Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/7B01065ECB6611F0911E3B40C4F9AE02.roa
File:                     7B01065ECB6611F0911E3B40C4F9AE02.roa (raw, json)
Hash identifier:          6Dvm4ulNHKTvy2zEThI5CFxM48R2WkZ0mp2MxrhNEVA=
Subject key identifier:   76:AF:B8:8B:5D:A3:C3:EC:B6:8A:99:F0:A6:28:4F:62:2F:C8:4A:E4
Certificate issuer:       /CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A
Certificate serial:       0A27
Authority key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/7B01065ECB6611F0911E3B40C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:26:33 +0000
ROA not before:           Thu 27 Nov 2025 07:55:47 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        203.13.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl
                          rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 15:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2599 (0xa27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A
        Validity
            Not Before: Nov 27 07:55:47 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a468b9-42a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d8:bc:aa:88:7f:2e:0e:e5:49:a3:5e:f6:c2:
                    a2:3b:8e:96:09:a1:a4:43:3a:dd:a3:8c:e0:5e:1c:
                    93:65:a9:5d:eb:c0:5e:7f:5b:83:ab:17:42:bd:be:
                    2d:6c:c3:a4:9e:95:e1:cc:51:76:52:ab:aa:bf:e8:
                    23:fd:78:90:28:bf:24:1f:e1:9e:d9:58:0a:9e:16:
                    0b:15:ca:36:33:65:e4:48:cc:8c:52:40:7f:f6:0a:
                    a4:a1:20:c8:83:4d:2a:3c:e2:dd:a1:1b:61:6a:68:
                    22:72:5e:c1:a9:64:95:dd:cb:c1:9e:87:28:ac:38:
                    3a:63:e6:d1:50:a2:0e:0d:91:a0:b0:e6:5d:7d:21:
                    61:9a:b3:35:90:0c:81:0b:99:47:1d:5d:76:69:d0:
                    75:d9:5a:e3:bc:f0:3d:64:d8:6d:95:b8:e0:0f:50:
                    93:de:b7:11:4e:63:cc:65:f8:e2:13:c1:90:53:cf:
                    05:9c:58:f2:b6:1e:50:c4:74:6c:5e:2d:73:5f:70:
                    70:7b:63:49:11:85:fa:c4:ae:a6:b2:0c:c4:d4:99:
                    38:5e:3d:ae:6c:d7:89:ee:21:4f:e8:a5:05:64:2e:
                    9c:69:1a:3e:b9:92:c6:07:c3:d0:fd:13:28:30:26:
                    c9:cb:15:fe:fa:68:f5:b9:50:75:10:b1:a7:7e:17:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AF:B8:8B:5D:A3:C3:EC:B6:8A:99:F0:A6:28:4F:62:2F:C8:4A:E4
            X509v3 Authority Key Identifier:
                keyid:05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/7B01065ECB6611F0911E3B40C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.13.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:d6:25:6d:a5:d0:ae:06:99:af:60:15:51:17:d1:1a:ac:75:
         16:41:03:c7:44:32:0e:2f:bd:8d:12:2b:59:fa:dc:38:c9:59:
         73:a1:3a:09:8e:bb:74:a7:d6:b8:3b:2b:4a:c0:21:05:ff:0f:
         2b:8a:5f:38:78:29:91:c1:f4:59:51:7d:8a:a5:ef:68:79:15:
         51:3b:d0:68:94:1c:f7:1b:bb:b7:91:d3:2b:2d:af:2d:9e:50:
         d5:8c:1b:83:85:fa:49:c1:ae:ee:74:b8:df:a2:ec:e5:9f:0a:
         88:0e:1e:86:83:8b:90:be:3c:a6:82:3d:57:ac:47:82:75:d5:
         5f:36:8a:8b:fb:2b:8f:65:b3:2e:38:ed:07:54:89:05:bb:6a:
         b0:05:34:71:8e:97:74:71:2d:08:38:e4:cf:54:fc:cc:4a:9b:
         28:64:37:b8:81:7c:ea:54:2b:85:8f:ec:84:8e:ca:e4:d4:4b:
         74:8e:c4:de:ac:86:0a:ad:fb:e9:0e:43:6b:a4:ce:c7:bf:13:
         14:53:8a:08:1d:18:08:7c:e5:67:77:4d:b6:a4:f5:64:df:80:
         da:60:c3:e5:22:5f:55:2b:4b:f9:9c:b9:f8:76:2a:b9:92:96:
         9b:2b:ab:e8:48:ad:70:21:a8:33:06:d1:76:6d:09:61:bf:7e:
         5b:99:03:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:17:15 2026 by rpki-client