Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/1484B210B52A11F0ADCFA344C4F9AE02.roa
File:                     1484B210B52A11F0ADCFA344C4F9AE02.roa (raw, json)
Hash identifier:          EIqiZeCFMo/5y7SgmnTdlRVO6WjP2m2LXAFpf+jzHGI=
Subject key identifier:   14:87:B7:09:E5:A4:6E:8A:8C:8E:00:5B:EB:CA:91:5A:7F:23:42:91
Certificate issuer:       /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Certificate serial:       01A2
Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/1484B210B52A11F0ADCFA344C4F9AE02.roa
Signing time:             Fri 27 Mar 2026 04:39:35 +0000
ROA not before:           Fri 27 Mar 2026 04:39:35 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     154324
IP address blocks:        202.47.134.0/24 maxlen: 24
                          202.47.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
                          rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8DD1, serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
        Validity
            Not Before: Mar 27 04:39:35 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c60a07-2b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:30:10:02:df:6c:8c:3c:35:af:11:fb:30:
                    87:04:46:96:05:71:02:5f:f2:ff:c8:51:6c:ff:16:
                    51:9a:cf:5b:ee:4d:93:2e:0d:51:0a:84:d7:ed:f7:
                    d5:03:ce:f8:e7:77:54:76:01:3d:1a:5f:e7:4b:f1:
                    6e:67:71:d9:8d:a9:ca:16:77:9c:56:1e:8b:da:73:
                    41:5e:91:1c:8e:2d:96:85:61:b9:b7:22:be:ef:da:
                    d9:0a:b2:24:ab:b9:bd:e7:a3:da:23:01:80:28:f4:
                    ee:bd:ce:a8:0e:db:0a:39:4d:ae:dd:b5:e4:b3:c5:
                    15:2b:bd:74:d6:b8:5b:bb:bb:1b:04:3b:2a:72:51:
                    d0:4c:c5:ab:86:71:e5:91:50:45:87:1b:bf:35:9b:
                    37:ce:12:cb:b4:dc:d8:89:c1:b4:45:3e:82:d2:ac:
                    80:fa:03:a0:d0:af:bb:c6:c4:37:ac:10:88:d9:9b:
                    63:53:ff:a5:4b:3a:21:75:ac:01:4a:e7:7a:87:fc:
                    3a:3a:97:38:95:c2:1f:d4:18:47:e3:05:75:58:e8:
                    52:2c:ec:39:ef:5a:75:22:c2:49:3a:f2:ad:0a:9c:
                    1f:11:e6:a4:ee:9f:53:d0:2d:2d:ec:c4:d6:de:1e:
                    48:c8:aa:cd:f8:50:d1:e2:61:55:54:45:df:c9:8d:
                    52:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:87:B7:09:E5:A4:6E:8A:8C:8E:00:5B:EB:CA:91:5A:7F:23:42:91
            X509v3 Authority Key Identifier:
                keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/1484B210B52A11F0ADCFA344C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:f4:89:40:5b:11:ac:35:7b:36:ed:f6:7e:98:2b:61:04:a2:
         b4:98:61:34:f7:4d:3c:51:ee:a7:d5:26:85:03:73:ab:48:2a:
         dd:cf:d2:5c:0a:07:21:66:52:ab:83:f4:49:2e:97:1f:c9:08:
         47:78:8d:4c:a1:21:78:b5:25:82:3e:e1:0f:f9:49:f9:c6:f4:
         a1:f2:f0:04:b2:53:b3:3d:3e:40:f6:96:99:22:3e:83:14:01:
         89:5b:67:e6:5a:28:06:89:eb:d1:5b:9e:81:0c:48:e6:02:30:
         1d:15:62:5e:68:60:b1:e2:f2:23:3d:fe:a9:e9:2c:3b:a6:92:
         53:cd:49:c3:bc:80:2c:75:ad:0b:a1:f3:a9:66:7c:67:1b:e7:
         1e:d1:1b:11:b0:69:da:53:89:b5:26:1b:2f:e3:cb:af:98:39:
         b6:59:ee:67:ab:fe:3f:e2:73:4a:0a:b0:2c:28:0f:ca:e4:c7:
         75:db:6e:e2:c5:f5:2b:dd:5f:f5:40:a6:8c:1c:0a:21:a6:90:
         d4:88:15:11:a8:0c:59:a3:1c:77:a5:9c:e8:de:1f:52:70:f5:
         f7:3a:ae:f0:a4:14:4d:6a:aa:55:31:65:81:8d:af:81:81:21:
         02:2a:1d:ec:e6:04:92:83:0c:18:42:0a:80:06:33:1f:ed:ed:
         03:ae:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:17:34 2026 by rpki-client