a:55:5e:
                    1f:fb:14:64:da:9b:8d:e9:f5:8a:bb:13:fe:93:5b:
                    84:8e:af:4c:d1:19:0c:2e:d8:ad:f5:55:fa:62:45:
                    8a:9c:c5:a8:c1:0a:db:9e:94:f3:ef:bf:96:4f:02:
                    ce:59:c3:0f:e4:40:26:cb:48:39:f8:21:a5:a7:45:
                    29:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2C:C5:0A:98:CA:FF:01:E8:5F:08:D2:DD:DA:B0:46:62:6C:FD:5C
            X509v3 Authority Key Identifier:
                keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/678B44F28B9F11EA97BB8046C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:55:35:4d:22:5a:58:94:79:a8:86:15:c7:21:71:c4:a0:bf:
         57:6c:c2:4b:2b:b5:6f:54:5e:f9:85:18:99:5a:b6:f1:a1:9d:
         aa:10:17:4f:9a:59:61:d3:5e:19:33:68:1e:c7:2a:2b:e4:3f:
         e0:47:d2:b7:50:60:13:fb:fb:cf:cb:34:92:82:a4:d4:cd:6a:
         bb:9f:69:c3:f1:e1:e3:b1:d8:f0:ac:f2:c7:f9:c1:19:1f:b4:
         c8:f0:d6:86:5b:c2:84:a6:a3:01:93:5a:a7:d0:76:36:e5:61:
         c9:5a:ab:23:cb:5f:8f:ee:d2:96:21:87:af:57:02:dd:89:99:
         cc:12:c6:a0:cb:ed:88:ef:73:54:b6:33:aa:a5:2e:83:bf:ef:
         65:42:ef:94:9d:5d:19:b8:2b:46:13:b7:28:ce:59:41:d6:37:
         1c:f8:46:4d:29:38:ea:89:2a:a7:77:f3:27:12:6f:e6:30:92:
         3d:68:52:f4:3e:bf:ce:05:be:6d:d1:eb:ea:b0:ed:b9:27:3c:
         e1:17:17:79:b8:84:82:35:81:2e:76:9e:5c:1a:d8:05:99:46:
         d1:c4:f8:6d:1c:af:11:29:eb:35:dd:0a:23:02:24:1b:e6:3f:
         8e:8a:41:98:d6:6e:a3:6e:43:a8:2b:c3:ae:b5:b8:07:67:8c:
         a9:c5:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:25 2026 by rpki-client