Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/E14DB058662411EBADFEB364C4F9AE02.roa
File:                     E14DB058662411EBADFEB364C4F9AE02.roa (raw, json)
Hash identifier:          degQa76ry1qg50W9u2/YZGG6PCGmrbOjwy5QlyzcKog=
Subject key identifier:   15:FC:A3:44:00:4E:DF:97:73:5A:DE:A4:95:17:D9:E5:7A:5D:D9:D8
Certificate issuer:       /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
Certificate serial:       0740
Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/E14DB058662411EBADFEB364C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:12:27 +0000
ROA not before:           Fri 06 Feb 2026 22:18:25 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     1221
IP address blocks:        203.22.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl
                          rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1856 (0x740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FA65, serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544
        Validity
            Not Before: Feb  6 22:18:25 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a4494b-91a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:eb:46:48:24:1c:68:24:6b:20:28:63:b8:
                    b4:b1:a1:20:1d:b1:4b:e4:30:34:0b:c2:be:33:e2:
                    8c:3b:5d:bf:0f:59:f6:54:3e:48:27:7c:50:f6:fe:
                    ca:37:84:9c:d3:6c:c6:1a:d4:6f:ea:6d:0d:ec:a8:
                    d8:d5:2b:80:17:e2:7e:db:55:4f:24:86:0f:fd:64:
                    ca:da:e8:f9:0d:ba:b6:89:f2:51:cc:a7:32:ab:16:
                    15:18:d5:b8:7a:21:16:1d:e4:66:05:3b:df:94:06:
                    3d:56:f4:21:fb:ab:87:ef:62:1a:9a:f3:2c:4c:9d:
                    7e:59:96:7f:1c:91:fe:ee:c3:b3:10:86:b8:76:1e:
                    19:b4:1e:a2:fb:5a:70:5d:69:10:70:c2:01:44:e5:
                    e1:60:93:34:e1:82:ad:2d:73:e7:f9:05:9d:c9:69:
                    00:71:09:32:7d:02:e3:4d:6b:f7:67:0d:cd:53:aa:
                    ba:f9:f9:4a:ab:29:61:70:0e:df:de:62:da:08:c4:
                    f1:62:87:e2:38:e3:12:59:8c:62:eb:59:91:7f:c4:
                    6c:2a:eb:59:60:e7:fd:62:38:c7:2a:69:42:7d:b2:
                    2e:c2:b4:89:2e:b9:1e:1c:de:94:ef:31:07:01:33:
                    be:b8:3d:d5:09:ea:1e:76:d3:c7:c4:de:ef:8e:db:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FC:A3:44:00:4E:DF:97:73:5A:DE:A4:95:17:D9:E5:7A:5D:D9:D8
            X509v3 Authority Key Identifier:
                keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/E14DB058662411EBADFEB364C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.22.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:bd:96:02:1d:a6:83:33:d9:36:3b:c5:cc:bd:2a:33:3d:a3:
         2c:f5:e9:14:52:34:3d:b3:13:d1:4d:8b:c8:d2:3e:c1:49:73:
         fb:7b:d8:22:23:8b:80:3c:7c:46:94:95:37:8d:d3:96:b2:8f:
         f1:93:f5:aa:a3:a3:f8:06:1d:40:c3:f5:4c:c9:c2:e5:35:a0:
         2b:59:b3:a7:5c:25:fa:7e:aa:01:62:96:75:94:04:d1:68:e0:
         d4:f1:bc:2e:8c:eb:2c:1c:4e:d6:88:e9:b3:91:8d:f6:6b:33:
         25:5e:82:3b:6c:f4:9b:8c:9f:78:41:a8:08:1b:dd:05:5d:d6:
         87:4f:87:94:a0:d8:35:40:46:b2:05:7e:b6:8c:a9:76:9b:82:
         6b:2c:0d:cc:32:13:26:20:70:4c:d4:91:f2:37:0f:8e:ce:61:
         1d:8b:32:52:3a:c3:5c:11:95:72:9d:de:e5:9d:59:00:10:2c:
         dc:2a:3b:4f:b7:8c:a0:f8:78:f5:6a:1c:54:46:8c:c2:66:ff:
         16:40:de:9d:37:7f:e7:ce:0e:38:d9:7b:9b:09:8f:af:13:f3:
         56:b3:f2:b7:6e:10:0a:37:9e:8d:5d:d0:0e:85:6a:39:42:b8:
         b8:3e:6a:7c:8e:33:00:c3:d4:52:47:b2:2a:41:a9:10:09:08:
         9f:c1:d9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:33 2026 by rpki-client