Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/0732C4DC090B11F1B0A6391E363D8C67.roa
File:                     0732C4DC090B11F1B0A6391E363D8C67.roa (raw, json)
Hash identifier:          Q9fK/HIBESDBwerI+LGeuA1a/3ibrPdtmUfxDWX3vMM=
Subject key identifier:   C7:A0:5F:E1:CC:7F:81:A2:FD:C6:E5:11:92:E4:A3:7D:DB:0A:13:B8
Certificate issuer:       /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial:       0536
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/0732C4DC090B11F1B0A6391E363D8C67.roa
Signing time:             Mon 02 Mar 2026 22:46:32 +0000
ROA not before:           Fri 13 Feb 2026 18:39:28 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     14593
IP address blocks:        65.181.0.0/19 maxlen: 24
                          168.140.240.0/20 maxlen: 24
                          206.83.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1334 (0x536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
        Validity
            Not Before: Feb 13 18:39:28 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a61347-09b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:33:6e:81:24:54:83:8f:e0:98:c8:f6:a8:
                    16:1e:f3:0c:2a:8d:94:56:b2:72:04:3d:cf:d6:62:
                    fc:77:7c:65:2a:14:25:6e:22:5f:cd:b4:f8:6b:20:
                    7e:cc:28:ba:69:d7:6b:21:a4:ae:64:4f:6b:0d:73:
                    4a:fa:5b:8f:3e:b5:67:8a:3b:4e:e5:6c:fd:ee:93:
                    a0:ce:18:24:15:7e:63:ed:57:48:04:98:17:f7:df:
                    87:f6:ac:7b:d6:11:eb:52:32:03:ae:7f:cb:1b:b1:
                    9e:a0:86:f7:61:85:a3:52:29:29:fe:ef:f0:33:da:
                    66:f7:58:44:6e:63:de:57:a5:c9:8a:b4:3f:08:f3:
                    2f:6b:49:06:f7:d1:a5:33:87:31:34:ec:6d:58:5b:
                    1c:4c:19:68:37:7f:80:13:65:b7:fc:21:bc:48:d5:
                    c4:fe:f0:20:0c:bf:06:ed:37:ec:e3:70:f9:84:ce:
                    ab:22:cb:97:c7:7a:a7:c6:f4:e5:e8:05:4d:6a:1e:
                    18:3c:0a:f0:7f:91:6a:87:36:fb:6d:6c:e3:9d:75:
                    2a:78:d0:ba:07:ee:51:27:29:5d:4d:b1:27:f4:d5:
                    d0:80:19:bd:c3:d3:c8:0a:53:84:9d:e5:4f:a4:02:
                    54:b7:29:e8:63:92:2a:7d:dd:1b:3f:f6:db:27:27:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A0:5F:E1:CC:7F:81:A2:FD:C6:E5:11:92:E4:A3:7D:DB:0A:13:B8
            X509v3 Authority Key Identifier:
                keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/0732C4DC090B11F1B0A6391E363D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.181.0.0/19
                  168.140.240.0/20
                  206.83.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8b:7e:e6:b6:f8:67:7c:cd:8f:18:8d:9a:e8:08:9b:4b:58:d3:
         cb:5d:b6:11:41:2a:1c:82:a8:38:34:7a:5c:59:0c:66:27:ad:
         5a:5b:14:59:87:0f:03:78:37:86:90:9a:b1:f7:ef:42:e6:37:
         05:9a:c8:4c:4e:d8:87:73:3f:58:0c:a6:90:3b:28:d2:13:5b:
         c8:f1:7a:9b:97:f2:61:1a:d4:3f:67:5f:09:82:36:64:30:8d:
         6f:ba:14:ff:31:51:d1:8d:b5:04:90:0a:bc:b8:8f:59:ad:df:
         5d:a9:a1:69:cc:d1:cb:7d:5d:c5:db:62:ea:ad:aa:f4:8f:36:
         ae:8d:cc:e0:fb:40:af:de:c7:85:d1:c5:56:0d:79:47:10:db:
         57:e9:31:e9:cf:67:49:df:33:21:3e:a2:c4:39:d8:a6:3e:12:
         0d:8a:0c:77:c7:f9:6a:e9:e3:14:a0:f0:53:ff:f5:8d:96:ff:
         25:d2:d1:4d:be:a7:8a:fd:bb:a0:c3:17:2d:c9:02:e0:e4:d4:
         52:43:29:54:f3:ff:7c:a2:7f:21:df:c3:3f:eb:c0:8e:ba:c2:
         b1:dd:44:7a:83:8e:cd:48:5c:fa:aa:ca:27:75:72:e6:6e:b3:
         15:07:bb:16:3e:6b:0c:15:e8:f8:dc:bc:01:f4:9e:16:a4:b1:
         e9:d3:76:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 17:07:54 2026 by rpki-client