Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1CED22CCEEC611F0B6553517716F56BC.roa
File:                     1CED22CCEEC611F0B6553517716F56BC.roa (raw, json)
Hash identifier:          yCZ1YjOxjTNparFE9ezut6qYMPYgcu+lh0VxqkB60X0=
Subject key identifier:   79:EB:CD:26:45:D4:C9:EA:11:9F:5B:36:0B:39:DD:93:B0:5E:07:E4
Certificate issuer:       /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial:       40
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1CED22CCEEC611F0B6553517716F56BC.roa
Signing time:             Mon 02 Mar 2026 04:39:32 +0000
ROA not before:           Sun 11 Jan 2026 08:18:30 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147176
IP address blocks:        138.252.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
        Validity
            Not Before: Jan 11 08:18:30 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a51484-7179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:cf:fd:60:94:d3:e2:bd:02:46:ff:ac:b6:
                    7f:d6:cd:ff:20:6b:7b:63:89:46:9d:ba:65:e7:d4:
                    93:d0:17:95:53:a0:38:ce:bd:07:fe:4e:31:93:2b:
                    34:c8:8a:4d:53:fb:12:1e:57:52:ad:d8:4a:39:82:
                    0a:3a:65:7d:38:67:71:7c:3a:1b:8e:77:e4:70:20:
                    b1:ad:08:ee:ac:e1:b8:96:28:44:8f:5e:c5:46:56:
                    66:25:d2:2d:21:01:d3:46:14:70:c5:3c:41:98:d0:
                    9a:55:87:10:5a:0e:0a:aa:36:d3:ad:22:00:4a:f2:
                    c1:6f:0e:1c:eb:80:f3:e5:a8:11:0d:b5:2b:bd:00:
                    e3:d3:41:81:7b:c6:bb:89:97:ef:36:98:c5:b5:1b:
                    dc:48:aa:38:5d:63:a9:d4:96:7a:da:a2:21:cb:4f:
                    1b:b3:db:2e:74:2e:98:0a:f2:a1:4e:59:80:17:36:
                    a9:99:cc:6f:6f:1d:b9:bf:d2:a2:c8:c7:f7:81:73:
                    0a:4b:c2:b2:da:32:14:9c:57:b7:81:cb:19:0c:d9:
                    0b:02:d2:3e:7a:02:21:76:d8:99:21:e7:b4:80:dd:
                    7d:6b:20:2b:3f:fe:53:5e:35:a2:d0:cc:f0:ac:cf:
                    47:c7:f6:00:a3:08:c0:71:ff:57:16:83:54:b8:50:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EB:CD:26:45:D4:C9:EA:11:9F:5B:36:0B:39:DD:93:B0:5E:07:E4
            X509v3 Authority Key Identifier:
                keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1CED22CCEEC611F0B6553517716F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:0f:ab:1a:c1:9c:04:e6:2a:58:b1:77:b9:00:97:aa:f2:c1:
         09:e0:71:21:6a:71:81:49:2a:41:95:b1:ec:8c:4c:d1:7e:2a:
         e5:81:e8:78:f5:68:cb:ea:18:c3:40:06:42:f0:05:37:41:0d:
         5a:fe:12:09:59:42:55:6e:ae:51:94:30:fc:e1:80:3b:f0:34:
         1d:5c:0a:e4:0f:3a:17:45:f2:52:48:0d:01:9b:61:0f:15:6c:
         34:94:0e:c9:7e:0f:dc:26:de:9b:4e:fd:d5:e7:d0:5e:77:f2:
         94:48:54:c7:14:d4:81:1f:59:ca:9d:54:26:63:0f:02:71:e8:
         e9:45:c2:98:ee:34:2e:af:e4:ef:79:e5:c8:0d:5e:9d:e3:1d:
         05:da:33:a8:52:59:15:19:bc:8f:8e:ab:d2:f8:92:60:5e:41:
         16:98:8b:e3:65:cd:29:f7:4e:f1:24:f1:3c:2f:b1:8b:aa:74:
         0a:ce:e3:62:ec:32:fa:8a:f7:1c:a2:21:aa:0b:45:01:cc:91:
         f1:9e:64:2f:98:32:50:c9:c7:ca:1f:96:0e:2f:02:89:69:49:
         1c:25:20:ba:0e:fd:b8:ad:c7:22:a3:6d:1d:70:33:45:ef:25:
         ff:62:f8:c0:f8:ec:02:ab:f9:6b:f8:62:0c:be:93:55:78:6b:
         72:3a:a4:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:12 2026 by rpki-client