Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/B8E35E8AD8C811F08AAE626967D3641D.roa
File:                     B8E35E8AD8C811F08AAE626967D3641D.roa (raw, json)
Hash identifier:          wByl5sWHW/uk2KewJI/ZeESKskm3ECQG9nciHeh8yK4=
Subject key identifier:   DA:04:6F:F2:4C:79:C3:29:1A:FF:67:50:6F:2E:4D:2B:9F:98:10:35
Certificate issuer:       /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Certificate serial:       51
Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/B8E35E8AD8C811F08AAE626967D3641D.roa
Signing time:             Fri 06 Mar 2026 12:59:15 +0000
ROA not before:           Fri 06 Mar 2026 12:59:15 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     36007
IP address blocks:        79.108.224.0/24 maxlen: 24
                          79.108.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
                          rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 23:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
        Validity
            Not Before: Mar  6 12:59:15 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69aacfa2-88f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d6:7d:9b:4b:ed:0e:6b:24:9c:b2:2a:44:f2:
                    5a:11:17:61:99:7f:ec:ac:f5:7e:72:a9:c1:45:0b:
                    53:0e:90:21:3b:ee:8f:e2:ca:72:0f:6f:25:9d:b2:
                    b2:a5:2f:2b:49:3a:47:cb:2b:3c:69:5a:af:cf:da:
                    c4:8b:6f:d3:21:aa:a5:2e:a6:c4:ae:d0:91:46:a6:
                    a3:e1:d4:9d:1a:e9:02:c0:f2:f2:43:cf:fe:c4:ad:
                    98:a0:82:de:79:7d:2b:3d:87:2d:10:ec:ed:a2:60:
                    44:4f:d6:d9:4f:0c:78:85:ed:46:a9:9c:76:97:c7:
                    7e:37:e1:3d:82:5d:b3:94:11:79:8c:b7:0e:1f:73:
                    50:39:9c:9c:37:62:71:2c:8c:35:72:30:42:30:52:
                    6b:f8:30:c5:de:4b:71:62:9a:c1:7f:76:b8:90:7e:
                    ea:59:5e:ea:ae:c2:64:31:4f:6a:4c:37:b9:d3:ee:
                    9d:94:a8:9c:36:72:a0:2d:32:be:7a:46:f0:54:88:
                    d8:d0:65:08:c3:ce:76:60:20:41:0d:05:17:8c:18:
                    03:fd:0e:c2:d7:07:4d:22:9f:04:e6:7f:77:a0:98:
                    6b:67:c7:c6:15:62:42:7e:5b:a0:2e:8b:da:cb:c1:
                    a2:f4:fa:a8:3e:52:7f:3a:76:34:7e:ab:94:94:fd:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:04:6F:F2:4C:79:C3:29:1A:FF:67:50:6F:2E:4D:2B:9F:98:10:35
            X509v3 Authority Key Identifier:
                keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/B8E35E8AD8C811F08AAE626967D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.108.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:d0:23:01:77:14:d8:bc:12:fe:0a:08:d2:9b:fd:01:f1:41:
         d6:0f:86:9b:0d:bb:a9:4e:14:f6:2a:e1:0b:af:aa:75:ba:01:
         15:d9:38:f8:c3:1b:3a:fb:46:66:fb:84:5a:28:29:6c:11:91:
         36:d9:30:24:11:38:96:d0:85:e9:91:e0:48:23:80:8b:12:0f:
         05:fa:76:d0:9e:35:b5:36:9d:0d:d6:a6:64:c0:06:4f:dd:45:
         4b:cb:b2:ff:5a:f9:b3:fc:34:2e:ab:6e:87:28:12:3b:ba:f4:
         de:bd:d4:f8:8f:6e:55:ce:0f:05:7e:17:3f:af:06:5d:af:5e:
         76:f9:d5:50:44:08:1b:d0:b2:a9:da:4b:b8:28:13:7e:fc:c8:
         ba:3e:63:41:34:a9:7a:25:c3:b8:5c:ab:49:9a:83:11:55:5b:
         c2:30:3b:5e:f5:57:cd:81:cc:a3:3c:ad:d1:fa:99:6b:35:37:
         3d:eb:e7:18:cb:ae:44:9a:73:6b:95:ea:c5:ee:5c:3d:2a:91:
         65:9c:9d:cc:d0:5b:30:c4:dd:93:c0:fd:f2:fc:bc:ba:74:ca:
         04:6f:36:2e:85:82:87:6d:68:1e:8a:30:26:e3:b0:4d:d6:18:
         d6:ef:e3:9c:b9:c9:da:11:ec:1a:2a:d9:d6:2b:3b:de:07:c5:
         05:6e:98:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 7 16:14:56 2026 by rpki-client