Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/26BFE5FE841611EEB980955AC4F9AE02.roa
File:                     26BFE5FE841611EEB980955AC4F9AE02.roa (raw, json)
Hash identifier:          XSrmRnZlMx5Z3Gsv5j+R2nebqshQgxS35JJmLLu9/UA=
Subject key identifier:   82:57:70:D7:1F:4C:5E:00:EC:F4:60:8F:B7:99:27:4B:11:26:86:A0
Certificate issuer:       /CN=A9164860/serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4
Certificate serial:       01D6
Authority key identifier: 40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/26BFE5FE841611EEB980955AC4F9AE02.roa
Signing time:             Wed 01 Apr 2026 05:59:34 +0000
ROA not before:           Wed 01 Apr 2026 05:59:34 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137074
IP address blocks:        192.82.52.0/22 maxlen: 22
                          204.144.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl
                          rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 16:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164860, serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4
        Validity
            Not Before: Apr  1 05:59:34 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69ccb445-0776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:7f:ca:db:44:e4:3e:8d:59:00:a8:8c:9c:
                    92:62:0d:28:60:54:f5:04:34:4d:50:3c:2a:27:33:
                    54:cd:3f:db:54:3c:85:95:51:cf:ac:50:59:c2:ec:
                    7b:47:87:2e:5f:48:da:84:26:cb:98:ee:48:50:63:
                    46:8b:1d:dc:91:1a:be:27:2e:e8:cc:ab:40:9b:54:
                    7c:44:bf:51:4c:90:68:86:63:39:19:a6:3b:ad:c4:
                    c4:9d:bc:3e:6c:43:c6:05:cf:f9:7b:00:b5:92:ff:
                    ed:15:69:3a:f2:2c:fc:0d:01:c2:5a:c6:6f:05:bc:
                    f4:a8:f8:68:4f:4a:d6:20:05:c1:1b:46:6d:31:59:
                    a1:16:bf:70:da:b0:fa:75:85:a6:88:bb:e6:04:c6:
                    3d:8b:47:b8:05:77:5d:ad:c2:8e:9e:2c:ee:a3:12:
                    b9:a4:ff:6c:3c:c0:9e:77:93:eb:f7:d8:58:d4:d7:
                    3e:4a:22:2e:ae:4f:73:c3:50:ae:46:e6:40:5b:ff:
                    92:9d:27:f9:ae:fa:b0:3b:3a:22:31:8a:13:17:fc:
                    ac:67:b3:a5:5c:a7:35:b1:32:57:d8:78:d3:69:20:
                    07:1e:4f:56:be:7a:1e:80:0b:b1:72:3e:ff:c4:d2:
                    4d:4a:be:ee:68:5e:59:9c:f3:4d:d2:f8:5d:ed:70:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:57:70:D7:1F:4C:5E:00:EC:F4:60:8F:B7:99:27:4B:11:26:86:A0
            X509v3 Authority Key Identifier:
                keyid:40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/26BFE5FE841611EEB980955AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.52.0/22
                  204.144.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:01:bb:cb:12:8f:46:4a:e8:8d:ba:01:e7:5e:35:10:d6:e4:
         2b:ac:e5:80:30:fb:78:4d:cd:5a:e7:3a:48:31:22:ad:25:ee:
         7e:3d:67:05:62:63:fb:9f:c6:61:f1:40:00:21:14:9d:c2:85:
         23:43:af:de:8a:d5:3a:72:dc:34:95:2b:e4:8d:97:fd:7d:b9:
         17:56:d3:d6:52:c0:6b:2f:bb:10:3a:9e:24:4c:36:5d:ec:fd:
         65:ee:62:cc:20:ac:b9:4b:be:f9:6a:56:e5:60:80:57:cf:35:
         b7:88:d1:80:28:0f:62:b3:cb:83:c1:ff:86:45:d8:3a:fc:08:
         e9:26:c1:08:07:5c:15:7e:14:59:ac:65:c4:42:1a:e9:5e:04:
         c1:04:36:52:93:f8:c0:f6:72:47:e4:29:f0:7f:3d:2d:c8:35:
         3b:df:90:22:19:4a:a1:25:91:c4:cf:11:cc:95:31:af:37:71:
         8a:3b:bf:bf:0e:b9:49:ef:b3:6c:d6:5e:7a:02:fc:ef:fc:e2:
         33:aa:5b:3e:ef:1e:f4:c5:82:db:5f:32:92:c0:1b:98:fc:e7:
         95:a6:51:2f:31:49:fd:95:3e:44:bc:37:64:cd:6f:2d:fc:6b:
         24:05:d0:3d:e0:53:8d:0b:f6:99:1d:c3:13:e2:41:af:0e:2b:
         ce:9c:5f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:21:45 2026 by rpki-client