Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/26FD4E0C705311EE8723E92AC4F9AE02.roa
File:                     26FD4E0C705311EE8723E92AC4F9AE02.roa (raw, json)
Hash identifier:          MiqtehrqvS8QEo1D5TLWH3bgAbD151KvPXNOMIE4JZM=
Subject key identifier:   73:58:B8:32:56:5B:4C:D7:A6:30:31:0E:9A:9F:8A:F7:12:DF:A0:27
Certificate issuer:       /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial:       0867
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/26FD4E0C705311EE8723E92AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:24:41 +0000
ROA not before:           Wed 02 Jul 2025 22:31:14 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     10111
IP address blocks:        45.114.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
                          rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 21:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151 (0x867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
        Validity
            Not Before: Jul  2 22:31:14 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a48469-f78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:43:db:5a:ca:3a:5b:b4:ae:54:5b:90:0d:81:
                    5e:32:36:67:0f:af:5e:41:33:63:f7:3e:36:f2:24:
                    2b:00:9e:0d:8f:dd:26:70:6b:84:06:5b:37:3a:d1:
                    9f:c3:7e:39:f9:a5:4e:23:58:09:2c:fc:f9:ec:e0:
                    93:b6:21:76:cc:f2:37:6e:11:c9:1e:e2:6f:d1:7a:
                    ff:cb:8a:f1:cf:49:3b:24:8a:6d:e5:71:10:df:55:
                    a5:23:e6:a8:79:84:1b:a3:0d:f0:f5:14:f5:b7:c2:
                    8e:f4:90:0a:04:21:05:d5:8e:b6:af:af:7f:4a:d6:
                    75:dc:4d:42:62:ad:9f:fd:8a:f8:81:c7:72:f0:54:
                    89:5c:4c:9f:d9:cc:8e:58:c7:7f:b0:c4:2a:d8:12:
                    c7:94:8b:d4:2e:ab:6c:d2:08:e2:5f:19:a0:b2:b3:
                    e2:f1:33:cc:52:2f:63:ff:33:96:cb:80:f1:24:12:
                    90:a1:76:b0:c4:64:53:76:b4:84:3a:c7:fd:9a:55:
                    86:5e:f5:d2:b3:ad:73:4c:ec:13:32:a8:85:bf:01:
                    a9:76:9d:e0:61:f1:04:f4:7f:c2:e5:05:67:42:6e:
                    82:e9:25:c4:c8:a1:c1:c5:cc:f0:d9:d9:db:19:41:
                    d9:ac:23:e5:69:e4:09:33:f9:6a:b8:13:20:d0:0a:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:58:B8:32:56:5B:4C:D7:A6:30:31:0E:9A:9F:8A:F7:12:DF:A0:27
            X509v3 Authority Key Identifier:
                keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/26FD4E0C705311EE8723E92AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c0:86:c6:19:eb:4d:5f:53:6d:00:c8:b7:f4:b0:9a:99:0d:
         8f:ec:7b:be:c6:8f:b8:06:d1:a1:6a:e0:94:2d:df:8a:b1:35:
         77:4f:45:7f:a7:de:76:cc:cb:44:80:30:53:e8:f1:8a:23:07:
         54:02:d2:13:be:11:5a:0c:fb:ab:9b:1f:67:4e:e3:8d:6d:e1:
         c1:75:eb:6e:7e:41:5d:38:44:d7:d6:2f:69:52:bb:40:f2:9f:
         1b:b5:5b:94:a7:28:8d:32:18:83:61:e3:c6:97:26:d0:65:9d:
         d8:66:79:87:ec:2b:c1:af:8c:0f:ea:db:6c:1e:cd:f5:6f:0b:
         37:5a:4a:56:f3:e8:8f:49:ce:4a:9c:73:69:a3:d0:8e:94:ab:
         0e:dc:21:8c:39:c5:d2:82:c9:28:5f:1d:7a:86:13:ff:1c:5f:
         9a:ba:a4:25:ef:69:19:4a:92:c3:31:5f:56:6d:b0:51:be:0e:
         ef:f5:7b:59:14:ea:db:44:f5:a0:69:10:2d:90:e5:31:d5:3a:
         4d:57:cf:ef:cc:04:4d:d2:e6:5f:63:38:51:e7:57:22:88:54:
         42:b9:29:ea:f7:6d:6c:f1:fa:02:2a:97:ea:3e:33:5f:a9:d1:
         a3:06:27:8c:59:17:52:44:1b:2c:b7:c5:32:1c:5a:f0:be:4f:
         e2:19:b3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:45:20 2026 by rpki-client