Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/49589EFA2D9F11F1920FEBD19F833773.roa
File:                     49589EFA2D9F11F1920FEBD19F833773.roa (raw, json)
Hash identifier:          rB6mncEodXlTCyNlNE9b7egaGZ8DkJX6TOSzNBIB7dQ=
Subject key identifier:   90:35:FB:48:2D:E4:FD:B7:8A:8A:9A:75:07:F1:B8:20:66:E8:F6:C7
Certificate issuer:       /CN=A91795C3/serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F
Certificate serial:       05
Authority key identifier: 95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/49589EFA2D9F11F1920FEBD19F833773.roa
Signing time:             Wed 01 Apr 2026 07:51:19 +0000
ROA not before:           Wed 01 Apr 2026 07:51:19 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     133167
IP address blocks:        203.148.142.0/23 maxlen: 24
                          203.148.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91795C3, serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F
        Validity
            Not Before: Apr  1 07:51:19 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69ccce77-778d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:a3:d0:a2:ec:03:49:42:7e:31:ce:bc:35:
                    8d:d7:fb:4d:95:7b:71:ec:c2:ce:76:19:5f:55:5e:
                    86:d2:45:20:3c:51:3b:c3:d8:06:10:12:0a:40:c2:
                    ba:2b:6f:0f:0c:a7:81:ae:c1:2d:5c:c0:87:4f:7c:
                    cd:55:8c:78:e7:25:49:94:f8:22:47:f0:fd:d1:05:
                    bb:bd:4f:94:0a:cb:50:eb:35:e8:c9:30:0e:a7:7e:
                    e8:ee:c5:32:54:58:35:65:c4:de:0d:19:a6:7a:64:
                    13:2d:df:42:cc:54:4f:e4:e0:5a:f5:25:da:63:db:
                    d7:77:8f:80:19:8a:87:4d:ec:16:98:19:60:d0:06:
                    d5:5b:b1:ca:6a:f8:d6:98:7b:c7:28:a1:3a:78:60:
                    67:41:ab:dc:23:f9:4e:11:86:08:97:9a:f6:d0:95:
                    dc:e2:50:43:99:45:f4:79:dd:7e:7a:25:2d:b7:c7:
                    b8:53:9f:db:81:ec:87:04:c2:c9:62:60:2f:9b:4a:
                    f7:5f:c5:c4:53:d0:b8:63:cd:2d:54:05:ce:f2:16:
                    8c:83:20:d9:ea:0b:f8:0a:58:b6:1e:12:7a:7a:c1:
                    d5:76:0c:f0:19:e2:8f:1e:dd:e4:8d:32:7d:98:e4:
                    cc:d9:03:3f:d8:81:61:58:04:90:ca:87:a8:48:9c:
                    9f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:35:FB:48:2D:E4:FD:B7:8A:8A:9A:75:07:F1:B8:20:66:E8:F6:C7
            X509v3 Authority Key Identifier:
                keyid:95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/49589EFA2D9F11F1920FEBD19F833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.148.142.0/23
                  203.148.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:e6:01:23:9e:80:ed:a8:9b:b4:76:ee:9c:ed:f1:bc:3e:17:
         e5:2d:02:7a:65:11:25:98:2a:9c:3e:ec:67:a4:61:89:88:10:
         8a:e9:f7:de:09:97:db:f2:9e:ef:80:e7:5e:b9:7b:6e:c0:ff:
         8c:25:52:20:9c:2a:b1:ce:ad:85:fa:ab:c0:b9:f7:8e:e5:e7:
         4b:5b:79:dc:8c:48:50:70:14:a6:0d:1d:b2:ac:0f:26:c9:cb:
         05:b7:01:b6:25:a2:9d:2d:22:18:f9:59:99:59:f9:54:fa:ef:
         c5:b2:72:d1:1d:25:20:67:52:8f:50:57:33:8a:15:03:e8:48:
         a1:cf:01:af:c6:ab:0e:c1:29:6f:ef:87:20:97:92:3c:28:5f:
         40:a8:a6:76:4b:ff:3e:f6:00:21:cb:d8:18:7f:1f:6c:4f:4d:
         68:3f:6c:07:ba:23:ed:90:8c:ca:34:9b:88:96:57:d6:ab:70:
         3a:14:7b:91:4e:bd:34:29:ff:dc:df:7d:25:62:d3:68:60:a5:
         c7:2d:08:d1:1d:44:c5:68:da:b5:02:c4:4e:22:76:01:de:bd:
         e9:90:ff:00:ea:37:d8:68:8f:29:60:dd:c6:13:89:db:03:cd:
         49:c7:4a:03:a5:fb:8b:4c:54:c1:0b:2f:ff:78:92:28:ec:70:
         83:d4:26:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:22:38 2026 by rpki-client