Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa
File:                     4B65B208288F11EFB3C88742C4F9AE02.roa (raw, json)
Hash identifier:          8WQ5jrO/JsQ/EWqFraIhQFAlFnmywxhA6dmghU6aY4Y=
Subject key identifier:   49:8C:78:D0:AC:2D:49:66:90:A6:E3:5C:FA:82:2D:79:E1:9F:2B:6D
Certificate issuer:       /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF
Certificate serial:       295D
Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 16:17:15 +0000
ROA not before:           Mon 02 Mar 2026 16:17:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17770
IP address blocks:        182.161.0.0/19 maxlen: 19
                          202.124.160.0/21 maxlen: 21
                          2402:4000:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl
                          rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10589 (0x295d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF
        Validity
            Not Before: Mar  2 16:17:15 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a5b80b-29b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:2c:33:4f:9a:11:da:33:61:bb:cb:5b:20:
                    40:d8:60:16:49:77:cd:b9:b1:2c:68:84:c9:64:26:
                    f0:45:43:05:0f:53:75:06:3e:15:d1:61:19:27:b0:
                    e0:da:52:82:84:29:64:35:ec:b4:c8:53:55:c5:2f:
                    55:23:8a:e5:b3:e7:1b:02:a1:08:7c:a7:bf:b0:6b:
                    e5:38:b7:8a:12:6e:4d:c6:81:0f:4c:f1:33:10:b0:
                    98:84:b2:46:84:2b:80:6f:86:2e:ba:1b:67:65:70:
                    8a:a0:42:9e:76:09:5c:b9:ff:93:95:20:eb:62:bc:
                    6e:c5:ef:a2:15:db:58:b9:33:08:2c:14:e0:fd:cc:
                    14:b1:17:9c:e9:eb:15:a2:f1:17:68:1d:9f:cc:3c:
                    a1:3b:0d:d2:f4:f2:d3:0f:29:0e:29:01:89:04:c1:
                    6c:ea:36:65:77:0c:96:ed:64:90:65:6b:5d:df:69:
                    0a:94:91:74:d2:c6:ae:55:a0:97:75:3a:16:7f:28:
                    09:f3:e9:a4:af:77:c6:61:7a:0b:91:1d:94:d7:bd:
                    c9:0d:49:15:39:11:76:8c:65:8c:ba:5c:8d:dd:ca:
                    1d:9b:5f:aa:d9:6f:a4:39:d6:2f:5e:f3:38:c5:1c:
                    85:f9:1b:fe:85:86:8f:0c:99:ba:d5:41:94:c7:50:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8C:78:D0:AC:2D:49:66:90:A6:E3:5C:FA:82:2D:79:E1:9F:2B:6D
            X509v3 Authority Key Identifier:
                keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.161.0.0/19
                  202.124.160.0/21
                IPv6:
                  2402:4000:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:84:ba:54:43:2a:10:95:62:a7:5d:ed:c3:e9:2b:82:e7:9d:
         7e:10:b2:75:5b:65:7a:6c:a8:20:5f:64:ac:8e:de:3e:16:cf:
         ba:e9:3b:5a:2e:a9:32:61:6a:5b:07:96:a4:fb:8b:e1:ed:e4:
         2d:3d:d7:09:d9:6f:96:71:34:31:c0:02:8a:6c:56:51:a9:47:
         aa:76:3e:41:f9:a0:ce:5f:42:7f:ae:37:d5:1d:f1:29:d1:87:
         de:09:2b:2b:a4:69:61:27:fe:77:c9:ce:2a:31:1c:e6:87:a8:
         ae:31:b2:bf:60:7f:a4:db:ee:9f:73:1c:91:b3:8e:a0:ab:4e:
         2b:15:e7:91:1a:26:03:d7:0d:d0:7a:de:e7:be:55:6d:d7:0b:
         a4:31:16:34:40:f6:b6:43:41:53:b2:8e:24:86:2c:c4:49:a8:
         7a:d8:4a:0d:06:fb:6e:cd:08:83:47:43:01:a0:69:f5:71:21:
         77:c4:4c:4a:10:b3:23:50:6f:54:48:96:52:57:22:0c:df:44:
         0a:a8:04:83:98:6b:b3:5e:cd:ee:a1:af:e5:fd:d7:f6:8b:22:
         eb:3c:75:67:30:30:d8:ff:29:7c:6b:67:b4:50:68:35:dd:5a:
         ea:a0:83:d3:c8:6b:67:90:a1:bf:f1:79:49:9d:88:bd:7f:12:
         60:e0:4b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:25:32 2026 by rpki-client