Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8EADC8C617DC11EE959DE671C4F9AE02.roa
File:                     8EADC8C617DC11EE959DE671C4F9AE02.roa (raw, json)
Hash identifier:          e7VhcfQT9ruvv4CGZkrGsmAxeo+APLPyU8Ze+kwj1t4=
Subject key identifier:   CB:53:C0:F8:4D:C2:8B:A4:DE:07:88:3A:42:8B:94:60:3A:C6:9C:61
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0DC4
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8EADC8C617DC11EE959DE671C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:42:19 +0000
ROA not before:           Sun 02 Nov 2025 19:08:20 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     65110
IP address blocks:        58.26.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3524 (0xdc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Nov  2 19:08:20 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4888b-9e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:4a:27:ff:d3:12:47:75:82:32:78:b7:a3:be:
                    ea:bc:de:73:5e:60:9d:c0:24:fb:fd:08:b8:3b:30:
                    52:98:15:89:39:12:43:5b:9d:aa:28:09:32:11:19:
                    35:0b:da:25:6b:c8:b5:d7:28:8c:79:99:68:c1:20:
                    f8:59:e0:25:1b:9e:dd:49:2a:43:32:c7:be:ec:dd:
                    df:84:b8:e4:ff:16:a0:70:a4:56:1e:b5:66:76:9b:
                    b2:3c:e1:c9:46:87:4f:2b:02:62:35:d1:dd:77:4b:
                    ee:eb:23:23:6e:21:95:7e:94:a3:ef:b1:d0:d9:34:
                    8c:ba:9f:0c:bf:28:eb:57:47:58:da:6f:ed:fd:9e:
                    8b:3a:21:15:fd:cc:00:5a:c3:5b:77:8b:5e:c5:81:
                    5b:9e:30:c6:72:17:e1:9d:16:70:58:57:5d:38:e5:
                    c2:a2:5a:d1:90:78:6c:b8:14:a5:e5:c9:06:7f:12:
                    f2:4d:60:d4:98:0e:d2:bc:dd:c1:ec:6f:a8:de:06:
                    6c:fc:80:6a:b7:ce:05:0b:46:c3:f6:0c:6d:05:1c:
                    a5:72:f5:86:50:f4:3a:7b:4c:bb:b0:3a:d7:2c:8e:
                    9b:86:be:fe:fd:4d:3b:1a:aa:ac:98:8b:af:2b:d9:
                    19:b7:a3:6b:ad:ad:34:f6:d2:c7:fa:8f:ca:b0:b6:
                    6a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:53:C0:F8:4D:C2:8B:A4:DE:07:88:3A:42:8B:94:60:3A:C6:9C:61
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8EADC8C617DC11EE959DE671C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.26.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:73:22:24:be:34:a5:e8:bb:7a:cc:88:44:b7:4d:fa:a2:62:
         6a:80:a5:6f:9e:17:23:ec:36:f9:5b:ae:b6:bd:ea:9d:5b:cb:
         6b:d5:68:b6:60:ca:83:e5:81:43:42:89:f2:fb:55:47:11:80:
         5c:e2:cb:68:21:be:25:cc:06:50:26:b2:30:42:38:e4:55:12:
         01:74:2f:8b:e3:b4:a9:4a:0c:83:a5:2c:88:b7:06:59:72:df:
         f3:94:02:45:99:94:ff:f9:e7:1f:18:d5:a6:ab:ec:71:85:0b:
         62:50:d9:d6:bf:48:7a:42:b7:3c:9f:1b:2d:c6:4e:34:63:27:
         6a:17:5c:a7:0d:6c:1f:a8:73:92:61:e0:0a:df:c1:8c:14:f1:
         9b:ee:45:43:94:d7:fe:3f:f2:36:18:3a:6a:fd:a4:71:f0:c8:
         ce:a5:aa:58:b7:34:f0:d2:b7:a8:69:f6:7b:eb:40:79:7d:86:
         61:1e:a8:24:cb:0d:0d:25:99:68:f3:3b:1d:b5:7c:8f:60:d3:
         77:81:7b:c0:82:df:4e:f9:13:53:9b:47:29:02:b8:d1:2e:b0:
         ac:57:b1:c0:9b:f7:7a:a9:73:05:3f:bc:5c:7c:d5:c8:99:86:
         5a:73:fb:07:5d:39:fb:bb:25:08:94:e5:cc:2a:63:64:c2:78:
         fe:66:71:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:50:58 2026 by rpki-client