Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/08B79AD09C4111F0A9483031C4F9AE02.roa
File:                     08B79AD09C4111F0A9483031C4F9AE02.roa (raw, json)
Hash identifier:          ubB2L+A+WYJ8AjqCrJi8J5YRaDtXq+7jruwojcEkTbc=
Subject key identifier:   36:6A:F6:D6:65:A5:9C:0A:C0:4E:A0:1F:DC:D5:C1:C3:D7:8C:A7:C2
Certificate issuer:       /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Certificate serial:       7E
Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/08B79AD09C4111F0A9483031C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:16:37 +0000
ROA not before:           Mon 27 Oct 2025 22:30:09 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     17728
IP address blocks:        203.28.195.0/24 maxlen: 24
                          203.32.55.0/24 maxlen: 24
                          203.34.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
                          rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 06:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
        Validity
            Not Before: Oct 27 22:30:09 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a58db5-2f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:fa:ee:52:fe:c8:1b:5f:7b:69:f2:de:f8:
                    23:ad:c1:42:93:f6:84:83:23:48:29:6c:7a:2f:57:
                    37:f5:1c:e9:05:6c:a7:86:66:c8:0b:1e:fd:7e:09:
                    c2:1c:b1:e0:dd:f4:ac:d6:66:ef:df:81:bc:c4:98:
                    87:dc:5c:c4:ad:a1:34:37:28:42:ab:11:49:29:9c:
                    75:8b:ee:5e:aa:df:0b:2e:4e:bc:11:f7:77:b0:74:
                    a4:98:8e:52:f5:02:68:18:6b:04:ec:0d:71:e9:6c:
                    e1:89:e8:c1:0f:68:d0:3b:c0:ea:60:07:5d:c8:b9:
                    32:87:fd:43:af:ed:b5:3f:e5:4e:f6:aa:61:8f:ca:
                    f8:7f:b3:e1:7e:8a:00:22:c6:60:8d:5b:18:92:a1:
                    08:72:24:b6:14:e9:aa:c4:66:d0:91:59:d3:fc:9e:
                    ab:61:62:9e:19:97:31:1f:7b:11:8d:06:7d:7e:52:
                    bb:7b:9f:0b:02:ed:1c:8a:52:3f:cf:ae:68:d0:db:
                    c0:21:6b:c2:30:e6:f6:ca:0e:2d:0e:cc:fd:05:ff:
                    80:8a:26:a6:dd:7a:87:d1:30:49:04:be:06:92:5d:
                    ea:33:a1:09:6d:ae:c6:57:6b:d5:91:c6:4a:b6:01:
                    c4:4c:09:87:0a:fb:05:d0:1a:c7:ce:fb:16:80:2d:
                    ce:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6A:F6:D6:65:A5:9C:0A:C0:4E:A0:1F:DC:D5:C1:C3:D7:8C:A7:C2
            X509v3 Authority Key Identifier:
                keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/08B79AD09C4111F0A9483031C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.28.195.0/24
                  203.32.55.0/24
                  203.34.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:76:8e:90:2a:bb:7a:ca:59:d1:fe:4b:ee:bf:ef:d8:46:0d:
         6f:8b:ba:fb:6d:dc:d7:c0:42:9e:22:0d:ba:f6:e3:36:ad:70:
         c3:6c:b0:c8:dd:5c:df:77:c4:4a:6e:4f:f6:a3:a7:9b:7d:88:
         89:71:84:85:81:5d:0f:86:e5:3e:81:71:75:ad:23:79:81:66:
         0b:12:4c:ad:cf:85:4d:e3:fc:04:fc:4c:10:5b:ba:92:34:74:
         1d:88:e9:19:c2:cd:89:29:42:f4:42:78:66:02:68:32:8b:a6:
         23:3c:82:c1:92:f7:9e:b3:d7:7d:f3:6a:00:5f:3a:d8:80:ef:
         ab:9b:7c:cc:48:22:ca:65:40:3a:34:80:e6:76:59:98:e6:12:
         08:71:b9:8b:6f:34:8b:00:0f:d6:0f:f9:03:3e:89:6b:8e:61:
         71:e2:64:96:e0:69:39:99:c3:3a:a9:ee:37:88:71:3b:12:38:
         a7:28:e3:b9:68:f2:96:8b:fb:83:62:01:b8:75:f0:b1:25:da:
         02:d9:f9:7c:b7:aa:28:80:35:ef:57:f6:97:6a:05:2e:40:76:
         5e:27:c3:04:47:31:01:f7:a7:1c:d1:ce:96:51:fe:41:f3:06:
         c4:33:9c:0e:4d:f4:bb:3b:15:14:d8:ae:01:34:c7:2f:e5:7e:
         0f:f3:49:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 15:01:58 2026 by rpki-client