Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/805A2E74660311EF90397033C4F9AE02.roa
File:                     805A2E74660311EF90397033C4F9AE02.roa (raw, json)
Hash identifier:          Ykeor4N3ZYktqSK8h8Jvl4N7MDTvjXzy1VXLxOwBc0I=
Subject key identifier:   2A:77:AC:C1:C9:A0:A0:48:1C:90:05:2B:58:69:61:92:05:D9:D7:91
Certificate issuer:       /CN=A91E8D22/serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248
Certificate serial:       020C
Authority key identifier: 1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/805A2E74660311EF90397033C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:31:34 +0000
ROA not before:           Fri 07 Mar 2025 03:20:11 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     17473
IP address blocks:        203.24.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl
                          rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8D22, serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248
        Validity
            Not Before: Mar  7 03:20:11 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3eb56-f07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:b8:97:e2:3f:55:59:5c:66:2e:fb:2e:24:
                    01:d5:4e:90:ea:53:6c:73:c5:d0:10:0f:94:ac:de:
                    2f:87:3f:ea:a8:de:c8:59:39:60:1b:6a:8e:ce:28:
                    8a:77:34:d4:4e:f3:55:b0:59:24:8f:8e:97:9c:1c:
                    24:0f:42:f9:fb:0d:2a:7e:49:de:be:fa:fd:14:4a:
                    57:c2:03:37:fb:6f:aa:be:26:1d:5f:b4:cf:32:88:
                    7d:f2:b3:58:b7:8e:d5:2b:0f:14:50:6a:7c:87:de:
                    20:c7:60:a3:73:2b:1c:62:21:7a:e0:26:d4:a0:0d:
                    ff:ef:bb:60:dc:8a:2d:43:0e:d0:02:cc:74:6e:03:
                    b0:51:62:71:52:63:2e:cb:ee:d3:d0:cc:f4:9e:e0:
                    d8:3b:6a:98:4b:2e:ce:7a:c8:b0:d0:21:71:41:a9:
                    7d:98:58:24:d4:01:d4:e5:ec:aa:31:30:d1:9c:89:
                    40:7f:c0:19:1f:08:53:92:96:8c:d5:b2:32:40:4a:
                    7f:81:70:61:1c:99:49:9f:38:53:eb:04:f0:a7:7e:
                    53:11:9f:1d:77:a4:43:73:ee:34:bb:ef:1c:33:95:
                    93:6f:3d:ba:88:d5:9f:9f:05:5e:05:a8:37:18:d2:
                    f1:f2:37:e8:2d:52:3c:1b:2d:19:c8:1f:4c:1e:b7:
                    86:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:77:AC:C1:C9:A0:A0:48:1C:90:05:2B:58:69:61:92:05:D9:D7:91
            X509v3 Authority Key Identifier:
                keyid:1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/805A2E74660311EF90397033C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.24.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:2f:c9:93:4e:00:22:ac:e8:9c:cc:6b:e9:66:df:72:79:
         b2:00:d3:d2:cf:d7:68:18:db:74:a3:a5:2a:f0:c1:ac:6f:0a:
         68:f2:e5:4f:78:b5:92:3e:d2:9b:3e:97:0e:89:d9:b1:2c:9e:
         47:2e:11:35:08:cf:19:3d:5b:aa:dd:d5:6c:50:c8:46:b1:11:
         f3:b4:2d:11:ce:c2:7b:31:44:03:08:28:c3:ba:a0:7b:2f:a1:
         18:29:0a:e2:4f:5e:11:76:62:25:0e:60:6b:30:0a:43:f3:8a:
         fc:15:c3:d6:7e:43:c0:7c:ee:a5:6d:70:55:38:c1:43:49:66:
         a0:b3:c2:13:e8:46:07:64:35:e3:3e:34:b4:14:08:54:81:8f:
         9f:3a:f9:aa:78:c9:4b:b5:85:53:da:4f:04:b7:73:00:08:1f:
         b4:4a:6f:17:2a:82:f0:71:0f:6c:45:8e:de:7b:f2:50:60:24:
         ef:5f:64:cb:bd:e5:71:f5:fc:83:97:b7:27:33:8b:e3:f7:a9:
         90:6a:26:88:9e:0d:2e:14:d1:99:0a:ab:48:72:3a:8e:43:c5:
         01:ae:28:ef:06:7b:fa:47:ee:e5:7c:4b:a0:1b:84:f7:65:ed:
         fd:47:d9:64:9e:f9:e0:ca:a5:45:73:b2:ea:14:c7:86:40:af:
         a6:cb:b8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:42:27 2026 by rpki-client