Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/825F950215E711F19073865B1E3D8C67.roa
File:                     825F950215E711F19073865B1E3D8C67.roa (raw, json)
Hash identifier:          J8Mnpyzksg65+vQBwlicjjccUPGZ76YL6/e6Ob/8mCE=
Subject key identifier:   A0:2F:20:4A:31:4D:74:30:95:F2:63:9E:E9:C8:3B:77:9B:EF:DE:21
Certificate issuer:       /CN=A917972C/serialNumber=869799BA0ABF60DDF2C1AD8FC0C1F6600496A916
Certificate serial:       28
Authority key identifier: 86:97:99:BA:0A:BF:60:DD:F2:C1:AD:8F:C0:C1:F6:60:04:96:A9:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/825F950215E711F19073865B1E3D8C67.roa
Signing time:             Tue 05 May 2026 09:42:07 +0000
ROA not before:           Tue 05 May 2026 09:42:07 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     55493
IP address blocks:        202.128.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.crl
                          rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917972C, serialNumber=869799BA0ABF60DDF2C1AD8FC0C1F6600496A916
        Validity
            Not Before: May  5 09:42:07 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f9bb6f-6e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:73:89:68:50:39:3a:ec:b9:fa:0c:f1:ad:55:
                    5b:9e:d8:1c:b3:9c:d0:12:a1:b7:0d:b4:01:c0:ef:
                    93:99:54:2a:fa:46:50:f8:51:2a:0d:56:6e:70:72:
                    b2:af:80:24:ea:97:3c:ae:73:d6:40:b8:1b:46:d7:
                    9a:98:42:9c:de:92:46:d5:07:e8:ce:9c:74:bb:70:
                    d9:6f:85:9d:92:29:25:e6:e0:8b:63:46:cf:d9:fe:
                    3f:c1:c2:24:0b:27:f4:8c:85:16:87:82:62:6c:32:
                    f8:c5:2f:fa:bc:b3:ee:b4:c7:d0:2b:b9:d3:be:74:
                    64:7b:fc:72:0d:33:32:91:0a:b4:ad:7d:7a:44:fc:
                    01:3f:8b:1c:0d:94:1c:8c:04:92:bd:6f:52:b8:c4:
                    3c:07:c8:0d:c7:06:69:5e:3b:f7:e8:2e:cc:e0:60:
                    50:21:ca:4f:c6:ad:2b:22:59:b0:c4:87:e1:42:b4:
                    98:fa:0d:f6:ae:f3:55:e4:e5:52:1f:0b:60:69:61:
                    28:b4:b6:f3:07:1a:32:75:a5:9b:6e:2f:6e:83:59:
                    00:2d:1b:80:79:08:45:f0:9a:b2:9b:5e:0a:79:fb:
                    9d:a5:ec:fd:0d:3b:4f:80:be:28:11:18:fb:97:1e:
                    96:a7:7a:52:25:4c:4b:d9:a8:a4:e1:06:d0:f2:34:
                    e7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2F:20:4A:31:4D:74:30:95:F2:63:9E:E9:C8:3B:77:9B:EF:DE:21
            X509v3 Authority Key Identifier:
                keyid:86:97:99:BA:0A:BF:60:DD:F2:C1:AD:8F:C0:C1:F6:60:04:96:A9:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/825F950215E711F19073865B1E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.128.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:01:a9:23:f0:01:40:16:a2:db:f6:1b:62:0a:02:2e:4f:5f:
         fa:ca:b3:f2:4d:86:e9:6b:4b:86:85:75:2e:94:7b:98:db:75:
         1e:c6:0f:88:f9:0d:b4:05:02:f0:e7:16:a7:5e:fe:a5:13:f7:
         73:3b:50:82:7d:a4:5d:31:db:a2:ff:90:e2:db:ba:68:31:b7:
         43:80:c4:42:97:28:92:0d:e3:77:cf:ee:8a:df:0c:95:af:b9:
         db:a1:9d:9f:47:7c:81:3c:0d:ee:53:8c:b1:26:89:7f:35:86:
         5c:a2:ac:98:06:dc:00:71:55:d5:8b:e0:37:99:e6:89:9f:93:
         59:4c:6d:30:82:4a:fd:28:08:05:35:15:93:ac:50:1b:5b:cf:
         e2:f9:36:8b:41:e2:a6:00:73:cc:5c:d1:bc:90:53:9a:0c:2f:
         45:55:48:44:82:e2:52:b5:81:0b:02:f1:3c:a6:44:d8:f1:8c:
         95:3a:a6:92:79:4c:ea:14:c3:e1:20:30:e9:2c:ee:e4:c3:56:
         f0:04:1d:3a:8c:eb:ff:9b:64:44:84:85:e9:6f:0f:b1:7e:dc:
         7f:f4:8d:aa:82:95:72:d8:92:d2:ec:8e:ce:e7:91:23:bd:ef:
         4f:c4:64:f5:0a:70:a0:0c:89:09:a4:0d:56:95:ef:2d:cc:d9:
         88:12:4e:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 10:38:04 2026 by rpki-client