Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/7E8442B68FE511EC94D98C7BC4F9AE02.roa
File:                     7E8442B68FE511EC94D98C7BC4F9AE02.roa (raw, json)
Hash identifier:          zSMfmkgKLmaOH/Z5+adjQakDvYWDWTMPU8hfhZvkbj0=
Subject key identifier:   75:B2:F5:76:50:42:A2:CC:36:5D:1D:76:21:7B:A5:46:DB:D9:01:89
Certificate issuer:       /CN=A918D14B/serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4
Certificate serial:       044E
Authority key identifier: 8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/7E8442B68FE511EC94D98C7BC4F9AE02.roa
Signing time:             Thu 29 Jan 2026 00:20:04 +0000
ROA not before:           Thu 29 Jan 2026 00:20:04 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     55520
IP address blocks:        182.255.20.0/24 maxlen: 24
                          182.255.21.0/24 maxlen: 24
                          182.255.22.0/24 maxlen: 24
                          182.255.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl
                          rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1102 (0x44e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D14B, serialNumber=8B285005ADA0073E0C094B6DA6A38BB51FFFA1A4
        Validity
            Not Before: Jan 29 00:20:04 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=697aa7b4-b14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:22:47:1e:be:9b:03:0c:f3:b9:c2:e4:cc:fa:
                    b4:e0:51:4d:60:73:a2:d5:19:c9:67:10:04:2a:23:
                    a3:26:63:b9:8f:0d:df:22:bc:81:61:d0:4b:1a:db:
                    e3:3c:3b:fd:4f:a7:e7:0b:97:53:f9:57:12:4c:e7:
                    f9:c8:09:e4:4b:77:b2:f4:2f:e9:b5:61:2c:36:31:
                    da:b0:a4:4e:e5:7c:7b:76:bf:66:55:78:db:6e:cc:
                    99:d7:e6:39:e4:87:84:00:08:d0:90:c7:3f:6f:41:
                    11:dd:e9:b5:17:68:b0:53:f8:24:b4:8c:32:54:67:
                    65:71:d6:32:11:66:4e:72:c3:b7:e8:23:c5:64:b0:
                    98:12:b6:4b:ee:08:26:fb:f3:b5:a7:1a:07:9d:51:
                    d5:7b:24:19:32:95:2b:e9:ae:d7:2a:ca:95:4b:50:
                    05:54:38:c0:29:bf:11:44:bf:0f:77:c7:7f:71:dd:
                    c9:c9:64:fe:38:90:0e:4c:f8:fc:ea:ca:c4:7e:b0:
                    27:b6:d0:e9:d3:65:79:f5:84:09:fb:b8:ab:24:24:
                    c3:34:b1:33:f4:22:21:78:1d:7b:80:8b:63:14:1e:
                    7e:b9:ab:92:2f:a7:45:30:95:c0:b8:4c:4b:91:15:
                    31:4d:68:86:cb:0f:ff:d9:ea:52:f9:94:85:54:b5:
                    6f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B2:F5:76:50:42:A2:CC:36:5D:1D:76:21:7B:A5:46:DB:D9:01:89
            X509v3 Authority Key Identifier:
