Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/751861108E2B11F0BFDA106EC4F9AE02.roa
File:                     751861108E2B11F0BFDA106EC4F9AE02.roa (raw, json)
Hash identifier:          8u77FLQY1MIG9qmUYZFhHyhqXirdAlPiL1vlCLzmLb4=
Subject key identifier:   FD:72:93:7B:7F:BE:13:73:E2:79:B9:E6:48:D9:20:0A:0F:E9:B9:83
Certificate issuer:       /CN=A919C068/serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999
Certificate serial:       67
Authority key identifier: D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/751861108E2B11F0BFDA106EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:56:09 +0000
ROA not before:           Sat 03 Jan 2026 07:24:34 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     23865
IP address blocks:        45.135.49.0/24 maxlen: 24
                          45.135.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl
                          rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 06:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C068, serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999
        Validity
            Not Before: Jan  3 07:24:34 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a596f9-169a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bc:fd:48:ae:43:16:8a:ac:4a:5e:1a:be:ff:
                    87:7b:62:00:ce:3a:22:a8:a9:9e:4f:eb:b5:7a:a7:
                    ce:f6:7a:e5:fa:19:2e:9e:89:80:c3:b0:ab:e7:93:
                    6e:0a:a4:bd:04:52:fa:43:4c:08:20:f7:cd:b2:0a:
                    c9:f6:69:4a:9d:b2:8d:c5:5f:80:c4:d2:9c:3a:6a:
                    d1:92:ca:1f:5d:c8:af:ce:f3:be:42:21:4b:e4:75:
                    71:b7:36:a5:5e:40:3c:b7:39:25:b9:63:62:e3:df:
                    2b:3f:07:2e:bb:f0:17:f0:7c:6c:fc:47:8b:b5:55:
                    0a:45:8a:27:5e:b5:be:e7:1d:cc:6c:d1:f3:09:c4:
                    6b:2f:1f:e8:4c:e2:f7:59:f3:22:60:d8:d9:09:07:
                    da:c0:90:36:2e:31:77:e6:82:81:52:7b:e5:96:b5:
                    45:5a:41:e0:16:96:2f:e5:a3:ad:8e:91:3e:06:ef:
                    5a:4f:00:90:e4:37:78:bb:d6:e9:b9:2e:df:03:b2:
                    9c:1d:8c:be:58:c8:06:67:69:46:d2:85:64:94:4b:
                    bd:d7:3d:df:8b:19:41:b5:9e:c8:14:92:9b:0a:1b:
                    e6:f9:23:27:86:4a:8b:86:92:52:34:c0:31:b3:13:
                    00:5a:33:99:ef:e3:3d:bb:94:b5:16:4b:b6:46:4e:
                    dd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:72:93:7B:7F:BE:13:73:E2:79:B9:E6:48:D9:20:0A:0F:E9:B9:83
            X509v3 Authority Key Identifier:
                keyid:D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/751861108E2B11F0BFDA106EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.49.0-45.135.50.255

    Signature Algorithm: sha256WithRSAEncryption
         1d:28:47:08:2f:93:82:57:4a:ad:f1:99:59:b0:b2:12:1c:69:
         4b:52:2c:55:3e:74:64:f9:3c:81:df:d5:21:8d:69:9d:1e:14:
         8d:89:79:ff:d2:5b:89:b8:d5:d5:af:63:c1:44:13:b1:a5:c5:
         c1:c1:84:60:6a:92:be:61:10:91:c8:15:93:e6:ae:dd:fb:c5:
         19:75:77:18:97:9d:41:50:66:d1:95:fb:f8:10:cd:dc:74:12:
         00:d0:a0:61:2f:f4:4d:ef:e8:c3:26:e9:63:6c:bc:94:0a:83:
         64:34:7e:ef:1d:5e:f4:35:58:05:c9:31:d4:d3:8f:96:52:a9:
         7e:4f:ba:b7:f9:70:7e:67:b1:0b:1f:c5:df:c1:0e:21:7f:50:
         12:b7:70:4d:d0:e8:ca:58:8e:0e:5c:20:d4:b8:5a:86:18:7e:
         d6:79:12:e7:74:6a:d9:82:88:ec:6a:8e:70:98:38:66:e7:59:
         9d:4b:f5:35:1b:31:37:67:8d:88:ba:39:b9:54:a1:8e:da:f4:
         f0:12:bf:ba:1f:3c:93:01:77:d6:b9:4c:96:98:a6:ef:f7:a2:
         e4:61:6e:a5:cc:80:8b:09:e0:34:c4:f0:eb:c4:27:c7:70:47:
         b5:75:bd:e3:c6:e7:d0:2e:3c:12:bc:06:2b:75:ca:fd:4c:bc:
         31:81:25:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:39:08 2026 by rpki-client