Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/FA82DFB83ACB11EC9FEBB367C4F9AE02.roa
File:                     FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (raw, json)
Hash identifier:          3t18sTpBmRlddEDH3dqosUJNqrG1lyLOlr17yZrxs+Y=
Subject key identifier:   75:CC:57:E2:9F:A7:E6:44:F8:D8:D1:E6:EC:15:2B:A9:EC:0F:8D:DA
Certificate issuer:       /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial:       060E
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/FA82DFB83ACB11EC9FEBB367C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:00:01 +0000
ROA not before:           Wed 30 Apr 2025 19:29:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133752
IP address blocks:        85.113.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
                          rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 19:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1550 (0x60e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
        Validity
            Not Before: Apr 30 19:29:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a44661-90c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:52:cf:cf:df:ae:8d:b0:16:64:24:4d:ca:
                    02:d0:b8:28:27:5a:59:d0:56:a5:52:54:09:3c:2f:
                    dc:82:4b:ee:1c:19:02:42:7e:ca:8d:01:4a:ca:53:
                    ad:fb:c1:23:bd:89:04:d7:2e:14:9a:41:81:31:3d:
                    9c:8c:65:c7:01:c5:1c:34:82:f8:03:31:6e:3a:13:
                    69:56:10:77:7c:c1:1c:98:29:e9:c0:70:3d:df:91:
                    f2:28:e0:70:13:d5:7e:cd:6e:7e:d9:c2:bd:ce:be:
                    c2:80:bb:b8:03:dd:7d:7d:a2:22:cb:f5:af:ad:68:
                    58:0b:05:a6:29:6c:b4:e8:cc:64:5d:88:7f:e4:82:
                    21:f4:ff:fa:5d:9c:e8:ea:5d:1e:43:ed:a2:0a:fc:
                    39:16:5f:75:90:e3:99:18:8f:16:15:6b:3b:87:9d:
                    4b:4e:97:56:ee:15:44:44:ef:07:c3:dc:86:c3:e0:
                    40:37:fe:ac:f5:db:cf:c3:83:a1:0c:c4:2b:62:9c:
                    eb:5a:1d:2b:7a:83:fc:03:94:4f:52:92:02:dd:74:
                    80:9f:69:7c:e6:50:bb:35:18:83:ea:d6:4b:50:0d:
                    86:68:1a:1f:e4:d3:57:45:aa:4b:50:51:f9:7b:ef:
                    aa:92:c8:9e:c4:f7:7f:9f:5a:84:7e:65:be:3c:3f:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CC:57:E2:9F:A7:E6:44:F8:D8:D1:E6:EC:15:2B:A9:EC:0F:8D:DA
            X509v3 Authority Key Identifier:
                keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/FA82DFB83ACB11EC9FEBB367C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.113.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:3d:2a:ec:cb:6c:2c:aa:5b:e6:73:0e:b1:24:c5:47:b6:8f:
         39:bc:78:b9:35:cc:50:95:a3:87:21:25:0e:d3:bd:6e:d7:3f:
         f2:92:53:0c:47:7b:4f:66:bc:bc:76:8a:76:55:e5:b8:3e:db:
         7c:72:83:19:a8:90:17:90:a2:57:91:43:70:e9:f4:98:33:24:
         21:a8:49:a4:a7:80:57:f2:fb:40:de:eb:00:b5:9a:95:11:6a:
         52:e9:32:9b:e1:b2:2e:33:48:8b:93:58:ba:13:0c:c8:16:25:
         d7:52:14:e1:df:b4:f7:3a:cc:9a:6c:22:d7:fa:1c:97:d0:a5:
         01:73:99:b6:ed:1b:c8:02:bd:a8:39:f3:4c:2d:07:59:f5:66:
         f6:d3:3c:36:44:20:82:79:8b:88:69:ca:8b:b1:d7:dd:68:1d:
         34:3b:04:d1:26:c0:59:22:2a:3c:5a:35:02:2b:e9:af:6b:26:
         a1:72:a6:d0:b2:d6:51:4a:9b:f4:45:8c:e7:94:d6:29:2c:29:
         7c:a1:96:32:e6:7c:08:70:54:b9:c9:6a:d8:18:eb:5d:6f:a1:
         b8:5e:98:52:2a:5f:2f:67:91:c1:82:5d:cf:e1:3b:db:86:62:
         6e:f6:cb:35:0e:93:8f:f8:ea:2a:7a:0f:e6:3a:00:53:e0:93:
         ba:6d:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:13:16 2026 by rpki-client