Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/3DB4E04ED0E411EB9695B157C4F9AE02.roa
File:                     3DB4E04ED0E411EB9695B157C4F9AE02.roa (raw, json)
Hash identifier:          nyEjACdQQ3gUtN5WbVUDNxe876NOG369TAi+iHxyhOs=
Subject key identifier:   AA:F3:63:5E:D1:A1:39:9E:3D:A2:AE:40:36:2B:0E:3C:5F:7F:D6:0B
Certificate issuer:       /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5
Certificate serial:       0631
Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/3DB4E04ED0E411EB9695B157C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:15:49 +0000
ROA not before:           Fri 02 Jan 2026 22:18:39 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     8283
IP address blocks:        203.56.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl
                          rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 22:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FD85, serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5
        Validity
            Not Before: Jan  2 22:18:39 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a44a15-6689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:04:f2:e5:6b:cf:24:ec:dd:f3:47:b1:f6:
                    e2:44:1a:ca:9f:7a:0e:5e:47:62:64:5d:1b:e4:0e:
                    e4:c2:e1:8f:e0:3f:88:bd:5f:00:b1:96:b0:84:72:
                    74:8d:a9:2b:33:56:12:23:8f:16:e1:c1:a5:ee:34:
                    8b:a0:e3:43:dd:50:ba:84:fa:b2:f1:61:00:96:58:
                    56:54:3c:94:68:cf:30:5f:cc:29:53:58:3d:de:dd:
                    27:7a:1c:ac:31:c5:52:78:55:6b:48:fc:9a:4f:04:
                    74:5e:3e:4e:dc:49:42:65:c1:9f:14:1f:df:4d:3a:
                    89:79:78:9b:a6:4a:1e:0b:20:d2:4c:86:7e:08:98:
                    92:37:91:97:bb:1c:6c:d2:d3:3a:bd:a1:e5:d3:72:
                    5d:b9:bc:9d:dd:41:94:8b:21:b9:52:83:3f:d5:4e:
                    63:df:c0:04:a2:12:5a:72:4e:48:9d:aa:ec:e7:49:
                    d1:5e:1e:91:32:83:ac:e7:98:1d:95:2b:38:06:34:
                    8a:15:41:9c:be:62:10:a0:6a:fa:e2:12:a3:c6:fe:
                    8b:18:29:d6:f4:63:f4:0a:fb:05:f3:84:84:0f:52:
                    2e:67:2c:c1:b3:58:d2:7b:c9:cd:6f:8c:4b:3f:29:
                    e9:34:5e:98:37:2d:3b:42:36:c9:03:87:bd:84:4e:
                    c4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F3:63:5E:D1:A1:39:9E:3D:A2:AE:40:36:2B:0E:3C:5F:7F:D6:0B
            X509v3 Authority Key Identifier:
                keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/3DB4E04ED0E411EB9695B157C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.56.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:c4:ed:ea:99:e5:0f:27:38:3f:08:d8:04:e1:7e:cc:e7:8a:
         bd:4a:61:f5:80:55:7d:5f:94:02:8a:a5:5d:67:e0:ec:a9:bb:
         56:e2:eb:80:c9:31:3b:d4:f6:bd:10:dc:1b:a5:a4:5c:7e:a7:
         3a:eb:ab:07:ed:f2:a6:4d:aa:8e:7f:ff:ee:18:82:02:64:21:
         36:ed:73:ba:5c:59:e8:a9:04:22:7f:9c:64:4c:33:4d:96:6d:
         79:76:eb:fa:28:81:1d:8c:ed:9e:f2:e1:a9:e1:45:d9:bd:56:
         7e:3f:b3:e7:04:ef:b1:2d:f4:d4:89:28:7c:34:40:5f:c8:e4:
         dd:8a:d6:61:94:a3:bb:b0:3a:dd:e8:06:c6:eb:33:af:0d:82:
         89:a0:d4:10:41:c2:ba:6d:43:9e:80:06:98:ce:83:a5:4b:ce:
         36:0c:7a:ed:ac:0d:72:cb:8d:81:96:13:90:d9:f1:e8:a7:4a:
         40:d1:a7:01:d0:39:20:5d:ff:38:50:72:44:3d:83:b0:7c:8a:
         85:b1:eb:91:ba:a5:77:e1:fb:b4:57:07:41:6f:1c:9a:29:28:
         e3:de:f5:7c:d5:95:50:66:5e:2e:6c:16:2e:3b:81:30:9f:fb:
         66:e3:09:c2:0c:83:2f:42:82:6c:4e:f4:25:3b:ab:53:94:cc:
         5e:7e:18:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 13:22:28 2026 by rpki-client