Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/826A614C16D911F183D175C0323D8C67.roa
File:                     826A614C16D911F183D175C0323D8C67.roa (raw, json)
Hash identifier:          WAVSSah1BKUgNz+36z0DnzadBVBuWpEBpNJD7iU2ZRU=
Subject key identifier:   31:C0:0F:29:4A:69:CB:16:B8:59:60:63:AF:7F:3F:42:66:2C:BF:D5
Certificate issuer:       /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial:       0326
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/826A614C16D911F183D175C0323D8C67.roa
Signing time:             Tue 03 Mar 2026 08:18:08 +0000
ROA not before:           Tue 03 Mar 2026 08:18:08 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     834
IP address blocks:        203.33.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
                          rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Mar 2026 00:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 806 (0x326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
        Validity
            Not Before: Mar  3 08:18:08 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a69940-29a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8b:6e:0a:1e:b9:5d:c8:86:c5:a5:37:b7:85:
                    d9:9c:c5:35:73:95:95:07:11:40:6b:80:da:98:2b:
                    46:15:39:30:9c:95:99:c8:36:99:4a:3b:8d:f1:e3:
                    ad:44:59:9a:36:0e:b7:a4:d4:06:f3:c2:28:ba:72:
                    74:e8:96:aa:22:5a:4e:d8:2a:61:a6:61:54:30:c8:
                    be:6d:53:f1:55:f9:35:b1:6a:9d:a0:f5:60:4e:7d:
                    69:9b:4b:9a:9a:2f:24:0a:e7:6f:5a:5a:7c:8a:c4:
                    18:3f:a9:b6:b5:57:20:a6:5a:da:7c:77:2f:f1:fb:
                    12:c2:2a:6c:83:c8:c8:c6:4a:a2:21:1f:19:a0:d0:
                    db:b3:dc:e3:61:0b:18:d0:1b:73:5b:16:77:1c:a5:
                    b8:0c:d2:e4:8b:34:b4:34:35:63:85:86:1d:46:2e:
                    b6:58:e8:04:ac:8d:92:27:bb:50:58:1d:f7:9e:73:
                    71:fc:97:0a:cc:c0:a7:61:83:df:c9:43:fb:de:95:
                    18:23:dd:15:be:c3:f8:5c:16:bb:2b:3b:f7:4d:8c:
                    9d:09:a4:a6:7e:25:5e:7e:c0:e3:9e:ff:d7:34:ed:
                    7b:2c:75:79:ab:fd:25:9b:14:9f:be:71:bb:58:74:
                    37:19:05:fd:a9:f7:7c:43:83:89:90:bb:ab:02:a1:
                    08:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C0:0F:29:4A:69:CB:16:B8:59:60:63:AF:7F:3F:42:66:2C:BF:D5
            X509v3 Authority Key Identifier:
                keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/826A614C16D911F183D175C0323D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.33.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:47:c5:cb:38:42:98:80:c3:56:94:3b:28:e1:ca:7f:24:8b:
         9c:f6:8d:8a:8a:7c:2a:a9:d8:26:ef:43:e2:c6:c6:08:16:a7:
         e2:9e:91:76:a7:06:1c:a3:aa:49:f8:7a:2f:0b:c7:67:fc:6e:
         7e:6c:ae:7d:be:fa:56:3d:f9:46:0f:37:6a:03:fc:8c:dc:ff:
         7a:bf:77:a2:6e:6d:0a:82:b3:f9:85:e5:54:ab:d3:40:bb:99:
         56:83:3b:8f:72:df:7d:9b:64:ff:36:e5:34:cf:d6:1a:bc:5c:
         6d:53:bf:a1:b3:5e:90:d9:c9:42:16:cc:ef:03:61:0b:04:1d:
         4f:05:d5:4d:8c:1c:d9:58:ed:56:be:c4:a6:ab:3a:e8:8d:f6:
         8b:94:79:f5:37:fc:b0:35:31:80:4e:00:ad:3d:1e:27:f8:66:
         db:bb:a6:1b:65:e4:d0:d3:60:1a:84:09:e8:d8:08:5f:78:35:
         60:45:89:b0:f1:a9:4a:ff:55:6c:50:8e:43:7f:e3:65:3a:b0:
         ff:64:1c:23:da:66:20:cb:e5:e6:df:1b:4b:79:8d:88:08:a2:
         0a:fb:5d:d5:40:f3:5e:6d:54:f2:bd:fc:3a:63:d0:52:67:fd:
         38:13:8f:55:6c:95:6d:fe:75:8d:e4:2f:75:ad:0b:b2:32:7e:
         90:11:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 12:58:01 2026 by rpki-client