Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/D040E1BC16D311F18D1B19D1303D8C67.roa
File:                     D040E1BC16D311F18D1B19D1303D8C67.roa (raw, json)
Hash identifier:          FW4iyNzwJYx2pnIdKFnPL+9FFZZIBrzKM+GhxItUIOM=
Subject key identifier:   28:0F:20:40:F8:30:9A:FF:5D:FC:9C:09:EC:92:A4:2E:15:04:F0:CF
Certificate issuer:       /CN=A917FFCC/serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A
Certificate serial:       02
Authority key identifier: 50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/D040E1BC16D311F18D1B19D1303D8C67.roa
Signing time:             Tue 03 Mar 2026 07:37:21 +0000
ROA not before:           Tue 03 Mar 2026 07:37:21 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     142256
IP address blocks:        198.15.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl
                          rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFCC, serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A
        Validity
            Not Before: Mar  3 07:37:21 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a68fb1-44db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:38:bf:e9:91:c2:6d:e5:e9:fe:e7:b4:b7:
                    ae:0d:7b:d6:6b:8a:9e:99:d7:89:d0:bf:df:aa:8c:
                    02:cb:16:8e:f8:79:f3:f4:12:75:f5:ac:a0:5e:c1:
                    5a:73:15:19:f0:b9:fd:f4:03:8d:5c:a7:42:3c:4c:
                    bf:1a:ab:93:38:e3:9d:da:fd:a0:fa:0e:36:c2:ed:
                    c6:44:69:4a:c4:23:f9:fe:59:83:3f:11:1f:b2:79:
                    e0:51:f7:1b:db:19:2e:8f:cf:7b:52:c5:fc:27:d1:
                    d5:ee:ed:a8:0a:fb:0c:74:d1:a2:2d:a0:08:3e:b6:
                    68:0b:70:b2:73:41:65:16:e4:9f:2c:53:b5:82:4f:
                    10:0e:e0:47:33:8e:b5:b3:ff:1a:c8:a3:eb:d1:51:
                    82:20:75:68:02:bf:f6:cb:74:70:78:89:d0:3d:9d:
                    11:6d:ee:90:53:7e:fb:08:3b:7a:13:04:b6:58:8c:
                    fd:18:4f:73:97:4d:c3:d0:6a:f7:31:f7:17:88:70:
                    9c:0d:c6:14:b2:64:d4:b1:76:2c:5e:e2:0f:51:5a:
                    63:61:fd:9d:72:1b:d1:03:76:ee:7f:00:1e:0a:f7:
                    07:29:c8:e5:ee:10:53:ee:0c:d9:28:6e:fd:b5:e4:
                    ce:ba:df:56:90:1c:05:4d:d3:fb:60:0e:55:97:68:
                    07:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0F:20:40:F8:30:9A:FF:5D:FC:9C:09:EC:92:A4:2E:15:04:F0:CF
            X509v3 Authority Key Identifier:
                keyid:50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/D040E1BC16D311F18D1B19D1303D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.15.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:5d:b7:9e:05:80:9c:0b:67:7e:7b:d7:d9:2b:29:37:12:3b:
         ed:ea:e6:df:ca:44:81:b0:43:03:cc:1c:ff:be:2e:37:d4:ef:
         6c:79:cc:f2:be:a2:b1:76:08:4e:cd:27:ff:92:8d:75:29:62:
         0a:f4:db:88:df:2f:3f:a4:ad:5a:d9:66:aa:89:09:99:f4:f5:
         e0:e7:91:90:b9:23:b7:22:d3:c6:40:89:06:3c:b5:46:06:9e:
         5e:0b:b2:8c:2e:3b:90:f2:0c:71:b4:ef:d2:9d:05:bf:65:59:
         42:23:8c:8f:f3:50:2b:fc:eb:b6:06:05:3f:cb:da:31:05:f5:
         eb:1f:77:09:53:ae:b9:c4:ee:b9:17:33:fe:5d:09:56:ae:f8:
         f4:c0:a3:60:6b:50:d6:1e:8c:e6:5c:47:b3:fd:d1:a9:00:47:
         e4:df:f7:ed:f3:7f:90:51:3a:11:f9:f1:6e:b6:23:70:94:33:
         ff:81:75:00:46:a9:6d:b1:08:fd:90:44:ed:5e:4e:f5:92:53:
         be:1d:5b:b3:c1:e6:b5:f2:ce:ed:6f:a6:0f:b4:61:5a:1c:f0:
         76:95:8d:91:81:70:b9:25:19:b1:a3:b9:50:5b:6e:d5:a9:71:
         13:8b:16:bc:c1:ab:be:ee:1e:01:43:c0:e9:b3:6f:28:0b:ae:
         de:b9:e2:d3
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RkZDQzExMC8GA1UEBRMoNTA2RTNEMURDMEFEQzczODlEOUNEQkFBRkE1MTcwNzQx
QjU1ODYxQTAeFw0yNjAzMDMwNzM3MjFaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTY4ZmIxLTQ0ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3Gji/6ZHCbeXp/ue0t64Ne9Zrip6Z14nQv9+qjALLFo74efP0EnX1rKBewVpz
FRnwuf30A41cp0I8TL8aq5M4453a/aD6DjbC7cZEaUrEI/n+WYM/ER+yeeBR9xvb
GS6Pz3tSxfwn0dXu7agK+wx00aItoAg+tmgLcLJzQWUW5J8sU7WCTxAO4EczjrWz
/xrIo+vRUYIgdWgCv/bLdHB4idA9nRFt7pBTfvsIO3oTBLZYjP0YT3OXTcPQavcx
9xeIcJwNxhSyZNSxdixe4g9RWmNh/Z1yG9EDdu5/AB4K9wcpyOXuEFPuDNkobv21
5M6631aQHAVN0/tgDlWXaAffAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUKA8gQPgw
mv9d/JwJ7JKkLhUE8M8wHwYDVR0jBBgwFoAUUG49HcCtxzidnNuq+lFwdBtVhhow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGRkNDLzA2QzU1QUU4MTZE
MzExRjFCQUE0MTBDODMwM0Q4QzY3L1VHNDlIY0N0eHppZG5OdXEtbEZ3ZEJ0Vmho
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVUc0OUhjQ3R4emlkbk51cS1sRndkQnRWaGhvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RkZDQy8wNkM1NUFFODE2RDMxMUYxQkFBNDEwQzgzMDNEOEM2Ny9EMDQwRTFCQzE2
RDMxMUYxOEQxQjE5RDEzMDNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADGDxowDQYJKoZIhvcNAQELBQADggEBAIZdt54FgJwLZ35719krKTcS
O+3q5t/KRIGwQwPMHP++LjfU72x5zPK+orF2CE7NJ/+SjXUpYgr024jfLz+krVrZ
ZqqJCZn09eDnkZC5I7ci08ZAiQY8tUYGnl4LsowuO5DyDHG079KdBb9lWUIjjI/z
UCv867YGBT/L2jEF9esfdwlTrrnE7rkXM/5dCVau+PTAo2BrUNYejOZcR7P90akA
R+Tf9+3zf5BROhH58W62I3CUM/+BdQBGqW2xCP2QRO1eTvWSU74dW7PB5rXyzu1v
pg+0YVoc8HaVjZGBcLklGbGjuVBbbtWpcROLFrzBq77uHgFDwOmzbygLrt654tM=
-----END CERTIFICATE-----
Generated at Wed Mar 4 09:26:29 2026 by rpki-client