Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/F780D776194611F1871644483C3D8C67.roa
File:                     F780D776194611F1871644483C3D8C67.roa (raw, json)
Hash identifier:          ho5eEvE3UY6na6Rt/OnfOdSf9aaBbnbQUdpdtiKwfI4=
Subject key identifier:   A7:5B:18:02:12:7A:CE:09:42:62:0C:C8:E0:70:75:1E:AB:25:A2:C8
Certificate issuer:       /CN=A917FFCC/serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A
Certificate serial:       05
Authority key identifier: 50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/F780D776194611F1871644483C3D8C67.roa
Signing time:             Fri 06 Mar 2026 10:26:42 +0000
ROA not before:           Fri 06 Mar 2026 10:26:42 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     9534
IP address blocks:        198.15.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl
                          rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFCC, serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A
        Validity
            Not Before: Mar  6 10:26:42 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69aaabe1-f9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:cf:d7:27:ca:0b:65:5d:56:ce:78:6d:6b:
                    69:ea:7c:f0:29:38:dd:bc:e1:9d:f4:6d:1d:93:f5:
                    f1:04:ab:d3:12:1d:eb:aa:10:ca:45:a3:61:c7:ba:
                    2f:6a:e7:b4:4a:88:63:e5:d4:71:6a:3d:2e:66:38:
                    31:e0:21:c0:62:d0:2f:f7:b3:9b:34:f6:ac:98:30:
                    6b:17:9e:34:d5:37:e9:32:05:de:56:a5:ac:d7:71:
                    30:d4:d2:de:1b:f5:3b:da:a6:01:7b:de:34:0b:3e:
                    33:54:e7:e4:4e:3c:0f:b7:99:f3:fc:06:a5:ce:f3:
                    d8:e9:c7:db:04:a9:50:39:c9:be:df:d2:ba:a9:ca:
                    56:71:1f:75:67:78:17:06:05:f3:b3:fe:8b:b9:3c:
                    cf:1d:10:46:4e:47:a8:73:5b:c9:d3:c2:86:53:77:
                    97:e5:4e:91:bf:13:9f:ba:1e:3d:ab:0a:e5:4c:f0:
                    7c:fb:ed:32:ac:d5:ac:77:b4:93:74:4c:43:3b:82:
                    c4:dd:85:4f:61:e4:08:e9:2b:fe:e7:21:04:c0:79:
                    11:29:91:01:3d:64:7e:b8:29:0b:fc:bd:af:4b:f1:
                    9f:3e:96:62:14:5d:e6:10:ed:8d:ba:8c:bf:22:84:
                    3b:0d:df:44:43:e5:2a:ad:05:0b:ee:e4:b4:61:75:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5B:18:02:12:7A:CE:09:42:62:0C:C8:E0:70:75:1E:AB:25:A2:C8
            X509v3 Authority Key Identifier:
                keyid:50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/F780D776194611F1871644483C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.15.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:c4:57:b6:4d:31:07:29:03:d6:34:7e:6a:b0:97:65:61:cb:
         85:c1:cf:b9:03:f4:f0:67:c3:2b:b3:d2:f3:93:da:52:a3:a4:
         ce:ca:b7:c0:b4:ca:63:ed:ea:c3:25:7e:87:4a:f2:b2:82:b2:
         5b:ad:b6:e4:fd:e3:6f:cb:12:e1:f6:8b:aa:3c:39:55:5b:d1:
         d4:51:b4:08:a9:59:a7:8e:00:5c:76:3d:1e:35:c0:c1:bb:67:
         53:29:3e:bc:71:9b:67:92:e6:4c:d5:3a:ec:6d:98:c1:ac:94:
         56:70:68:74:0a:2e:b6:8e:47:68:f2:90:aa:99:eb:f2:98:94:
         b5:c2:bb:f1:47:bd:33:f5:cd:b5:4d:e5:08:38:cb:bc:ed:81:
         d2:75:ed:96:95:b4:ed:01:c6:94:87:86:6f:67:5d:ce:1b:8e:
         b0:0b:7a:d9:7b:3a:ff:e4:44:5b:f6:73:c9:90:46:30:27:33:
         4b:d6:4b:6a:f7:4b:c2:62:17:fb:d9:40:01:a9:e2:f9:61:58:
         a6:c7:92:5c:9f:1c:6a:92:55:29:fc:15:af:af:4e:0d:ac:b2:
         d1:89:bb:e4:d4:aa:21:35:ff:d4:8a:a7:b7:74:0d:c1:42:3a:
         f2:21:7f:89:0d:18:40:f5:27:4e:62:0c:de:49:e1:43:4b:91:
         c1:4a:8f:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:06:08 2026 by rpki-client