Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/069626A6ABC211EA9C9FC06EC4F9AE02.roa
File:                     069626A6ABC211EA9C9FC06EC4F9AE02.roa (raw, json)
Hash identifier:          a13wcJgj/v303LsVDa83QJzYatBFpSPG3+KuAw015o8=
Subject key identifier:   67:27:FA:0A:49:93:33:6C:FC:72:D9:9D:BB:D5:4F:70:F4:8A:72:7F
Certificate issuer:       /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial:       141D
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/069626A6ABC211EA9C9FC06EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:56:25 +0000
ROA not before:           Mon 02 Feb 2026 15:11:22 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     54994
IP address blocks:        167.179.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 14:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5149 (0x141d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
        Validity
            Not Before: Feb  2 15:11:22 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a47dc9-141a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:5c:98:54:7e:6b:81:e1:52:b3:a7:d8:04:
                    77:b5:c2:dd:48:b2:ec:28:8b:f3:e9:c4:e9:bf:8f:
                    f6:72:f5:ce:b9:80:3f:65:f3:8d:46:7c:1a:2e:9f:
                    4a:49:35:e0:94:4a:db:4b:90:3c:ac:2a:1f:51:e2:
                    17:d8:f8:1c:f6:b9:99:52:a1:74:bc:ef:19:cf:ac:
                    de:66:6b:39:31:95:2f:c1:5c:ff:1e:22:0a:38:8d:
                    25:f1:fd:92:84:66:85:82:b5:4a:be:fe:3f:e4:e8:
                    84:54:16:75:16:50:63:53:97:ea:86:84:02:70:f6:
                    7f:a6:35:6e:6d:f7:d1:2a:05:15:b8:52:51:20:aa:
                    9e:db:6c:be:82:b2:fb:dd:66:9a:6a:57:b8:c1:ae:
                    83:5b:aa:65:a6:b1:fa:d0:49:c0:33:25:13:be:1e:
                    b3:bf:b1:f3:cb:c8:4d:74:bb:1f:67:02:c7:c2:0d:
                    49:a8:19:88:25:27:d3:5c:a7:d9:e8:5d:cf:eb:ee:
                    bb:a8:ed:14:09:57:38:05:de:d7:6e:8b:65:97:09:
                    2d:20:1d:bc:0f:a6:9b:c1:8f:15:d8:66:8a:48:f8:
                    fe:b3:88:6d:46:25:10:4e:b4:29:ac:1b:40:38:1e:
                    a0:3f:58:93:1c:4d:57:c3:f2:0d:3a:94:ee:79:4b:
                    35:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:27:FA:0A:49:93:33:6C:FC:72:D9:9D:BB:D5:4F:70:F4:8A:72:7F
            X509v3 Authority Key Identifier:
                keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/069626A6ABC211EA9C9FC06EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:7e:24:84:c9:6c:03:0d:e2:5b:b1:93:20:98:78:3c:42:e8:
         c2:98:dd:7e:72:a2:15:cb:c0:d5:af:ec:a0:de:a9:f1:08:27:
         76:0b:1a:f1:28:f0:7e:7f:1a:0b:c7:ca:6f:05:b4:92:ac:4e:
         74:d4:65:0f:7a:13:29:8d:19:34:30:e1:27:29:7f:bb:25:53:
         cf:01:57:fd:0c:a6:be:ee:ea:1d:d4:9a:cd:0e:69:b6:a4:4d:
         a5:6c:b7:84:4b:8a:c7:ff:9a:48:7d:67:65:85:15:45:5c:90:
         0b:c4:17:a9:3e:d5:8f:7d:3e:b2:49:ba:65:52:62:06:a9:b7:
         f8:a1:3a:b7:c7:18:7a:f0:b4:5d:fc:14:d7:13:1e:a3:20:c4:
         ab:63:bd:e2:fd:40:78:e8:72:ef:97:81:6e:2f:78:e3:81:54:
         b3:ab:ae:0f:61:a8:40:32:2b:ec:82:78:21:58:9d:87:9f:f6:
         d7:7a:a4:36:61:55:a5:ea:da:7a:ee:64:d9:a3:68:96:66:e5:
         a9:f5:5f:e0:1e:b4:5a:41:a5:f9:62:27:a1:31:6f:8e:a2:78:
         05:77:36:a9:96:82:08:91:59:5e:a6:4b:ad:e2:38:1a:81:83:
         2b:d4:02:7f:58:48:52:73:93:7a:1b:bd:28:19:67:2a:9f:93:
         43:4e:35:f7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICFB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc4MUExMTAvBgNVBAUTKDU5MzE0NzAzMDkyODQ1RkNCRDBCRkJBRUVGODdEODNG
QzY2RUQxRDcwHhcNMjYwMjAyMTUxMTIyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2RjOS0xNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuQNcmFR+a4HhUrOn2AR3tcLdSLLsKIvz6cTpv4/2cvXOuYA/ZfONRnwaLp9K
STXglErbS5A8rCofUeIX2Pgc9rmZUqF0vO8Zz6zeZms5MZUvwVz/HiIKOI0l8f2S
hGaFgrVKvv4/5OiEVBZ1FlBjU5fqhoQCcPZ/pjVubffRKgUVuFJRIKqe22y+grL7
3Waaale4wa6DW6plprH60EnAMyUTvh6zv7Hzy8hNdLsfZwLHwg1JqBmIJSfTXKfZ
6F3P6+67qO0UCVc4Bd7XbotllwktIB28D6abwY8V2GaKSPj+s4htRiUQTrQprBtA
OB6gP1iTHE1Xw/INOpTueUs1MQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGcn+gpJ
kzNs/HLZnbvVT3D0inJ/MB8GA1UdIwQYMBaAFFkxRwMJKEX8vQv7ru+H2D/GbtHX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS80RUVDNUI3RUE2
QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1JmeTlDX3V1NzRmWVA4WnUw
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dURkhBd2tvUmZ5OUNfdXU3NGZZUDhadTBkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc4MUEvNEVFQzVCN0VBNkI0MTFFOEI0M0ExNDY3QzRGOUFFMDIvMDY5NjI2QTZB
QkMyMTFFQTlDOUZDMDZFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAp7P+MA0GCSqGSIb3DQEBCwUAA4IBAQAifiSEyWwDDeJbsZMgmHg8
QujCmN1+cqIVy8DVr+yg3qnxCCd2CxrxKPB+fxoLx8pvBbSSrE501GUPehMpjRk0
MOEnKX+7JVPPAVf9DKa+7uod1JrNDmm2pE2lbLeES4rH/5pIfWdlhRVFXJALxBep
PtWPfT6ySbplUmIGqbf4oTq3xxh68LRd/BTXEx6jIMSrY73i/UB46HLvl4FuL3jj
gVSzq64PYahAMivsgnghWJ2Hn/bXeqQ2YVWl6tp67mTZo2iWZuWp9V/gHrRaQaX5
YiehMW+OongFdzaploIIkVlepkut4jgagYMr1AJ/WEhSc5N6G70oGWcqn5NDTjX3
-----END CERTIFICATE-----
Generated at Fri Mar 13 14:30:57 2026 by rpki-client