Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/39926F626DB211F0AC1D0420C4F9AE02.roa
File:                     39926F626DB211F0AC1D0420C4F9AE02.roa (raw, json)
Hash identifier:          RBAEIDXbn7aMgm9qJyEPSxcCdAduSFbdLObAMZhpbA4=
Subject key identifier:   43:FF:BF:0E:2C:12:CE:98:09:7C:6B:AE:0E:32:CD:35:F8:0C:50:6B
Certificate issuer:       /CN=A91FD6A0/serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC
Certificate serial:       72
Authority key identifier: D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/39926F626DB211F0AC1D0420C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:13:07 +0000
ROA not before:           Thu 31 Jul 2025 02:01:08 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154099
IP address blocks:        202.1.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl
                          rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD6A0, serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC
        Validity
            Not Before: Jul 31 02:01:08 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3f512-54be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:48:fb:b0:00:75:d5:35:20:83:25:88:dc:
                    cc:76:5b:04:9b:ee:22:10:83:36:c0:db:97:71:58:
                    7e:75:20:d8:3b:21:0e:79:34:9f:5a:99:34:57:16:
                    ec:5c:7c:58:6e:76:fb:11:6c:57:07:3f:ac:70:c7:
                    c8:80:6f:13:f9:ed:7e:16:00:48:4c:18:c6:60:5a:
                    be:31:2b:46:69:37:bb:1a:fd:3f:e3:3e:a2:71:27:
                    f5:92:a4:c2:c6:25:5f:5b:e0:c7:d9:8f:11:dc:53:
                    1f:29:8a:e8:0c:d9:a2:07:88:c6:f2:20:1b:99:0b:
                    8e:1f:a2:a3:9c:7e:61:4d:3d:14:0b:aa:bf:a1:d3:
                    e2:cc:f5:36:d3:7a:58:a3:a6:2b:71:39:29:9b:d6:
                    1e:0b:27:39:fa:dc:d6:2d:d4:9a:e2:3f:5f:2c:12:
                    8b:e2:66:e3:cd:e5:82:69:3a:6c:fe:f0:bd:a5:6c:
                    ea:5c:9e:e2:34:33:47:bd:cb:6e:db:83:f0:08:a4:
                    2d:af:03:34:c2:4b:58:4b:85:bb:2e:46:01:b9:f5:
                    ae:ce:77:9f:ef:8d:06:d1:da:3a:d5:04:50:9e:12:
                    9f:9b:50:72:6b:b9:77:dd:d0:64:79:d6:a0:d5:0c:
                    96:8e:99:26:74:54:79:ea:55:0c:61:7a:aa:8d:05:
                    c1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FF:BF:0E:2C:12:CE:98:09:7C:6B:AE:0E:32:CD:35:F8:0C:50:6B
            X509v3 Authority Key Identifier:
                keyid:D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/39926F626DB211F0AC1D0420C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.1.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:41:da:21:a0:7a:a3:f6:ac:7f:04:51:ce:d0:c5:55:75:41:
         05:23:6d:e0:d0:1a:ec:e6:7e:80:85:45:99:0f:53:bb:af:7f:
         fc:45:c5:bc:a9:3f:c9:2e:29:88:ef:f2:ab:54:e2:48:d3:4a:
         c9:7b:46:0b:33:4b:4b:78:57:88:87:17:f3:6b:b7:62:e8:d9:
         91:27:e9:22:4a:9a:11:6b:f9:18:23:6b:70:a9:d3:22:27:be:
         fe:68:53:c6:bf:27:a2:a4:d6:3a:f4:04:47:14:8b:85:9b:de:
         1d:8c:d2:79:78:27:1b:19:c0:36:9c:18:8e:10:dd:7c:70:7c:
         22:04:a1:99:dd:e6:45:0a:d2:7e:40:dc:17:d1:b7:b9:a8:e3:
         f9:95:a9:93:71:18:64:79:b1:f7:aa:b1:91:4c:e1:df:f0:76:
         03:2a:9e:67:fd:f9:13:6f:64:ff:b3:50:3d:c4:2c:2e:19:a6:
         49:e4:f3:0c:83:e7:a0:76:67:52:35:5d:d3:22:04:00:55:f9:
         bd:0b:31:61:8b:35:a9:1b:ed:e4:3e:3b:35:3a:22:c1:2e:fe:
         bd:a3:79:da:f2:f6:07:b0:b5:99:3a:0a:f8:93:20:bc:d1:75:
         40:fb:bf:50:0d:63:dd:f8:24:6f:6e:e4:34:26:2c:f2:ae:1a:
         b7:26:a6:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:46:54 2026 by rpki-client