Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3F780E2A179211ECB303FF58C4F9AE02.roa
File:                     3F780E2A179211ECB303FF58C4F9AE02.roa (raw, json)
Hash identifier:          E2OVt2t2RwL7eW2IIag4jKtOfPTzQfuNebzivsrFSS4=
Subject key identifier:   36:63:C9:FD:3B:D0:D3:39:4A:97:FE:8D:BE:D1:4B:E5:AA:E3:72:CA
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       071B
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3F780E2A179211ECB303FF58C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 23:44:17 +0000
ROA not before:           Wed 02 Sep 2026 23:44:17 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     56307
IP address blocks:        203.202.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 22:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1819 (0x71b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Sep  2 23:44:17 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a98b4d1-08e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4c:83:5c:f7:2f:d3:bf:d5:c7:14:6d:a5:6f:
                    f6:57:5b:c2:55:5b:fd:ad:bf:79:57:1a:d8:10:e4:
                    af:b4:5a:51:1a:8a:95:4c:79:4b:20:28:b4:08:46:
                    cc:7b:b4:8d:87:93:af:a8:5d:54:f8:f7:fb:71:24:
                    d2:93:42:20:1f:cf:1d:55:a4:7e:51:95:6d:15:cc:
                    ba:84:34:3b:7a:56:bb:3e:6d:d4:25:b4:40:88:63:
                    fb:a2:1e:b5:3b:67:c0:79:c2:ce:3e:05:95:5a:11:
                    66:c9:5f:be:08:c7:21:05:4f:4c:f0:74:10:a2:8a:
                    1e:48:a7:a8:d1:0a:c2:92:10:52:f2:73:5b:50:8e:
                    b4:bb:38:c8:8d:eb:6b:9a:f6:52:50:85:43:95:97:
                    a9:79:8e:4f:29:02:56:4b:d5:1d:45:ea:43:18:b4:
                    3c:50:7d:ab:5f:17:82:ea:94:ed:2e:d7:f0:7d:ac:
                    b5:37:70:98:42:69:d2:51:57:d4:c6:53:26:81:bb:
                    19:16:35:f1:fc:11:f1:2f:2e:46:4a:a2:63:4e:21:
                    a7:3d:d2:24:fe:21:a1:55:7d:f7:cd:5a:01:ff:8f:
                    0e:61:a0:7c:00:a8:35:37:e5:f8:55:08:f6:45:34:
                    5d:1e:fa:db:62:c2:7b:d5:30:74:9c:15:4a:95:7a:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:63:C9:FD:3B:D0:D3:39:4A:97:FE:8D:BE:D1:4B:E5:AA:E3:72:CA
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3F780E2A179211ECB303FF58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.202.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:6f:54:0f:fe:05:1f:5f:06:06:37:b3:f5:a9:07:8d:12:41:
         63:62:ad:84:7c:7b:5b:09:77:18:ec:16:49:cd:b8:19:e8:77:
         cd:f2:4f:79:0c:ba:ae:32:6b:09:3c:f4:22:e2:a6:20:79:88:
         1b:22:dc:a9:6c:cc:60:ff:e2:62:01:cc:3f:00:17:5d:34:de:
         a1:cd:f0:cb:77:1d:ba:55:87:2b:ff:34:09:53:9a:61:71:0c:
         f6:7e:b2:9b:b1:e6:01:b4:0a:d5:6d:f0:a2:b1:a7:93:8b:8f:
         8a:29:0a:2c:93:63:ed:08:e3:14:85:c4:5f:37:1c:d6:44:e5:
         23:b9:dc:dc:6e:c8:aa:00:21:3f:e3:ba:6e:c3:3d:9d:11:6d:
         54:4c:62:2e:93:5f:e9:a0:ce:63:2b:6f:e2:74:02:8e:9e:df:
         ff:2b:a4:23:23:a0:6d:ff:26:9e:bb:13:ef:ff:d9:b2:30:52:
         3b:02:1f:aa:3a:43:1e:64:17:d4:68:96:47:8e:0e:45:44:39:
         c4:83:f0:02:cd:51:1c:c3:b7:32:06:9f:dd:b8:21:4e:bf:27:
         35:c2:49:b3:89:f6:a6:e0:fc:f2:15:81:44:0b:54:d0:a8:12:
         4c:43:a4:de:f8:3c:23:da:2f:11:bc:51:31:13:47:b0:28:13:
         0a:7f:cc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 07:24:47 2026 by rpki-client