                keyid:8B:28:50:05:AD:A0:07:3E:0C:09:4B:6D:A6:A3:8B:B5:1F:FF:A1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/iyhQBa2gBz4MCUttpqOLtR__oaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyhQBa2gBz4MCUttpqOLtR__oaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D14B/94C898CC8FE211ECA8AFEE78C4F9AE02/7E8442B68FE511EC94D98C7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:47:0c:46:b0:a8:3d:85:1f:6a:08:dc:a3:a0:72:25:e7:15:
         47:a2:93:38:53:68:8f:a3:0f:cf:e6:10:ce:ed:74:81:e0:a2:
         58:54:02:b7:3c:e2:0c:9e:8c:89:dd:09:a6:86:d3:a9:a8:1d:
         f0:e9:54:8c:f5:27:72:14:3c:d8:3f:99:99:6e:2f:d8:d4:0d:
         78:37:e1:85:6e:59:02:17:fb:30:ee:8e:21:36:62:2b:d2:b9:
         6d:82:f6:07:3f:7e:b6:ce:cb:5a:02:8c:72:3a:c2:14:2b:7b:
         7c:04:37:55:27:e7:80:75:84:48:64:65:44:d7:36:4c:33:59:
         51:b7:46:8d:88:5b:4e:3e:55:89:ec:42:8f:2c:cf:54:96:a4:
         83:18:2b:b0:a6:a3:ba:1b:2c:1c:a9:a4:c7:83:74:83:42:fd:
         cf:7e:68:02:86:c7:bf:fa:76:25:b4:42:99:d4:7b:cf:55:0a:
         ac:1b:1a:19:99:1e:82:f0:ee:42:92:ed:bb:e6:69:a9:51:1f:
         ab:5d:bd:08:df:6e:d2:9e:31:c7:6e:88:6d:2f:ae:0b:a9:53:
         ac:6f:92:67:47:d4:5e:97:4a:68:0c:c1:99:6d:9c:92:5e:c5:
         dc:41:5e:54:cc:d3:46:af:70:56:22:f5:e8:23:75:81:b2:a1:
         1c:9c:19:8d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OEQxNEIxMTAvBgNVBAUTKDhCMjg1MDA1QURBMDA3M0UwQzA5NEI2REE2QTM4QkI1
MUZGRkExQTQwHhcNMjYwMTI5MDAyMDA0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdhYTdiNC1iMTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAniJHHr6bAwzzucLkzPq04FFNYHOi1RnJZxAEKiOjJmO5jw3fIryBYdBLGtvj
PDv9T6fnC5dT+VcSTOf5yAnkS3ey9C/ptWEsNjHasKRO5Xx7dr9mVXjbbsyZ1+Y5
5IeEAAjQkMc/b0ER3em1F2iwU/gktIwyVGdlcdYyEWZOcsO36CPFZLCYErZL7ggm
+/O1pxoHnVHVeyQZMpUr6a7XKsqVS1AFVDjAKb8RRL8Pd8d/cd3JyWT+OJAOTPj8
6srEfrAnttDp02V59YQJ+7irJCTDNLEz9CIheB17gItjFB5+uauSL6dFMJXAuExL
kRUxTWiGyw//2epS+ZSFVLVvLwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHWy9XZQ
QqLMNl0ddiF7pUbb2QGJMB8GA1UdIwQYMBaAFIsoUAWtoAc+DAlLbaaji7Uf/6Gk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDE0Qi85NEM4OThDQzhG
RTIxMUVDQThBRkVFNzhDNEY5QUUwMi9peWhRQmEyZ0J6NE1DVXR0cHFPTHRSX19v
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2l5aFFCYTJnQno0TUNVdHRwcU9MdFJfX29hUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEQxNEIvOTRDODk4Q0M4RkUyMTFFQ0E4QUZFRTc4QzRGOUFFMDIvN0U4NDQyQjY4
RkU1MTFFQzk0RDk4QzdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAK2/xQwDQYJKoZIhvcNAQELBQADggEBAKBHDEawqD2FH2oI
3KOgciXnFUeikzhTaI+jD8/mEM7tdIHgolhUArc84gyejIndCaaG06moHfDpVIz1
J3IUPNg/mZluL9jUDXg34YVuWQIX+zDujiE2YivSuW2C9gc/frbOy1oCjHI6whQr
e3wEN1Un54B1hEhkZUTXNkwzWVG3Ro2IW04+VYnsQo8sz1SWpIMYK7Cmo7obLByp
pMeDdINC/c9+aAKGx7/6diW0QpnUe89VCqwbGhmZHoLw7kKS7bvmaalRH6tdvQjf
btKeMcduiG0vrgupU6xvkmdH1F6XSmgMwZltnJJexdxBXlTM00avcFYi9egjdYGy
oRycGY0=
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:30:45 2026 by rpki-client