Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/2D89A3B4139A11F182E65A043E3D8C67.roa
File:                     2D89A3B4139A11F182E65A043E3D8C67.roa (raw, json)
Hash identifier:          BbN77RAFkHR083nGQLeFhiO7qnoHJJbIlHS/xJ/7E5c=
Subject key identifier:   E5:6A:FB:96:63:75:A2:AF:10:62:2D:05:F0:9A:61:A3:3E:5D:F1:7A
Certificate issuer:       /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Certificate serial:       2B
Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/2D89A3B4139A11F182E65A043E3D8C67.roa
Signing time:             Wed 29 Apr 2026 05:58:54 +0000
ROA not before:           Wed 29 Apr 2026 05:58:54 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     56286
IP address blocks:        167.179.26.0/24 maxlen: 24
                          205.209.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
                          rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
        Validity
            Not Before: Apr 29 05:58:54 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69f19e1e-a211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:ea:a7:1a:71:e6:77:76:e0:2e:73:1c:1f:
                    cc:bc:15:5b:7f:b4:c1:6d:d1:8c:eb:cd:99:3b:f1:
                    f4:d9:0b:6e:8c:4d:f7:82:03:f8:69:2f:e1:d8:c2:
                    77:91:21:e5:05:0b:a2:44:83:1d:58:85:60:47:a5:
                    d2:3d:a9:59:34:ae:3a:96:be:b2:fa:3a:57:a3:f9:
                    d1:b9:8e:c4:d0:7b:f5:87:95:c4:ca:f7:fc:7d:e6:
                    61:91:2c:d7:cd:45:26:00:22:51:a8:d2:a8:86:5c:
                    ee:08:66:ca:a7:18:df:63:6e:2d:74:46:59:0c:6d:
                    2d:96:dd:7f:e1:12:b6:9d:34:d3:a8:e7:a3:9c:2f:
                    3a:d0:66:1c:b8:42:fe:ac:01:3e:47:b4:7d:27:85:
                    ba:6f:28:8a:66:19:ae:b6:f2:9e:7b:92:71:b7:a8:
                    d6:79:60:98:97:cf:d4:f7:9e:80:b6:19:e3:cf:c9:
                    65:64:a1:ac:74:9c:bc:d9:28:82:15:b4:ad:9e:fe:
                    9f:98:ca:12:e8:43:2b:79:57:fe:e0:4c:ac:79:9d:
                    45:ed:59:5a:4d:74:db:da:db:e9:d2:e5:0c:5f:9f:
                    41:af:15:28:ac:c8:f3:15:e7:1c:8e:f0:d6:9d:01:
                    95:79:68:cd:ef:7b:d9:9a:0e:a4:70:4b:37:a1:82:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6A:FB:96:63:75:A2:AF:10:62:2D:05:F0:9A:61:A3:3E:5D:F1:7A
            X509v3 Authority Key Identifier:
                keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/2D89A3B4139A11F182E65A043E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.26.0/24
                  205.209.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:e8:47:cd:46:ca:0f:f0:b3:53:29:39:31:e6:db:f5:87:1f:
         9a:b5:f3:0c:fb:e8:52:64:fd:d8:46:50:a8:13:86:20:ae:00:
         59:62:40:a3:4f:45:f1:00:4d:e1:67:ba:95:3c:c4:9f:d6:50:
         e6:74:26:ef:bf:30:3a:12:58:f0:22:a9:ee:91:d4:b0:e7:63:
         2d:c9:88:0d:1e:d5:ac:38:e3:e4:b4:87:76:81:d3:db:22:61:
         f0:4b:54:25:e0:0d:c0:d2:23:e2:2d:d5:77:ee:d1:5f:38:f4:
         8e:95:67:88:19:2a:ee:70:3b:c1:d9:4e:db:f8:55:69:96:3a:
         d9:39:fb:f5:b9:0d:e5:1a:8a:33:01:75:e2:48:bf:91:55:09:
         f9:b3:2c:2a:bc:b9:2b:64:69:c1:22:7d:ca:a9:e6:33:cb:6f:
         2d:7f:e8:c4:a3:c7:8a:c9:64:3a:77:15:b9:32:4e:e3:03:cd:
         10:ee:29:2f:cc:71:4c:45:b7:40:5d:84:56:54:1a:85:4b:05:
         33:54:c5:72:9f:e2:bf:43:32:d0:90:4c:aa:c4:53:3a:76:72:
         5f:67:25:5f:07:da:e6:08:94:e4:f6:bb:73:25:cf:f6:d4:f2:
         ee:0d:d0:8b:53:af:91:10:ae:b7:71:d4:e5:e2:64:da:b3:7b:
         13:72:ea:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:54:53 2026 by rpki-client