Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/7D13B7AEF0DA11F0923E16B83C6F56BC.roa
File:                     7D13B7AEF0DA11F0923E16B83C6F56BC.roa (raw, json)
Hash identifier:          YDKbI+qGB5kDjPGZ3teyR0K9FvALnCh7sEqUIG88/U0=
Subject key identifier:   71:7B:BD:8D:7A:73:EC:C4:1B:CE:3F:09:79:97:71:EF:3C:DE:62:70
Certificate issuer:       /CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19
Certificate serial:       024E
Authority key identifier: 98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/7D13B7AEF0DA11F0923E16B83C6F56BC.roa
Signing time:             Mon 02 Mar 2026 11:28:30 +0000
ROA not before:           Thu 19 Feb 2026 01:22:53 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     2764
IP address blocks:        203.22.205.0/24 maxlen: 24
                          203.30.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl
                          rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 01:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145E67, serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19
        Validity
            Not Before: Feb 19 01:22:53 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a5745e-976f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:60:0c:26:df:35:ee:c1:9c:b9:4b:40:b5:57:
                    ae:94:16:e3:1b:c7:3c:da:3a:14:c0:72:3c:62:32:
                    66:36:ea:22:90:8c:0e:0d:0e:91:32:06:22:22:ca:
                    81:85:76:a4:e2:d1:4b:1d:0c:e4:3e:39:5b:a6:f8:
                    d2:18:4d:42:f4:58:bf:99:84:3a:ad:7c:c7:17:5b:
                    b5:40:ae:aa:cb:c4:d1:c9:a3:99:a5:86:ab:b5:b8:
                    12:a2:7c:ba:da:4d:66:a9:f0:96:bc:33:69:af:5a:
                    29:6b:eb:47:7e:29:2d:5f:6a:9f:e4:f8:c3:80:d1:
                    1b:3d:b1:97:b5:d8:61:42:70:aa:e9:4d:c7:92:f6:
                    a8:c2:1b:b1:20:b0:4c:31:e9:2c:95:10:31:4a:a3:
                    84:82:d6:b4:ca:ab:9a:b1:18:d5:91:71:5f:c1:e3:
                    7c:c4:d5:d3:76:63:63:9a:b0:90:9a:07:34:8c:b6:
                    41:cb:9d:32:8d:3c:4b:37:1b:e3:de:7a:a6:3b:28:
                    ca:7b:08:36:d4:e0:57:96:9f:5a:d8:20:8f:a5:59:
                    16:12:ee:48:82:0d:51:62:8b:55:dd:b0:e7:18:c6:
                    a0:ab:71:0b:7f:eb:13:ce:dd:dd:2b:d0:86:1a:c8:
                    d9:36:e6:46:d4:74:ad:f4:b6:72:15:28:40:a8:61:
                    e7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7B:BD:8D:7A:73:EC:C4:1B:CE:3F:09:79:97:71:EF:3C:DE:62:70
            X509v3 Authority Key Identifier:
                keyid:98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/7D13B7AEF0DA11F0923E16B83C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.22.205.0/24
                  203.30.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:8b:70:fe:57:4c:64:92:78:cf:19:71:d5:c3:18:98:ad:36:
         a1:d7:62:5e:73:59:51:9c:22:c5:c2:a8:2d:5c:34:82:93:2b:
         20:08:8c:67:ab:44:24:2a:bf:b8:7c:47:e8:8d:75:aa:04:a1:
         94:ad:b8:aa:e1:25:37:3b:b9:55:2f:b3:d1:e4:99:00:b7:ce:
         52:0d:e7:be:9b:a6:de:a4:93:2c:97:4b:67:36:73:e2:14:f5:
         31:52:8d:8d:20:54:d7:8b:4c:45:12:5e:6e:6b:f1:b5:97:9b:
         24:e4:af:11:ec:48:14:8f:9e:52:cc:6b:ce:61:88:36:0e:22:
         db:e9:aa:60:1b:dc:e3:ee:4a:24:07:34:7e:75:d7:64:eb:ab:
         2f:3b:6e:73:13:0f:9a:19:3a:95:3c:c5:0e:b9:89:20:9d:87:
         2a:45:06:7b:91:3e:69:6c:52:18:15:cb:9d:42:e5:fe:c4:48:
         ac:85:f7:7f:a2:d3:7c:3b:2f:54:5e:08:9c:9f:8c:f9:72:62:
         44:c8:8c:89:db:a7:0e:89:5a:4b:74:ca:8f:5f:b0:c8:1a:70:
         b7:d5:4c:04:11:08:d3:15:1c:97:93:95:e4:13:8d:5e:ee:70:
         91:ee:0e:10:59:9e:17:49:fb:15:d6:39:28:4c:c9:00:ba:b6:
         98:b3:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:31 2026 by rpki-client