Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7C82C65A33A611EB8B013530C4F9AE02.roa
File:                     7C82C65A33A611EB8B013530C4F9AE02.roa (raw, json)
Hash identifier:          560RMuoluxlApJN2nr5kfUaoRzeglq6Ca0yagA8ioUs=
Subject key identifier:   4D:68:92:A9:A2:0C:C3:58:37:47:1C:57:3A:9B:94:BC:4E:1E:7B:A2
Certificate issuer:       /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Certificate serial:       07DF
Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7C82C65A33A611EB8B013530C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:03:50 +0000
ROA not before:           Wed 02 Jul 2025 22:02:44 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        149.234.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
                          rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2015 (0x7df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F06A, serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
        Validity
            Not Before: Jul  2 22:02:44 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47176-e51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:39:55:29:3f:e2:8f:08:1f:24:41:bf:82:
                    04:c5:9b:48:f1:9f:3d:61:69:60:53:17:ed:e4:b6:
                    76:19:d1:e5:df:8a:00:ba:ae:5c:c0:52:cb:15:28:
                    ff:0a:a7:e3:56:0c:00:0c:21:8d:96:1f:2b:e2:82:
                    82:a6:31:41:0d:68:cb:b3:bc:d2:c6:69:50:58:f5:
                    7c:47:33:1d:68:07:0d:1e:87:bb:72:bd:09:33:99:
                    8d:c3:c4:82:3d:69:24:e8:40:e8:06:1f:ee:6e:b7:
                    58:87:b8:b1:07:a8:a7:81:a9:ed:72:87:2d:dc:3b:
                    10:23:be:78:45:14:f2:3a:fc:fe:02:9e:35:f5:54:
                    9a:90:36:89:4a:72:a8:39:bb:1b:cb:84:a8:64:71:
                    68:e6:13:69:21:c5:b6:e2:34:b9:05:ce:e9:ca:be:
                    08:0a:f5:3d:30:45:ad:9c:d2:c2:c3:8d:3e:be:2f:
                    ca:61:89:98:c8:e9:a8:d6:50:b1:9e:65:86:4d:1f:
                    7d:56:bb:40:91:ab:8a:3a:08:28:00:51:be:7a:2d:
                    75:70:a0:4c:19:45:d3:c7:0a:51:56:83:bf:f1:6f:
                    f7:d1:0b:4a:96:cf:3f:bd:33:90:28:2e:02:ec:a9:
                    a6:ca:fe:30:43:4c:83:d3:96:30:bc:d3:68:bb:6f:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:68:92:A9:A2:0C:C3:58:37:47:1C:57:3A:9B:94:BC:4E:1E:7B:A2
            X509v3 Authority Key Identifier:
                keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7C82C65A33A611EB8B013530C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:6c:b5:bb:b3:73:ad:78:99:f8:10:7b:bd:05:1d:a2:6c:22:
         63:ee:0f:30:bd:c0:1a:09:1b:54:fd:df:6a:d4:c2:4c:3b:65:
         f9:a9:65:77:a8:f1:f4:86:37:5e:3c:e9:59:21:86:b6:6b:32:
         5f:d6:6b:62:d0:53:85:7d:11:a9:6b:76:5c:f0:50:4f:87:72:
         2b:9e:60:2c:63:7c:0f:44:af:56:c1:b8:c1:7d:e3:38:3a:f2:
         ce:c1:cb:06:ff:af:23:bf:72:d3:3f:5d:50:cd:0a:ce:63:20:
         04:fc:ed:9c:96:30:a1:4c:98:1c:88:09:df:f0:a4:64:ea:dd:
         4d:07:ad:0e:23:19:a5:7c:f5:49:34:32:f1:e1:71:41:ab:8d:
         be:17:e6:de:74:46:63:c7:d2:e0:27:89:d0:9f:a6:40:56:96:
         27:bc:16:98:c3:e8:32:d7:4f:67:22:27:e8:f3:17:2f:74:a2:
         7c:7b:a3:0e:3e:15:9c:34:7e:95:d9:af:3a:9b:33:a9:ba:bd:
         3f:f1:a9:3d:8f:3e:6e:9a:eb:f4:38:6e:74:d0:9f:0c:08:40:
         1f:93:0e:50:52:5f:78:67:8e:d7:67:7b:ed:54:23:0d:32:38:
         28:72:38:85:11:9e:9a:34:f1:e0:14:15:75:f9:cb:66:c9:36:
         58:c2:ee:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:12 2026 by rpki-client