Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/C163E3D6170C11F1997E579B043D8C67.roa
File:                     C163E3D6170C11F1997E579B043D8C67.roa (raw, json)
Hash identifier:          +bMsiCqkQRPGuAsovwzV+Jwx1b0r6sOT2iZqA0KUI2o=
Subject key identifier:   14:D0:8F:07:AC:DE:6B:D3:30:9C:BD:84:7A:08:C2:4D:9A:D7:08:92
Certificate issuer:       /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial:       02AB
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/C163E3D6170C11F1997E579B043D8C67.roa
Signing time:             Tue 03 Mar 2026 14:24:58 +0000
ROA not before:           Tue 03 Mar 2026 14:24:58 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     394695
IP address blocks:        65.254.64.0/19 maxlen: 19
                          66.116.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
                          rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 01:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
        Validity
            Not Before: Mar  3 14:24:58 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a6ef3a-b2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:cc:d2:23:89:c0:a8:e9:46:f8:d7:61:e6:
                    08:f8:88:d2:6e:05:e0:b9:89:d0:ed:50:8f:01:f4:
                    81:da:61:af:90:44:a6:e4:6a:f1:23:86:53:2c:d2:
                    4d:ab:d9:85:53:65:98:36:8b:a5:4a:36:4d:e4:ad:
                    75:69:17:30:73:1c:88:6d:69:41:cb:0e:9c:7a:36:
                    99:36:84:82:99:1a:3f:92:df:50:d2:1b:c0:f7:a0:
                    91:0c:f5:b9:9d:5c:09:a4:07:23:f1:68:74:e5:66:
                    5d:c3:5d:8d:fc:59:4a:93:35:c7:8d:dc:31:36:73:
                    fd:e4:2c:a4:b5:94:43:2c:ab:fe:1f:8c:7b:14:d7:
                    5f:66:7b:41:d5:16:41:54:57:52:a6:aa:1c:ce:f6:
                    58:72:43:4c:a2:e3:36:a2:ef:00:85:5f:c2:f2:4a:
                    5e:00:d3:da:e8:8f:df:02:27:5b:74:8b:e9:e5:3e:
                    a2:8a:10:1a:5e:03:ba:a7:23:fb:bc:75:5f:a8:d7:
                    90:03:47:fc:65:97:66:fe:83:04:12:19:61:64:77:
                    06:f4:cd:16:1a:73:56:e8:d8:65:f7:b7:e1:1d:5c:
                    34:e4:c3:6a:65:23:13:5f:2c:94:c8:e4:a7:79:7d:
                    92:40:3c:6b:ef:83:f6:bf:38:c4:e7:32:fb:f3:94:
                    c4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D0:8F:07:AC:DE:6B:D3:30:9C:BD:84:7A:08:C2:4D:9A:D7:08:92
            X509v3 Authority Key Identifier:
                keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/C163E3D6170C11F1997E579B043D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.64.0/19
                  66.116.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         85:cb:56:3e:86:1f:c0:3a:49:6d:ff:95:d4:2e:0f:a4:76:6b:
         a0:f3:ba:d4:2c:e6:35:8c:1e:30:2e:ca:ba:28:ba:25:1a:db:
         0c:11:bf:d6:82:1f:87:0f:96:35:f3:c8:3c:2a:7c:0f:2b:7d:
         96:55:bb:8c:e7:a0:ae:87:e1:41:be:c8:cf:87:16:ce:26:13:
         96:78:46:d5:43:07:9b:5c:5c:3d:68:ef:bf:97:81:00:35:17:
         90:1c:e6:39:28:d4:fc:6a:cf:b9:c1:56:14:c5:1b:1b:bf:e5:
         e0:0c:dd:b2:35:9e:b8:22:f5:fb:5a:b9:07:42:91:ac:b9:a1:
         b8:90:6f:df:30:88:27:a5:81:ce:81:91:e4:59:29:3c:24:ba:
         46:fd:a5:cc:f6:0a:4c:f6:d2:fd:9c:aa:1d:9c:77:21:a0:45:
         72:10:bd:7d:d5:4c:ca:93:62:14:14:69:07:65:54:4f:2e:8f:
         78:71:f2:fb:32:a6:16:01:00:59:d9:7e:51:47:6f:29:1f:d1:
         f3:8d:bb:22:29:3a:21:f7:d9:ed:4b:50:14:c5:97:af:02:80:
         64:5b:bb:e8:55:46:25:8c:6a:11:11:e3:fc:0b:78:79:72:25:
         fc:71:04:5c:44:81:76:ab:be:54:2a:9c:10:94:fb:e1:8a:b6:
         b2:d2:49:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 14:52:32 2026 by rpki-client