Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7B44296E33A611EB8B013530C4F9AE02.roa
File:                     7B44296E33A611EB8B013530C4F9AE02.roa (raw, json)
Hash identifier:          BPC3MGWBHu2qoVlWMw7iP6VOW1+PVzbCm4+BgNKPBUE=
Subject key identifier:   87:B4:BD:0A:E3:EA:A3:3E:7E:94:D8:52:7B:01:73:CA:DE:65:16:6C
Certificate issuer:       /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Certificate serial:       0825
Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7B44296E33A611EB8B013530C4F9AE02.roa
Signing time:             Thu 02 Jul 2026 22:22:53 +0000
ROA not before:           Thu 02 Jul 2026 22:22:53 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     17675
IP address blocks:        149.234.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
                          rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2085 (0x825)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F06A, serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
        Validity
            Not Before: Jul  2 22:22:53 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a46e4bd-32ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8f:4c:11:ff:12:dc:57:a1:b2:d3:6a:a9:b1:
                    9d:8d:c9:6a:fc:26:75:cb:54:81:79:c3:08:04:ec:
                    97:4b:46:31:7d:ec:a0:b0:61:12:66:bf:8e:ec:02:
                    fc:93:3d:a6:23:49:ac:72:1e:1c:f1:40:6b:e2:e5:
                    76:e9:51:b3:eb:07:4f:a0:28:1b:89:03:f7:69:29:
                    d8:eb:03:38:27:3e:a2:21:36:b6:60:46:99:9b:67:
                    18:70:6c:d9:36:65:7d:88:8d:c6:9c:12:73:3c:6e:
                    ad:fd:1b:ce:53:67:57:0c:26:8f:fc:ab:86:3e:fb:
                    0b:86:61:c8:40:46:af:fd:e3:71:3c:4c:45:fa:04:
                    89:b1:86:cd:89:39:37:aa:80:37:a1:3d:e5:da:b1:
                    5a:f6:f1:4b:ea:9b:2a:85:89:b9:16:4a:e8:81:58:
                    fa:62:81:05:44:a7:af:3f:dc:25:14:78:9b:e7:61:
                    b8:84:3c:81:9c:71:f8:19:7c:84:01:9a:0b:1c:39:
                    21:57:c3:c7:27:72:1b:d6:8f:4b:79:ec:e4:87:ab:
                    dd:24:b5:ad:13:90:7b:c6:fb:d0:29:4d:8d:2a:ea:
                    9f:66:2e:76:85:16:89:93:8e:02:8c:94:ef:bd:cd:
                    5b:a9:db:0b:1f:49:95:73:12:19:d9:8b:e7:be:c3:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B4:BD:0A:E3:EA:A3:3E:7E:94:D8:52:7B:01:73:CA:DE:65:16:6C
            X509v3 Authority Key Identifier:
                keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7B44296E33A611EB8B013530C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:49:30:bd:41:ab:63:79:a2:bb:d9:4b:5d:f2:b0:41:24:55:
         68:df:c8:bc:54:ec:05:dc:b0:23:b4:66:e9:63:03:70:24:a0:
         e5:af:c0:73:6b:cc:bb:2f:ca:e9:bb:6c:6c:0a:55:4c:8e:00:
         c8:c9:b5:ed:fa:70:7e:9c:08:36:f2:e1:d7:42:9a:f5:a8:17:
         25:2a:2d:9b:ae:b9:3a:b3:c0:c7:91:df:29:2e:6b:97:b9:3c:
         1d:df:0e:d9:8f:ce:fa:a4:ba:a1:63:fb:ef:a9:08:b5:de:e3:
         43:2f:5a:da:83:36:1e:f1:2a:a9:a7:02:6f:81:f5:4c:91:cf:
         5c:b7:27:e8:af:87:10:1d:ff:9a:26:6d:72:14:45:30:bd:ad:
         01:c9:85:70:be:e0:b0:92:b0:a1:a8:26:c9:2e:bf:9b:9b:8c:
         13:1b:57:e9:6e:79:02:a2:59:69:f7:7e:71:cc:57:56:c9:97:
         0f:cb:9c:f4:a8:fc:52:47:58:3b:75:e1:9d:d4:b7:e2:dd:7c:
         21:ba:73:39:b9:bb:d5:b7:33:39:79:cf:b3:f3:12:c5:b5:e7:
         eb:18:93:98:1e:47:e6:4f:67:72:e3:14:51:95:92:d7:2f:ff:
         41:68:a9:3b:1f:7a:da:76:67:ef:c8:e8:7d:ca:27:10:ca:ee:
         7c:4b:b1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:04 2026 by rpki-client