Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/FDBAF28A0DD911F083E3DA5FC4F9AE02.roa
File:                     FDBAF28A0DD911F083E3DA5FC4F9AE02.roa (raw, json)
Hash identifier:          HlRkRTgaX2YjmfJvMFK31pOAfjWACz11mE9C9oEPr04=
Subject key identifier:   07:15:8C:96:94:92:19:D8:7C:69:46:B1:9A:AA:85:AE:B1:50:ED:D1
Certificate issuer:       /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Certificate serial:       1355
Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/FDBAF28A0DD911F083E3DA5FC4F9AE02.roa
Signing time:             Fri 06 Nov 2026 17:30:59 +0000
ROA not before:           Fri 06 Nov 2026 17:30:59 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     140096
IP address blocks:        182.255.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl
                          rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 16:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4949 (0x1355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A8A4, serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
        Validity
            Not Before: Nov  6 17:30:59 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6aee0ed2-701b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1e:30:54:ce:f7:cb:ad:de:80:5f:8a:fa:d5:
                    d1:2e:18:ce:35:50:71:b8:e9:1b:de:14:b5:18:f2:
                    0a:9f:5b:12:eb:f9:90:a2:20:a3:da:d4:b9:a3:f2:
                    a9:f2:d4:db:35:87:79:1c:d9:c7:e1:ae:11:8e:ed:
                    bc:07:d9:50:46:a4:44:bd:0f:25:a2:b1:2f:dd:2e:
                    dd:99:eb:7f:25:7f:02:65:b3:d7:6b:c6:6b:2e:8a:
                    ab:c1:53:57:20:ca:9a:a4:18:c3:60:62:7f:ce:bf:
                    4f:46:2d:c9:d1:e2:66:9a:2f:bb:ff:56:4f:2f:84:
                    4f:ea:07:02:a0:07:51:67:bb:0c:6d:1f:12:3b:77:
                    94:56:2a:2f:08:c9:d8:37:20:e0:cd:86:2f:c2:8c:
                    41:38:9e:1e:01:d6:48:9b:07:4d:58:01:0f:8e:26:
                    bb:3b:9a:59:91:23:94:9a:41:70:e6:d7:1e:94:ee:
                    50:15:cb:43:dd:84:c5:fb:97:99:5c:0a:8a:06:62:
                    e5:f8:dc:19:b2:aa:f7:70:57:31:a5:56:4c:69:cf:
                    33:ad:62:4a:7b:f2:f8:ed:25:22:b8:89:ec:e4:6e:
                    1c:8f:49:38:0e:ef:3c:8b:98:87:3d:4e:f7:2a:89:
                    d6:f2:f2:8a:3f:66:eb:0b:f1:de:7d:d6:6b:93:5d:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:15:8C:96:94:92:19:D8:7C:69:46:B1:9A:AA:85:AE:B1:50:ED:D1
            X509v3 Authority Key Identifier:
                keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/FDBAF28A0DD911F083E3DA5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:86:6a:87:56:3d:ce:f0:6a:14:99:af:e1:20:7e:34:6d:cc:
         08:3b:a2:d0:b3:f4:af:75:12:22:cb:d0:8a:c4:79:4b:d1:be:
         53:94:28:df:9a:14:6c:3d:f5:14:b1:3f:2c:bf:01:4c:68:8f:
         01:ec:e7:28:88:ef:a3:59:45:43:7c:53:98:58:2c:5f:e3:b0:
         5f:4f:d3:f7:f4:f4:f0:64:09:ac:3c:45:6a:c1:81:13:ae:fb:
         4b:49:45:fc:16:56:78:2a:d6:43:c2:c7:aa:12:97:fa:8d:c8:
         cc:08:24:83:51:4e:c0:3a:fe:28:75:95:f0:0e:78:9f:91:8f:
         e2:81:b7:e3:69:2c:e0:22:7f:c6:05:cb:b0:1d:14:60:79:80:
         24:c2:47:aa:60:30:71:73:09:5d:7c:07:95:f2:1d:5e:ae:b6:
         07:9e:04:4e:8c:7b:c1:bd:2a:b0:73:c8:04:7d:51:b6:ff:b4:
         80:37:04:47:35:9f:2c:a3:fb:63:c4:8e:6b:34:ec:c0:b1:ea:
         dc:69:69:ae:4e:38:41:f9:22:41:77:af:90:dc:95:cc:e7:23:
         3e:b5:f4:3c:57:f8:b5:69:f2:5a:68:09:2a:45:86:9d:29:61:
         94:32:a4:f0:e1:36:d4:bd:8f:c7:a6:76:70:66:d1:57:06:76:
         43:25:c4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:02:05 2026 by rpki-client