Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/A26A71686AF811F084208830C4F9AE02.roa
File:                     A26A71686AF811F084208830C4F9AE02.roa (raw, json)
Hash identifier:          7aRi0Wkh/Rnb93CuJ1jZNiMVePq6BPK6I6aGTZWPAwo=
Subject key identifier:   7B:79:9E:42:BB:34:C4:F6:A9:DF:23:C4:49:E3:4E:A3:F7:E9:07:E4
Certificate issuer:       /CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Certificate serial:       06D5
Authority key identifier: 58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/A26A71686AF811F084208830C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:34:44 +0000
ROA not before:           Sun 27 Jul 2025 14:47:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     32135
IP address blocks:        202.8.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Mar 2026 21:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1749 (0x6d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F185F, serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
        Validity
            Not Before: Jul 27 14:47:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a43264-1087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:68:13:d9:02:c6:68:e4:2c:5a:03:20:5a:a9:
                    e6:dc:9a:14:a6:91:d7:1e:95:1d:00:f0:00:2b:25:
                    bc:a6:00:d8:e5:3f:e3:aa:65:11:1f:51:e1:1d:bc:
                    58:32:83:85:c2:76:eb:1d:eb:43:3a:91:4b:86:14:
                    85:60:9b:b6:cc:65:49:b9:85:a3:11:52:92:5d:52:
                    79:35:47:93:45:24:ce:7e:71:8a:4a:d2:82:4b:75:
                    c7:bb:4e:1a:ba:7e:11:58:1d:f0:e7:5b:65:2a:07:
                    00:76:69:cb:9b:7f:78:91:92:53:94:5b:a5:f1:09:
                    c9:5d:5f:32:41:bb:e9:99:a9:24:25:6e:05:0a:d1:
                    6c:4f:4c:03:89:ef:3d:33:7b:4d:91:c8:3e:2c:f1:
                    42:22:f2:15:1b:be:7c:f3:6b:4f:0d:46:fb:fa:43:
                    56:48:89:43:5f:0e:ea:79:ae:ab:b4:c9:62:50:7d:
                    01:73:12:c5:96:ad:53:78:92:a2:9f:3b:27:49:98:
                    ce:b1:7d:23:08:20:00:b6:d4:ee:80:53:68:bd:92:
                    4a:d4:2f:14:58:4c:24:7e:09:b5:86:d7:3b:12:ab:
                    06:dd:29:6d:18:f9:6b:46:9c:92:90:6b:8f:41:4e:
                    98:46:ff:6d:e6:5f:21:3e:87:39:fe:e3:7c:c1:ef:
                    a9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:79:9E:42:BB:34:C4:F6:A9:DF:23:C4:49:E3:4E:A3:F7:E9:07:E4
            X509v3 Authority Key Identifier:
                keyid:58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/A26A71686AF811F084208830C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.8.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:a2:0a:d5:f1:4b:0e:e1:60:a3:49:51:1b:fe:3c:52:eb:cc:
         bd:0f:11:be:97:5f:88:9c:6a:fe:c5:14:8d:94:54:30:9c:be:
         9a:cd:7f:b2:04:2c:21:af:8e:f6:65:7a:fc:2d:f7:71:19:4e:
         00:0a:f5:ef:a9:ab:a7:71:00:a4:76:6e:e6:e2:90:88:ab:3b:
         0b:89:dc:00:5c:7e:e4:b9:04:b7:cd:c2:17:d1:03:f5:e8:c2:
         aa:ff:86:6e:55:e6:b7:7f:0b:ad:85:30:f5:fd:92:2e:60:bf:
         90:df:cd:79:05:0f:90:68:33:51:fe:71:7a:33:42:d6:27:70:
         9b:cd:1c:75:2c:bd:8d:1b:e5:f9:5a:1f:6e:c3:17:fa:49:2c:
         22:0e:3b:a5:f8:ae:e6:57:a5:0f:a9:6e:e0:e2:66:18:4f:16:
         d6:3e:12:db:8e:47:dd:12:03:8f:76:01:cd:88:74:5f:d2:58:
         bf:9a:aa:f8:1b:dd:af:fb:cd:7e:30:bf:f2:6f:58:91:4b:fa:
         5d:27:59:8b:df:78:cc:cd:1f:25:22:84:99:86:5a:43:51:f1:
         b8:09:6e:c3:88:cc:86:7b:8b:b2:ad:db:e9:a4:1c:f3:35:ab:
         40:69:74:90:ff:52:f3:cb:25:6b:3e:df:ca:f5:39:e2:38:62:
         00:9c:2c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 20:32:07 2026 by rpki-client