Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/26FD4E0C705311EE8723E92AC4F9AE02.roa
File:                     26FD4E0C705311EE8723E92AC4F9AE02.roa (raw, json)
Hash identifier:          oCHezxKbqgIOpUes05U+r9qxPkrF4vvX3lRKLSI9mWE=
Subject key identifier:   20:F5:6F:0D:32:59:4F:60:C9:DB:E7:D6:D5:1D:00:48:F0:F0:9E:12
Certificate issuer:       /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial:       0896
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/26FD4E0C705311EE8723E92AC4F9AE02.roa
Signing time:             Thu 30 Apr 2026 04:16:09 +0000
ROA not before:           Thu 30 Apr 2026 04:16:09 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     10111
IP address blocks:        45.114.189.0/24 maxlen: 24
                          103.54.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
                          rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2198 (0x896)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
        Validity
            Not Before: Apr 30 04:16:09 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69f2d789-b188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:71:b5:e5:34:8f:ef:70:62:f4:38:9d:f3:
                    dd:19:19:75:09:80:41:be:b4:6f:5e:7e:e6:3f:dd:
                    65:3a:30:65:8e:96:5d:dd:dc:5f:8b:0c:76:d9:fd:
                    2b:4b:af:b5:04:31:a4:70:eb:ba:7e:9b:f7:c7:42:
                    4f:36:bf:ac:0b:d5:76:4d:59:cf:71:44:2f:13:80:
                    a1:bd:1c:ba:02:f2:f0:ed:34:10:de:4f:02:11:a8:
                    f6:e3:89:32:7e:9f:48:cc:8c:85:45:5c:b3:ce:c2:
                    5c:aa:e4:ad:78:c7:a5:9d:6b:50:14:79:b1:24:75:
                    58:82:86:89:9f:91:38:54:8f:f7:a4:c2:cc:b2:fc:
                    a9:ea:85:95:0b:ff:fb:05:6f:9b:b1:e7:47:af:7e:
                    b9:cd:0b:e2:e2:5a:e0:cf:51:a8:cc:69:f8:69:b7:
                    92:a1:ae:28:f0:f8:c9:15:00:be:d7:b1:3c:f2:ae:
                    a0:0b:b9:a0:e8:bf:0f:17:92:fc:77:1d:db:0c:d8:
                    6a:d9:06:fd:0f:29:92:d3:5d:a0:6b:8b:6c:19:c6:
                    5f:ff:47:61:b5:4e:43:f6:78:81:05:da:ff:4e:71:
                    c6:2a:8b:89:80:5e:fe:28:bc:71:be:c0:b9:2a:21:
                    8a:45:d1:64:29:76:bc:bf:85:57:09:1b:7d:d1:79:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F5:6F:0D:32:59:4F:60:C9:DB:E7:D6:D5:1D:00:48:F0:F0:9E:12
            X509v3 Authority Key Identifier:
                keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/26FD4E0C705311EE8723E92AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.189.0/24
                  103.54.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:6f:f3:4f:59:82:6a:54:28:63:59:97:ac:7d:aa:f2:45:fa:
         e4:8d:e9:9e:8a:df:9d:3e:b3:97:fe:e7:77:53:13:4a:16:a1:
         01:2e:24:84:b7:21:46:cf:1f:47:73:3c:c5:e7:a9:37:57:6e:
         dd:3d:da:e9:6b:f3:3a:21:bc:6d:ce:f6:db:63:8b:10:1d:89:
         95:20:80:b3:f7:77:28:b7:f9:9b:36:ab:7f:46:54:15:12:81:
         ee:86:ba:18:f9:57:66:32:a8:d9:e8:8d:3e:bb:de:80:ff:9e:
         4b:b4:0b:99:71:49:f8:ab:05:f5:82:64:cc:06:e5:3f:5b:9d:
         95:2a:4c:8a:62:a4:6a:d5:6f:67:10:ac:71:b8:6b:f7:b0:4f:
         e7:a4:19:51:10:1f:5d:76:e0:27:67:50:e6:aa:05:9e:cf:d5:
         e5:08:c7:52:df:0d:46:3e:3d:91:ee:4d:fc:01:a6:80:f4:8e:
         be:35:46:6f:b9:a6:ad:af:ce:15:22:fc:a6:86:b3:0c:ea:14:
         7b:3f:f1:f1:39:fb:ae:98:66:1b:12:62:3b:90:45:27:6e:5b:
         e6:a2:d8:4d:a4:ea:a2:bb:e1:45:98:6d:d0:79:7a:bf:16:97:
         e2:85:09:3e:59:53:1f:bf:6c:19:c8:8f:71:52:52:92:b8:7f:
         37:c6:41:f4
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0
QUYzNDA1RTkwHhcNMjYwNDMwMDQxNjA5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYyZDc4OS1iMTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqlFxteU0j+9wYvQ4nfPdGRl1CYBBvrRvXn7mP91lOjBljpZd3dxfiwx22f0r
S6+1BDGkcOu6fpv3x0JPNr+sC9V2TVnPcUQvE4ChvRy6AvLw7TQQ3k8CEaj244ky
fp9IzIyFRVyzzsJcquSteMelnWtQFHmxJHVYgoaJn5E4VI/3pMLMsvyp6oWVC//7
BW+bsedHr365zQvi4lrgz1GozGn4abeSoa4o8PjJFQC+17E88q6gC7mg6L8PF5L8
dx3bDNhq2Qb9DymS012ga4tsGcZf/0dhtU5D9niBBdr/TnHGKouJgF7+KLxxvsC5
KiGKRdFkKXa8v4VXCRt90Xm2UwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFCD1bw0y
WU9gydvn1tUdAEjw8J4SMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1
QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC
ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQwRDIvNTkzN0Q0M0UzNUFEMTFFQjgxRUVBRDEyQzRGOUFFMDIvMjZGRDRFMEM3
MDUzMTFFRTg3MjNFOTJBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQALXK9AwQAZzaaMA0GCSqGSIb3DQEBCwUAA4IBAQBYb/NPWYJqVChj
WZesfaryRfrkjemeit+dPrOX/ud3UxNKFqEBLiSEtyFGzx9HczzF56k3V27dPdrp
a/M6IbxtzvbbY4sQHYmVIICz93cot/mbNqt/RlQVEoHuhroY+VdmMqjZ6I0+u96A
/55LtAuZcUn4qwX1gmTMBuU/W52VKkyKYqRq1W9nEKxxuGv3sE/npBlREB9dduAn
Z1DmqgWez9XlCMdS3w1GPj2R7k38AaaA9I6+NUZvuaatr84VIvymhrMM6hR7P/Hx
OfuumGYbEmI7kEUnblvmothNpOqiu+FFmG3QeXq/FpfihQk+WVMfv2wZyI9xUlKS
uH83xkH0
-----END CERTIFICATE-----
Generated at Wed May 13 03:18:55 2026 by rpki-client