Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/68869A98493D11F1A62A19BFB5833773.roa
File:                     68869A98493D11F1A62A19BFB5833773.roa (raw, json)
Hash identifier:          G98XlGylGqD4IWLKPRkQ33JbE0HvP479vwIkVZry/iM=
Subject key identifier:   56:9F:D6:83:09:F1:89:83:D6:D7:AE:E0:18:3A:09:D1:BE:47:52:A3
Certificate issuer:       /CN=A913284A/serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Certificate serial:       26
Authority key identifier: A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/68869A98493D11F1A62A19BFB5833773.roa
Signing time:             Wed 06 May 2026 11:19:12 +0000
ROA not before:           Wed 06 May 2026 11:19:12 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     149453
IP address blocks:        163.128.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
                          rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913284A, serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
        Validity
            Not Before: May  6 11:19:12 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69fb23b0-5827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:83:97:d2:59:82:d9:73:af:9e:ec:97:53:
                    c5:2a:86:ae:e6:cd:35:92:1a:26:a2:cf:a4:08:97:
                    b0:29:dc:d0:71:02:fa:6f:3a:72:6a:ac:1b:e5:02:
                    b6:ed:49:37:2c:d3:d0:66:19:ad:ea:69:d8:8a:9e:
                    52:83:51:33:d9:3a:64:bf:1d:dd:8f:0f:3d:65:0d:
                    71:01:65:ff:2f:a0:0a:08:08:12:d6:e7:50:1b:30:
                    85:c4:ef:fa:3b:d7:32:fc:9e:4e:ca:23:5a:2c:a1:
                    13:4b:0d:19:d7:9d:67:63:3f:86:84:ba:be:77:8c:
                    8b:e9:8e:2c:0e:84:e8:78:3f:88:9d:30:46:ce:49:
                    79:bf:18:7b:92:5d:b4:76:21:b6:3f:3a:ee:d4:82:
                    6f:24:36:0c:12:9c:5a:48:2e:13:d6:53:90:e1:7b:
                    5e:86:bf:a5:c4:2c:63:95:d9:fb:4a:94:9c:c1:e8:
                    95:6e:d6:4f:3f:d7:4c:f2:59:79:1f:12:7a:f0:29:
                    dd:f6:cb:26:e8:fb:a8:5d:b1:cf:20:b7:fe:8d:4b:
                    99:64:db:8f:49:91:8b:df:77:38:1b:5b:80:78:0c:
                    c1:ed:51:33:cf:42:c3:ca:8a:6f:08:f7:4b:68:6f:
                    cc:08:91:c2:0c:37:55:c7:a9:52:7e:2b:d2:95:4f:
                    53:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9F:D6:83:09:F1:89:83:D6:D7:AE:E0:18:3A:09:D1:BE:47:52:A3
            X509v3 Authority Key Identifier:
                keyid:A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/68869A98493D11F1A62A19BFB5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:4c:52:2f:25:3c:9d:ac:3c:95:4b:c7:59:ca:c4:20:51:ab:
         a0:1d:e9:1e:60:eb:c9:f5:17:7c:63:4e:91:bf:67:14:f4:4a:
         3b:d7:e7:e2:f4:8d:63:85:94:51:e5:4e:a9:f4:b9:ab:7b:23:
         c8:02:ae:47:83:00:80:a4:3b:77:69:47:54:b1:e0:a1:63:1d:
         73:fe:97:3a:e2:9e:f7:b1:ac:b4:b8:a2:60:6e:6f:58:75:e3:
         dd:35:e9:99:84:3e:68:c8:50:94:d9:2a:86:6d:3d:eb:1a:70:
         09:4b:10:6e:01:70:f8:10:16:e4:d0:50:9f:ac:b2:8b:1b:f5:
         e6:8d:3e:57:79:fd:ef:f9:7b:fe:91:57:9e:de:6b:d7:33:9d:
         36:1f:c1:a7:f0:08:ae:a4:77:c1:b2:8a:72:10:10:26:b4:56:
         d4:d9:3b:a4:94:e2:f9:da:ad:af:ac:98:89:dd:97:65:ce:6f:
         7d:4f:80:3d:df:36:c7:42:6a:5b:d7:23:3e:a6:94:29:d2:3e:
         a0:c7:e1:09:5a:3d:6e:40:41:8d:df:0c:7d:0d:5d:f1:bb:7a:
         03:26:14:5f:b0:32:28:e1:3f:48:ce:0c:53:89:0a:ef:fb:f1:
         9f:fb:27:76:19:08:8d:4c:4e:5f:d9:bc:65:98:60:30:6e:2c:
         5e:e1:4a:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 15:04:13 2026 by rpki-client