Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1D6F4D7EEEC611F0B6553517716F56BC.roa
File:                     1D6F4D7EEEC611F0B6553517716F56BC.roa (raw, json)
Hash identifier:          mjkSPSU1CtFx25rdmfQRNQYhUhcPGhgag+X4DPy+syU=
Subject key identifier:   3A:E0:B4:35:7C:F6:5F:BE:F0:E4:B8:A8:5F:BE:9F:02:3D:89:80:D5
Certificate issuer:       /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial:       41
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1D6F4D7EEEC611F0B6553517716F56BC.roa
Signing time:             Mon 02 Mar 2026 04:39:33 +0000
ROA not before:           Sun 11 Jan 2026 08:18:31 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     154313
IP address blocks:        138.252.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
        Validity
            Not Before: Jan 11 08:18:31 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a51484-fef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:6b:6e:bf:08:ff:4f:ff:37:66:c6:cf:cb:
                    d3:1c:da:2d:a6:f2:68:1d:ee:2b:c3:2b:88:e5:9c:
                    3e:71:6f:53:ac:f2:62:06:d4:76:7f:1d:c0:15:eb:
                    8d:e2:e9:42:6b:9c:60:f4:0f:d3:75:51:0e:a5:98:
                    34:c0:1b:a6:e2:76:b1:2c:18:ca:0e:09:6c:c6:74:
                    28:1e:fb:87:a2:5a:c6:84:5c:e1:41:3c:61:42:ca:
                    2c:27:6e:35:2b:9b:a5:5e:fc:d9:67:0f:96:bd:e0:
                    1a:07:5f:3e:55:1a:3d:05:47:04:cf:a6:c6:da:00:
                    9b:15:47:17:d1:44:86:fa:db:71:64:d8:8a:e9:18:
                    d2:24:0a:53:3e:47:2b:25:34:05:fe:a4:a0:2c:85:
                    a5:36:2c:a2:1d:51:aa:77:62:f7:7d:40:c0:8d:96:
                    a5:cd:e4:14:c2:ab:98:7d:7c:2b:41:d1:b6:31:1b:
                    6b:d9:58:ea:e2:f9:ed:1d:31:bd:12:c4:73:ee:3f:
                    ca:b3:d5:16:b9:80:d0:87:1c:7c:95:6a:2f:f0:14:
                    3a:f9:09:27:f9:27:2c:60:be:58:5c:60:53:ab:b7:
                    f8:f3:e2:e4:75:5e:46:b0:23:63:3b:16:2d:48:d9:
                    7d:d2:6c:5a:76:76:0c:b6:c5:75:b5:39:c2:2f:19:
                    f1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E0:B4:35:7C:F6:5F:BE:F0:E4:B8:A8:5F:BE:9F:02:3D:89:80:D5
            X509v3 Authority Key Identifier:
                keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1D6F4D7EEEC611F0B6553517716F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:1d:4a:76:52:87:6c:e0:b7:64:bd:e6:b2:b4:af:14:bd:9c:
         bd:05:6f:5d:3f:36:dc:70:74:31:f3:f2:66:65:74:9c:0c:1c:
         5c:6c:57:15:2b:2a:10:2f:d3:8e:ed:f7:79:a6:07:ea:e2:b3:
         8a:d5:d0:a6:4c:6a:d7:5a:ca:ac:e6:eb:72:9f:51:a5:fc:fe:
         fd:9f:e3:29:e5:27:cb:ba:c2:aa:8e:f4:7d:9a:ad:60:4d:81:
         a0:f0:22:9b:74:c3:f2:fd:1d:26:08:81:0c:72:48:55:a9:90:
         33:19:36:58:6a:cd:6b:52:1b:1c:4e:5d:91:d4:57:6c:e4:06:
         cb:dd:14:d0:8a:dc:e2:ac:ec:37:69:eb:d0:57:aa:8d:75:3c:
         45:c7:1b:e9:89:e1:6a:ee:1d:22:ba:db:82:c1:69:73:c5:74:
         39:4d:cd:06:19:28:d0:ea:e8:e2:e0:5a:64:c7:93:0b:c3:8f:
         5f:2a:34:82:81:b6:31:6d:2f:a8:96:ed:f4:04:71:37:25:12:
         f5:34:4e:3e:ef:c9:84:f2:f5:08:cf:5c:32:9d:e8:d9:57:2c:
         8a:94:7a:17:c9:0c:6a:0c:54:86:ec:41:04:b5:e5:29:84:0e:
         92:7c:d3:08:ae:42:84:8c:f5:b9:84:56:8a:fd:76:dd:bc:68:
         82:7e:37:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:15 2026 by rpki-client