Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/68EBA63A48B911EFB80D9535C4F9AE02.roa
File:                     68EBA63A48B911EFB80D9535C4F9AE02.roa (raw, json)
Hash identifier:          iZo2C57Z9aeJt224wtweP1I+ZMSYFsBAndFJeCnjn1U=
Subject key identifier:   27:34:10:F6:70:28:F2:58:04:82:E8:72:02:64:B3:D2:48:7C:42:85
Certificate issuer:       /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial:       014D
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/68EBA63A48B911EFB80D9535C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:54:29 +0000
ROA not before:           Sat 17 Jan 2026 05:47:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     6453
IP address blocks:        192.8.33.0/24 maxlen: 24
                          192.8.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 04:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
        Validity
            Not Before: Jan 17 05:47:45 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a46f45-cbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:b9:3d:6e:ad:b4:e3:4e:63:c4:81:f4:ae:
                    bd:6d:90:80:54:e6:63:42:26:d8:9c:cf:15:65:90:
                    52:8c:e4:96:97:a8:e3:52:b9:31:21:7e:1e:28:62:
                    cc:44:d5:ab:4b:06:6c:24:27:05:ec:00:4d:08:67:
                    de:39:c3:0b:6b:6a:75:b1:ae:ca:84:cd:8e:82:50:
                    9f:29:6d:05:5b:6a:88:ad:79:20:5f:ae:0d:5b:db:
                    4b:e5:7a:38:a4:96:ab:29:4f:08:5d:12:58:7e:12:
                    74:1f:70:0e:87:d3:e9:d8:c5:29:f2:ef:2d:c5:e2:
                    46:e8:92:3a:62:2e:fc:f9:46:d6:fa:9a:ac:4e:65:
                    c7:f5:1c:65:f8:ed:1a:6f:35:79:fb:1a:13:66:ea:
                    d2:2f:85:ee:9e:3f:d0:ef:24:45:a4:58:c6:e6:17:
                    7a:89:15:20:07:f1:66:a6:3f:92:8f:24:7f:61:44:
                    fa:9b:25:18:57:e8:5a:09:1d:f0:19:34:3c:dc:df:
                    97:e8:af:4e:06:49:17:55:13:4d:a6:1d:fb:0c:c6:
                    8e:cc:e6:be:53:cf:87:ab:0a:ad:0c:61:a1:91:6b:
                    47:50:a4:8f:9e:21:cc:3d:46:c2:7a:79:49:68:96:
                    f1:61:84:42:d8:d6:13:f9:f5:f8:27:25:06:9a:95:
                    64:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:34:10:F6:70:28:F2:58:04:82:E8:72:02:64:B3:D2:48:7C:42:85
            X509v3 Authority Key Identifier:
                keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/68EBA63A48B911EFB80D9535C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.8.33.0/24
                  192.8.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:f6:a4:43:76:15:0c:6b:8d:8f:d9:eb:04:4c:58:54:59:6e:
         1b:78:1d:94:aa:1a:40:5b:a5:ae:0f:73:5d:40:e6:48:82:7f:
         b8:24:bc:d9:17:4c:46:12:c2:e3:c5:fc:2e:64:8e:8a:a8:dc:
         fd:3b:7d:dc:11:94:c8:38:5c:74:bd:5d:08:42:0d:08:39:0c:
         e7:65:95:0f:94:40:c2:1b:9b:03:a8:e6:13:42:ed:9a:83:08:
         8a:53:11:b8:ff:27:af:fa:06:ed:d3:9f:27:b6:de:ad:0d:3c:
         ac:70:04:ec:e4:a6:cf:37:f9:10:37:b3:e6:45:95:3d:65:a9:
         b6:f9:58:fa:21:35:d0:a9:ce:cd:95:e9:44:69:d7:5f:f4:81:
         c9:fc:19:27:e3:3d:3a:16:38:be:6a:5e:c6:cc:2f:f5:7c:e5:
         03:3a:ec:f8:d2:c1:b2:b6:b2:1b:8b:8a:81:b3:26:16:1c:56:
         57:60:2f:08:72:1d:58:6b:f4:8a:76:9e:98:9f:2b:26:57:62:
         bb:fa:55:75:2a:0f:50:42:9b:81:6a:33:c0:bb:1d:04:ae:ab:
         a7:10:89:b2:0a:b3:b9:b1:fd:08:c2:e5:5c:ea:ed:cb:ef:49:
         27:1a:76:9c:5f:56:60:62:fa:cc:0b:77:12:cd:da:af:bb:ce:
         10:46:f5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:27:10 2026 by rpki-client