Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/B6E083D46E2F11EEB9C12A34C4F9AE02.roa
File:                     B6E083D46E2F11EEB9C12A34C4F9AE02.roa (raw, json)
Hash identifier:          n7XrDdLRgIOzlZQtMfnZ1wiO99lQrB5PrhvdGG1ja78=
Subject key identifier:   4F:88:30:2F:A7:74:0C:9F:5D:E2:5F:1B:8D:38:2B:C8:E5:AE:4B:0C
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       054D
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/B6E083D46E2F11EEB9C12A34C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:34:13 +0000
ROA not before:           Thu 05 Jun 2025 01:47:48 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     9009
IP address blocks:        203.34.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357 (0x54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jun  5 01:47:48 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a486a5-214c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:ab:46:70:ea:fd:17:5b:14:c4:c4:97:47:
                    ca:0c:2e:84:0d:76:26:7d:0d:e6:dd:8d:94:46:2e:
                    42:c0:64:18:28:4b:6c:b8:89:5b:85:2e:3c:66:5f:
                    db:ce:62:ed:34:c4:45:da:35:3e:95:1b:44:c7:24:
                    fa:fe:e3:b5:36:7b:7f:f0:51:d6:2a:97:fa:1d:5d:
                    37:5c:c7:0f:9e:90:bc:e2:a9:90:81:4a:7b:3d:ce:
                    0a:4b:a8:80:9b:55:57:29:40:22:4e:19:b1:15:8d:
                    c9:0a:60:40:63:e3:1c:28:17:2f:4c:aa:64:5c:5d:
                    ed:4c:ce:9b:53:51:34:8b:26:ac:60:3d:93:15:7e:
                    09:73:25:a0:bb:17:a5:48:35:a4:43:2c:20:6b:93:
                    cf:2d:ae:09:f2:d7:20:34:b9:35:22:a4:43:7c:c9:
                    c6:15:ae:65:3d:52:4e:af:6b:b1:6f:bb:c4:29:f1:
                    86:28:74:00:f3:92:ca:78:b3:78:f1:c4:41:24:05:
                    1e:e2:1a:a6:cd:85:1c:77:49:b9:4e:cb:b8:c0:42:
                    0c:8e:f0:de:f1:0f:a5:e7:ac:89:12:4a:6e:bc:21:
                    4f:97:f7:23:af:84:25:4a:c3:92:83:a0:fa:c9:fd:
                    8e:e8:b9:49:bd:dc:61:67:31:00:c2:7a:4f:52:87:
                    eb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:88:30:2F:A7:74:0C:9F:5D:E2:5F:1B:8D:38:2B:C8:E5:AE:4B:0C
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/B6E083D46E2F11EEB9C12A34C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.34.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:2a:9e:99:fb:5b:21:48:9c:98:f5:6d:e5:7f:7f:7a:b1:4d:
         76:3c:bc:3b:6e:30:20:d2:9b:28:c0:f3:b2:10:aa:ea:39:d1:
         9e:1b:4b:13:2e:82:a9:dc:f2:0a:6a:63:9f:9a:72:2a:56:29:
         ee:7a:cb:9d:ef:71:1e:37:2b:2a:14:d4:1b:55:14:8d:85:5e:
         30:b7:c1:0f:21:cc:40:08:ba:89:21:4a:de:6e:dc:ec:35:51:
         9b:1c:04:a1:39:77:5d:d7:44:5a:4e:b4:a3:51:3b:7e:35:7a:
         c0:bf:f8:3d:d0:48:a1:4d:ba:2d:53:8d:22:d7:3c:b6:8c:a6:
         28:80:46:4b:1d:0e:56:da:4e:2e:f6:4f:99:19:62:97:5a:01:
         c0:83:6d:e0:3d:c2:5b:90:13:c3:8a:ef:69:2e:f2:58:98:a5:
         43:b0:f1:f8:14:a8:f7:e5:bc:83:da:5d:1d:28:51:de:c2:53:
         90:18:ad:b7:4f:72:7c:dd:3d:43:d9:74:ab:c7:11:b2:67:52:
         53:e8:8a:00:ca:94:00:3b:d0:6d:c0:65:98:52:b1:6c:be:0c:
         a3:95:aa:2c:d0:e4:5a:0d:62:13:62:cc:11:ab:9e:c1:cd:7f:
         a1:9d:88:7a:5b:47:77:fc:54:39:ce:cf:bd:d6:db:4a:9a:e9:
         c6:6c:0a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:42 2026 by rpki-client