Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/82C395EE774811F1801EADB45DA30FBC.roa
File:                     82C395EE774811F1801EADB45DA30FBC.roa (raw, json)
Hash identifier:          BQd8XglJvUSBxzaCM0mJw6hZt6pmwUg9idBpdBZ3C/E=
Subject key identifier:   99:61:A6:5F:9E:02:48:EE:DB:BF:11:19:C7:49:06:A1:B3:06:97:43
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       28EB
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/82C395EE774811F1801EADB45DA30FBC.roa
Signing time:             Sat 04 Jul 2026 01:34:34 +0000
ROA not before:           Sat 04 Jul 2026 01:34:34 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     135592
IP address blocks:        203.213.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10475 (0x28eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Jul  4 01:34:34 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a48632a-030f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:7c:f6:65:77:26:67:0a:14:8e:20:92:b6:
                    32:ad:da:ab:1f:dd:9e:92:8a:d5:7c:f4:77:12:61:
                    9b:26:26:b5:ec:d1:38:53:9b:b9:e2:bd:0d:41:7b:
                    a1:da:24:0f:33:94:49:23:53:16:bd:b2:4d:9a:93:
                    49:f2:a2:6f:ab:3f:6e:ba:3f:28:57:7f:c9:2d:49:
                    3a:7e:76:77:d4:20:3d:14:41:26:6e:bd:f0:47:7d:
                    6e:52:70:8f:29:18:8d:81:e7:d6:43:dd:51:84:cf:
                    42:16:39:9b:bb:40:be:b0:0f:50:9e:68:de:09:8b:
                    fc:8f:57:ad:37:33:e1:ce:32:8a:4a:8d:47:d7:cd:
                    ea:0d:dd:14:33:80:2f:87:7a:b4:7c:d9:1a:85:1b:
                    68:12:eb:7c:0a:59:eb:a4:b2:0b:0b:9f:a5:ea:98:
                    c2:13:ba:34:f2:99:05:04:7f:0b:cb:b8:8b:9d:c4:
                    dd:50:db:e1:0c:24:0b:53:a6:af:da:7c:7d:75:f7:
                    ca:ca:34:26:13:de:84:7b:bb:1f:ed:77:8a:29:0d:
                    60:22:fc:52:b7:e3:4a:77:df:d2:f6:20:5c:ac:66:
                    08:1c:9f:11:9c:91:ab:93:89:5b:7b:0c:3a:51:d6:
                    12:3b:22:43:8d:07:f7:93:2f:b7:78:01:16:f8:58:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:61:A6:5F:9E:02:48:EE:DB:BF:11:19:C7:49:06:A1:B3:06:97:43
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/82C395EE774811F1801EADB45DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.213.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:0f:bc:df:b1:68:75:ab:47:61:2b:95:0e:73:b1:54:7b:d1:
         4d:e2:20:14:c7:65:cf:60:78:10:50:b8:19:98:1d:0e:82:5e:
         89:e7:0f:3c:c9:13:05:b8:2a:1e:77:26:57:09:e4:77:e1:c7:
         7f:37:ae:d0:73:1c:92:81:be:76:d5:00:0d:7d:a0:df:46:dd:
         16:c7:38:0f:63:86:90:f7:30:b3:30:a3:b3:b8:4f:37:9f:cc:
         24:fb:1a:1a:d3:6e:47:7c:90:e8:9e:53:32:53:e3:fe:bd:a4:
         d0:65:e8:44:ad:ba:24:e5:47:9a:ee:d7:87:dd:59:a8:7d:53:
         f7:1d:d0:a7:d9:07:f4:b1:af:08:6d:a2:ea:a4:6e:f6:e4:d4:
         09:48:06:ba:e9:2d:30:56:7b:3e:42:94:af:66:71:48:42:0c:
         d4:8f:de:31:2a:f5:4d:26:d5:bc:03:e1:6d:7a:36:f1:7f:1d:
         b4:91:52:97:1c:03:4f:16:5d:b4:21:31:c0:5c:0b:9c:86:0d:
         dd:5d:45:80:18:90:e1:a2:d8:3b:c0:a3:08:f4:f5:c1:44:22:
         db:d5:94:b6:f3:0e:69:0d:86:b0:ae:34:2d:c4:e4:5a:91:6a:
         94:d5:17:98:02:ed:98:17:25:77:c8:63:7c:e0:77:6b:1b:84:
         b5:11:b4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:19:01 2026 by rpki-client