Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/C95DC5F4A27411F1A78F91D46611F970.roa
File:                     C95DC5F4A27411F1A78F91D46611F970.roa (raw, json)
Hash identifier:          ORURaqb/tZ2urpCugRZ8/FpqoxngJp0Iv3YmiEfInTM=
Subject key identifier:   9D:B7:0D:4E:17:71:DC:9E:23:97:57:CF:82:90:EE:B1:E3:0C:E5:CD
Certificate issuer:       /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Certificate serial:       0230
Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/C95DC5F4A27411F1A78F91D46611F970.roa
Signing time:             Fri 28 Aug 2026 00:09:50 +0000
ROA not before:           Fri 28 Aug 2026 00:09:50 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     9790
IP address blocks:        192.146.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
                          rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 02:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
        Validity
            Not Before: Aug 28 00:09:50 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a90d1ce-9b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:db:18:e8:6b:d0:43:c7:48:56:b8:02:21:
                    39:39:a1:1f:93:8f:d7:6d:e2:07:b6:9c:2e:c3:83:
                    0e:6c:2b:a8:0f:10:b7:19:b2:98:03:af:0a:50:92:
                    89:22:04:d5:ec:3d:cb:cf:2f:8d:91:d5:30:ee:d4:
                    4a:33:6a:ff:f6:13:94:a4:08:7e:c5:02:80:e6:27:
                    ff:36:59:ff:67:ff:b5:a4:7e:44:d8:64:99:15:8b:
                    18:8d:b4:18:29:bb:95:9c:18:7d:bd:31:d9:46:64:
                    b8:c9:6f:40:30:a9:fb:23:35:97:1b:8a:d1:01:ad:
                    33:64:b9:5e:0b:f4:fe:d4:0a:6d:db:dc:a5:66:03:
                    8c:f6:3e:62:f1:9e:b0:85:a5:a0:2a:e8:95:07:17:
                    51:11:89:a6:ac:de:23:51:98:af:b3:d3:4b:67:65:
                    9d:8f:1f:a1:d8:cc:11:c1:03:be:40:71:e3:15:88:
                    fa:3d:3c:8d:8e:5d:d8:a4:a4:d2:c2:ae:03:b8:89:
                    b5:85:a3:19:74:58:f6:1e:39:b2:42:a1:50:d0:3e:
                    8b:5a:b3:f0:6b:96:67:87:bc:02:f7:75:3e:f0:6c:
                    a3:5a:f2:8a:7e:e8:cc:f3:ee:84:c3:8a:e7:b3:28:
                    e8:36:e6:cb:b2:27:60:d7:df:87:25:e1:13:3c:b8:
                    a7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B7:0D:4E:17:71:DC:9E:23:97:57:CF:82:90:EE:B1:E3:0C:E5:CD
            X509v3 Authority Key Identifier:
                keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/C95DC5F4A27411F1A78F91D46611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.146.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:d1:21:2c:e9:c1:5b:13:af:3b:62:cd:b5:0a:11:33:8f:b4:
         74:2f:b8:5d:ef:c4:60:43:cf:ba:b7:54:d6:1b:27:0a:58:a8:
         09:5d:d6:c8:da:c4:37:89:da:2f:6f:91:20:ee:25:b2:07:a6:
         c9:e3:e6:b2:dd:ea:ac:71:86:50:88:db:f6:cf:a2:76:6d:02:
         8a:24:45:67:67:6e:da:b2:48:cd:23:96:fe:70:a8:e1:19:57:
         f8:6d:35:81:67:23:06:9d:06:7b:c9:f5:ac:12:4b:06:8a:f3:
         61:fd:5f:30:24:c1:6d:50:d4:34:c7:89:cb:50:62:bb:d3:66:
         de:35:11:0b:c7:d2:26:90:fa:af:93:90:99:f7:63:a7:2a:68:
         9b:3c:ba:00:eb:7d:f1:54:bd:15:6c:fe:54:85:39:0c:65:ef:
         c3:d8:99:98:98:c1:2b:38:07:c8:ad:76:50:16:bf:24:6e:d2:
         49:3a:19:25:17:86:9e:f9:1b:45:18:35:86:f7:55:00:ab:d4:
         03:2b:97:48:2d:d9:a8:25:85:56:6d:c1:11:c6:da:1e:f7:2e:
         87:43:b8:ff:c8:8c:f3:a7:76:1f:b8:b2:12:25:b7:9e:b5:f9:
         59:bb:11:28:9e:cd:c7:b2:1e:51:de:74:16:8e:70:84:6a:f5:
         a2:7f:f6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:11:45 2026 by rpki-client