Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/8247E286967711EA81018623C4F9AE02.roa
File:                     8247E286967711EA81018623C4F9AE02.roa (raw, json)
Hash identifier:          f2/mJ1LxB5o7hViq0t9MkIEroZMeuy9biGGVy/h03I0=
Subject key identifier:   83:07:5A:0B:D0:CC:C1:A4:9C:1B:92:45:2E:89:DA:CF:83:75:F0:43
Certificate issuer:       /CN=A916FEAF/serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
Certificate serial:       09EC
Authority key identifier: 55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/8247E286967711EA81018623C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:32:04 +0000
ROA not before:           Fri 04 Apr 2025 20:33:05 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     38084
IP address blocks:        203.92.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl
                          rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2540 (0x9ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FEAF, serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
        Validity
            Not Before: Apr  4 20:33:05 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40794-c559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:84:86:ae:60:17:da:ce:8d:8f:c5:d0:e3:7f:
                    3a:b0:9d:3b:bd:7d:53:2e:81:fc:e0:25:da:54:6c:
                    63:83:99:42:1d:03:11:e9:3d:ff:d0:9b:61:63:3d:
                    0f:19:a9:e5:9e:69:25:12:42:4b:73:26:f9:ce:64:
                    2b:77:fc:80:da:17:b3:3a:7f:20:ca:a9:1a:12:d6:
                    77:4d:78:5b:94:1c:9e:bb:39:40:0f:8a:cd:34:f1:
                    c7:fb:da:de:04:3a:d5:ac:94:5a:2d:59:5c:bb:94:
                    d7:1f:32:cc:16:f9:f2:bf:12:c4:bf:96:16:11:62:
                    74:87:95:38:05:ba:a4:2c:56:ec:d7:4d:54:ee:0a:
                    15:57:a9:dc:9a:d1:4f:f9:12:fe:04:45:d9:38:a9:
                    cd:63:d9:30:69:61:90:ee:c0:3f:51:a8:bc:41:a7:
                    5d:02:2b:cf:2a:c4:79:3b:9b:43:fe:0a:b6:a6:5b:
                    5e:d6:7b:cd:e3:69:a9:5a:c9:7d:fe:92:79:04:4d:
                    9e:6d:a4:c9:c1:b1:12:fe:95:9c:71:03:b7:24:65:
                    df:96:71:7b:3f:8e:c0:09:95:44:64:dd:94:3c:73:
                    34:78:31:9e:90:d5:5b:83:f7:5f:a2:1e:68:93:ac:
                    48:2d:f9:fd:c3:0c:d3:c0:b6:c8:e7:9b:c6:b8:87:
                    a0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:07:5A:0B:D0:CC:C1:A4:9C:1B:92:45:2E:89:DA:CF:83:75:F0:43
            X509v3 Authority Key Identifier:
                keyid:55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/8247E286967711EA81018623C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.92.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ea:82:5b:23:9f:48:c8:de:98:cc:28:d6:73:a3:cd:2a:42:
         b4:5c:dd:d0:eb:bd:51:01:54:31:36:e6:75:cc:fa:bd:9d:c0:
         b3:99:13:12:83:e9:11:2d:24:db:96:b9:88:11:86:59:68:23:
         a1:df:c0:14:32:2e:fe:03:d8:bf:c2:fa:ae:82:9f:b0:98:15:
         83:37:1b:43:24:8e:e6:eb:84:4c:1f:0d:75:48:5d:81:c8:6a:
         ca:11:61:83:87:d2:e1:5c:10:6e:d7:04:99:48:a7:6d:9f:2b:
         da:14:9e:36:83:fd:2e:b6:96:68:6b:3e:d1:66:0e:c6:2d:9e:
         5e:80:48:b5:04:1b:aa:e6:54:f7:62:15:99:58:f0:c4:4b:be:
         f5:de:3e:07:d5:3d:90:c6:46:3f:f1:e9:a0:fa:f9:12:e2:27:
         8d:bd:c5:a8:2d:9c:70:ae:24:71:53:a9:2a:b2:27:3e:16:93:
         d3:d5:5e:3f:b5:5a:5a:fb:0e:cf:15:50:ef:8d:d0:d9:2f:74:
         3b:74:aa:24:85:a2:8e:9f:3f:f3:b2:18:09:e5:d6:c0:21:8d:
         b0:31:93:11:c6:51:43:b2:86:c5:33:ee:db:3c:b8:9b:57:1e:
         c1:5b:9a:f3:28:3a:1c:24:66:7e:f6:1a:13:6b:71:c5:6b:a1:
         45:9c:fa:00
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZFQUYxMTAvBgNVBAUTKDU1OUY1MUVDOEIyNThFN0U5MDYyOUQ4NTYyRTFEQjk1
NkJDMEZGMzcwHhcNMjUwNDA0MjAzMzA1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDc5NC1jNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl4SGrmAX2s6Nj8XQ4386sJ07vX1TLoH84CXaVGxjg5lCHQMR6T3/0JthYz0P
GanlnmklEkJLcyb5zmQrd/yA2hezOn8gyqkaEtZ3TXhblByeuzlAD4rNNPHH+9re
BDrVrJRaLVlcu5TXHzLMFvnyvxLEv5YWEWJ0h5U4BbqkLFbs101U7goVV6ncmtFP
+RL+BEXZOKnNY9kwaWGQ7sA/Uai8QaddAivPKsR5O5tD/gq2plte1nvN42mpWsl9
/pJ5BE2ebaTJwbES/pWccQO3JGXflnF7P47ACZVEZN2UPHM0eDGekNVbg/dfoh5o
k6xILfn9wwzTwLbI55vGuIegOwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIMHWgvQ
zMGknBuSRS6J2s+DdfBDMB8GA1UdIwQYMBaAFFWfUeyLJY5+kGKdhWLh25VrwP83
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkVBRi9ERDYwRDRBNDk2
NzUxMUVBODYwMjJBMUVDNEY5QUUwMi9WWjlSN0lzbGpuNlFZcDJGWXVIYmxXdkFf
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZaOVI3SXNsam42UVlwMkZZdUhibFd2QV96Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkZFQUYvREQ2MEQ0QTQ5Njc1MTFFQTg2MDIyQTFFQzRGOUFFMDIvODI0N0UyODY5
Njc3MTFFQTgxMDE4NjIzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy1waMA0GCSqGSIb3DQEBCwUAA4IBAQCG6oJbI59IyN6YzCjWc6PN
KkK0XN3Q671RAVQxNuZ1zPq9ncCzmRMSg+kRLSTblrmIEYZZaCOh38AUMi7+A9i/
wvqugp+wmBWDNxtDJI7m64RMHw11SF2ByGrKEWGDh9LhXBBu1wSZSKdtnyvaFJ42
g/0utpZoaz7RZg7GLZ5egEi1BBuq5lT3YhWZWPDES7713j4H1T2QxkY/8emg+vkS
4ieNvcWoLZxwriRxU6kqsic+FpPT1V4/tVpa+w7PFVDvjdDZL3Q7dKokhaKOnz/z
shgJ5dbAIY2wMZMRxlFDsobFM+7bPLibVx7BW5rzKDocJGZ+9hoTa3HFa6FFnPoA
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:59:24 2026 by rpki-client