Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/8D88B9125B2311EE86CC6A71C4F9AE02.roa
File:                     8D88B9125B2311EE86CC6A71C4F9AE02.roa (raw, json)
Hash identifier:          m4OYQMEnrmC7k1a1yVmKxzd2QvlWXdsaMA1wS2lcsRs=
Subject key identifier:   6A:EA:D6:47:2B:F2:9F:54:FC:03:35:DE:44:29:7B:09:52:19:85:4B
Certificate issuer:       /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Certificate serial:       01DA
Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/8D88B9125B2311EE86CC6A71C4F9AE02.roa
Signing time:             Fri 13 Mar 2026 03:38:41 +0000
ROA not before:           Fri 13 Mar 2026 03:38:40 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     4768
IP address blocks:        192.146.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
                          rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
        Validity
            Not Before: Mar 13 03:38:40 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b386c0-b113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f0:7c:e4:b7:42:bb:3d:d9:59:b9:dc:16:32:
                    02:fa:c6:f4:03:52:3e:2e:d0:82:d4:19:d6:33:9f:
                    87:12:32:f6:ff:47:d0:f3:37:09:78:77:26:18:b5:
                    d9:33:24:0e:4a:26:ef:e4:19:ec:23:4f:97:6b:49:
                    bb:dd:43:41:d6:dc:8d:89:b4:5f:51:aa:86:2d:e2:
                    78:64:9b:4f:0d:1a:f0:32:0c:72:21:4c:3e:31:1a:
                    ca:bb:c8:02:59:5a:df:db:a3:c0:51:1e:43:91:98:
                    fd:7d:48:2d:df:58:f2:90:32:24:d2:2a:d5:e1:17:
                    c5:7c:1b:da:a3:65:53:f8:e2:ec:43:4c:79:78:33:
                    74:be:22:07:16:26:3e:b4:56:c4:98:89:4d:6f:dd:
                    70:a5:ba:d5:33:e2:53:6a:7b:12:97:fe:9e:6b:7b:
                    c4:0a:97:ad:47:47:b9:5a:11:e6:c1:d7:9d:47:67:
                    41:db:38:ac:49:85:14:71:9c:f7:0e:46:66:d9:53:
                    06:98:9f:bc:91:2f:9a:d5:df:fa:37:9d:3b:52:15:
                    ad:66:ef:88:ca:d4:a6:68:7b:1e:1d:f5:b0:c6:6b:
                    3d:b3:a3:29:1d:5a:96:1e:9c:7e:cc:95:d0:90:63:
                    be:f5:f1:30:b3:06:bd:59:d5:52:23:24:8f:94:ff:
                    11:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EA:D6:47:2B:F2:9F:54:FC:03:35:DE:44:29:7B:09:52:19:85:4B
            X509v3 Authority Key Identifier:
                keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/8D88B9125B2311EE86CC6A71C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.146.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:7c:49:23:e4:aa:92:48:45:71:60:4b:7c:fb:2b:b0:89:76:
         a0:2e:97:17:05:45:09:9d:cf:14:f8:6e:a9:7a:89:9e:6d:94:
         11:1c:5a:95:e7:69:86:3d:7b:06:f6:8e:fc:58:c1:c3:37:f9:
         13:d2:02:13:44:15:49:41:b4:81:c8:ec:bf:4b:4e:41:80:3b:
         12:2b:21:0a:9a:d6:64:29:8c:5c:8f:71:8e:ab:96:ff:85:ee:
         e5:22:78:ea:65:c7:c8:5d:6b:28:e5:4c:16:aa:6a:fe:37:ac:
         59:78:68:57:b3:40:65:bb:35:7d:68:9d:b5:e3:e3:05:f5:3e:
         7b:f2:6f:27:5b:27:0c:f8:19:43:e8:58:14:68:a7:58:3a:10:
         81:4a:80:f5:79:d6:fe:70:13:a4:7e:26:1a:be:51:5c:51:36:
         f5:5a:c9:5f:39:44:30:54:21:30:47:05:a7:b4:9e:d8:8a:a8:
         ee:05:d2:53:5b:0a:89:91:21:c8:14:ec:c1:47:5f:94:9a:b1:
         67:98:81:76:cc:7c:14:0e:b9:69:8a:03:66:ec:c5:a2:68:a9:
         60:bc:86:ed:ab:e7:65:32:05:6f:94:f8:aa:0b:b0:0f:14:4b:
         ed:c7:7e:77:ee:b4:00:a4:4a:0c:e4:dc:10:63:23:35:b9:19:
         fb:8c:64:62
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY5MzcxMTAvBgNVBAUTKDg4QTJDQjQ2MjQ4MDFCQzlDN0FEQTIyMzgzOUZDM0M1
MzZDN0ZCMjYwHhcNMjYwMzEzMDMzODQwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWIzODZjMC1iMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApPB85LdCuz3ZWbncFjIC+sb0A1I+LtCC1BnWM5+HEjL2/0fQ8zcJeHcmGLXZ
MyQOSibv5BnsI0+Xa0m73UNB1tyNibRfUaqGLeJ4ZJtPDRrwMgxyIUw+MRrKu8gC
WVrf26PAUR5DkZj9fUgt31jykDIk0irV4RfFfBvao2VT+OLsQ0x5eDN0viIHFiY+
tFbEmIlNb91wpbrVM+JTansSl/6ea3vECpetR0e5WhHmwdedR2dB2zisSYUUcZz3
DkZm2VMGmJ+8kS+a1d/6N507UhWtZu+IytSmaHseHfWwxms9s6MpHVqWHpx+zJXQ
kGO+9fEwswa9WdVSIySPlP8REQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGrq1kcr
8p9U/AM13kQpewlSGYVLMB8GA1UdIwQYMBaAFIiiy0YkgBvJx62iI4Ofw8U2x/sm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yNkI0OTgxRTVC
MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4bkhyYUlqZzVfRHhUYkgt
eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEY5MzcvMjZCNDk4MUU1QjIzMTFFRUI4NzczRjcwQzRGOUFFMDIvOEQ4OEI5MTI1
QjIzMTFFRTg2Q0M2QTcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwJLbMA0GCSqGSIb3DQEBCwUAA4IBAQDBfEkj5KqSSEVxYEt8+yuw
iXagLpcXBUUJnc8U+G6peomebZQRHFqV52mGPXsG9o78WMHDN/kT0gITRBVJQbSB
yOy/S05BgDsSKyEKmtZkKYxcj3GOq5b/he7lInjqZcfIXWso5UwWqmr+N6xZeGhX
s0BluzV9aJ214+MF9T578m8nWycM+BlD6FgUaKdYOhCBSoD1edb+cBOkfiYavlFc
UTb1WslfOUQwVCEwRwWntJ7YiqjuBdJTWwqJkSHIFOzBR1+UmrFnmIF2zHwUDrlp
igNm7MWiaKlgvIbtq+dlMgVvlPiqC7APFEvtx3537rQApEoM5NwQYyM1uRn7jGRi
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:54 2026 by rpki-client