Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/B4450EF68E5311EBB81E6C70C4F9AE02.roa
File:                     B4450EF68E5311EBB81E6C70C4F9AE02.roa (raw, json)
Hash identifier:          Z9RyBMJrxYuZfbZLQ7+nLreuRbVepYn0j7NfRrq4SKU=
Subject key identifier:   B3:EE:72:4F:BF:E4:E1:A1:4F:DD:CC:8C:7B:56:F1:B2:72:A2:D8:5B
Certificate issuer:       /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
Certificate serial:       16CA
Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/B4450EF68E5311EBB81E6C70C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:10:55 +0000
ROA not before:           Wed 26 Nov 2025 16:35:24 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     55446
IP address blocks:        196.1.105.0/24 maxlen: 24
                          196.1.106.0/24 maxlen: 24
                          196.1.110.0/23 maxlen: 23
                          196.1.110.0/24 maxlen: 24
                          196.1.111.0/24 maxlen: 24
                          196.1.111.0/25 maxlen: 25
                          196.1.111.128/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl
                          rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5834 (0x16ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E
        Validity
            Not Before: Nov 26 16:35:24 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a51bde-e6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:45:d1:6d:f7:ab:e1:02:07:2e:18:f2:30:
                    c5:00:1c:c9:85:0f:3c:72:a9:dd:e4:6b:a7:0e:ef:
                    75:7f:10:95:eb:49:41:1a:2d:c2:e5:1f:93:5d:39:
                    50:de:68:30:70:18:03:35:33:5d:72:16:15:f3:8c:
                    63:0b:0f:72:bc:96:7d:26:67:a2:d7:72:52:fe:29:
                    91:07:32:84:dd:a1:11:4f:bb:1b:da:b7:21:78:90:
                    1d:1a:11:2b:be:17:c2:64:f1:be:09:2c:5c:6e:6b:
                    14:c2:ff:23:9a:4b:d1:50:60:bd:60:35:b0:44:11:
                    bf:8b:b1:fd:13:15:27:93:1e:a1:86:90:22:94:d0:
                    34:be:a5:82:9e:6c:6b:da:a8:60:02:dc:74:28:ea:
                    68:d0:54:2f:c5:76:e0:1c:f0:d0:a3:fa:57:16:d6:
                    4b:69:43:f7:8a:07:af:0b:a3:60:3f:a9:51:75:2e:
                    b7:06:39:5f:13:7a:18:79:2d:8a:45:b0:d1:35:2b:
                    11:06:d0:76:00:6b:86:48:94:f1:3a:1d:1f:17:67:
                    9a:0e:26:0a:9c:5d:cf:03:e0:13:9e:b3:87:06:7f:
                    da:d2:51:08:c5:75:4c:cd:5c:96:3d:b4:cf:a0:3a:
                    ec:e7:68:cd:44:a5:92:1c:ec:08:c7:c7:68:b0:e4:
                    72:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EE:72:4F:BF:E4:E1:A1:4F:DD:CC:8C:7B:56:F1:B2:72:A2:D8:5B
            X509v3 Authority Key Identifier:
                keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/B4450EF68E5311EBB81E6C70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.1.105.0-196.1.106.255
                  196.1.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:a4:a0:fb:6f:f7:5d:aa:27:6f:b1:3d:5b:13:f4:a7:3f:4a:
         f5:e4:7d:61:0a:05:8c:45:ec:67:66:23:a6:7b:9c:41:5b:03:
         99:1e:50:7b:54:b4:2b:47:2c:58:56:01:68:ac:8a:5a:5a:f1:
         8f:c2:94:a8:a8:1f:b4:bf:44:6d:1a:ec:bb:39:de:56:ba:66:
         c0:cb:79:51:67:e8:60:8e:1c:27:b0:5d:71:0f:5b:5e:ac:96:
         8b:17:93:7e:99:a3:51:29:39:27:c5:05:b3:d3:d1:1c:be:b7:
         2d:e6:ff:c0:90:4d:8f:44:6e:83:67:66:6e:c9:29:45:33:82:
         09:da:6c:49:bf:c1:a5:b6:cc:4c:48:3d:77:aa:1a:17:b8:25:
         8a:6b:df:df:d4:b5:ce:a0:9e:df:4a:c0:b9:42:92:b8:eb:15:
         69:5c:9c:e7:2c:73:85:2d:3e:e6:87:ae:06:5b:b3:01:0e:75:
         a3:9e:3d:3e:d5:8f:e6:21:b6:aa:95:03:77:af:cb:d6:e9:45:
         b5:31:2e:69:82:a8:32:d9:ce:45:0f:d6:b0:1a:92:28:51:26:
         70:59:63:8a:30:47:08:9e:50:fa:48:0a:04:75:16:b4:a6:67:
         4b:4c:80:44:1f:94:67:a3:ef:cb:d6:91:af:f9:6e:50:48:ad:
         9d:b8:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:54:45 2026 by rpki-client