Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/7621BEA0084611F08BEB2E2DC4F9AE02.roa
File:                     7621BEA0084611F08BEB2E2DC4F9AE02.roa (raw, json)
Hash identifier:          ekv9lLMJowy0tTt5Vgk8NN5c2QvrR8UHcRzo+mWEFnI=
Subject key identifier:   16:42:EC:A5:73:19:83:37:23:96:19:76:3A:16:3D:79:A3:AD:D3:1D
Certificate issuer:       /CN=A9155725/serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Certificate serial:       C3
Authority key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/7621BEA0084611F08BEB2E2DC4F9AE02.roa
Signing time:             Tue 03 Mar 2026 06:44:15 +0000
ROA not before:           Tue 03 Mar 2026 06:44:15 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        86.54.202.0/24 maxlen: 24
                          86.54.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
                          rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 06:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155725, serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
        Validity
            Not Before: Mar  3 06:44:15 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a6833f-49f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9a:ca:60:d5:d1:ed:b1:2d:12:14:56:1f:0f:
                    06:32:2e:49:5a:95:7b:92:d5:db:b7:22:c2:a6:97:
                    3f:e0:07:a8:68:62:9c:f5:e0:82:11:4f:19:be:bf:
                    43:56:59:ba:11:50:46:40:2a:58:95:e5:72:1a:41:
                    cc:18:45:0b:6b:b0:e0:19:c3:c0:c2:c3:87:b8:c8:
                    d0:67:6c:75:f2:e8:90:93:b9:44:0d:e1:61:a0:e8:
                    c9:00:4b:86:05:a9:24:3c:a5:43:46:36:d0:91:28:
                    b6:31:a7:3f:aa:4f:7c:13:53:10:c8:0a:f1:17:27:
                    71:ed:e1:04:27:70:30:f5:e3:26:0f:c0:44:7d:6a:
                    20:61:8a:2d:fc:59:56:34:b7:41:9d:7b:a1:70:13:
                    6a:c1:e5:d2:54:d1:03:d5:75:7c:d6:ff:01:16:97:
                    74:fa:c4:8b:93:6d:48:9d:81:40:25:c6:3e:0b:5d:
                    dd:6c:f1:8b:8c:e5:38:32:fb:45:d2:7d:81:23:6f:
                    af:df:a5:30:0e:c5:f3:97:f7:c9:04:aa:8c:72:93:
                    18:e1:7f:aa:32:4d:c5:40:d6:ed:a5:88:e5:48:b1:
                    8c:99:18:7c:64:03:17:87:a9:2e:d7:16:0b:1e:09:
                    a8:e1:c6:c6:28:c4:40:bd:fb:62:74:aa:d0:fb:20:
                    71:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:42:EC:A5:73:19:83:37:23:96:19:76:3A:16:3D:79:A3:AD:D3:1D
            X509v3 Authority Key Identifier:
                keyid:B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/7621BEA0084611F08BEB2E2DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.54.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:f2:db:40:27:6b:3b:c4:f8:51:ec:73:41:8d:4e:45:6b:aa:
         a6:bc:6b:10:f0:e2:15:c2:02:ec:33:61:08:ec:da:92:0e:b4:
         4b:10:76:7b:6c:2f:56:44:e6:3a:4c:e1:d4:ff:eb:ba:e7:4b:
         3c:a1:aa:cc:62:dc:6f:5a:fd:54:d5:bf:d3:93:59:ce:fd:d4:
         94:e2:d6:3b:2e:45:7c:e6:ea:5a:76:bf:15:c2:00:29:80:ef:
         f0:24:ec:38:a8:fb:f0:d4:84:68:cf:43:fe:7c:a2:6b:0a:aa:
         7f:2c:31:69:56:b0:de:b6:f1:34:75:99:80:b4:ce:bf:18:45:
         3c:84:3a:c9:bf:71:96:83:43:ba:9a:d8:15:8b:ef:0b:a1:0f:
         dc:3c:fc:04:73:8d:d7:53:11:c4:bd:ae:b4:c9:a5:a9:db:8f:
         57:f3:e1:b9:31:8e:cc:b7:d4:db:39:94:83:b7:74:f5:b0:e7:
         b9:ff:c4:45:a8:ed:0e:b8:77:44:0e:3d:01:f0:11:0c:04:f5:
         70:58:cc:b7:62:25:cc:16:ca:5d:a9:6a:a7:63:e4:2c:a8:0c:
         40:04:65:e0:6c:2f:57:31:36:12:91:da:4c:67:7d:b6:74:32:
         31:44:a2:f7:46:1d:a2:10:f3:2b:0a:95:8c:1d:9a:f4:6a:5f:
         99:e9:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:13:19 2026 by rpki-client