Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/35415D50FA7711EFB598EF54C4F9AE02.roa
File:                     35415D50FA7711EFB598EF54C4F9AE02.roa (raw, json)
Hash identifier:          VG82nm7UqU5w2sJlNK4SDxqINYJwoA6/oxLrBlm8JIE=
Subject key identifier:   E5:F9:AF:F3:0F:DD:B5:BC:97:BF:42:6E:14:6B:F3:B0:27:8F:BC:B0
Certificate issuer:       /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial:       35AE
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/35415D50FA7711EFB598EF54C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:20:25 +0000
ROA not before:           Thu 06 Mar 2025 10:38:57 +0000
ROA not after:            Mon 31 Mar 2031 00:00:00 +0000
asID:                     4608
IP address blocks:        203.133.248.0/23 maxlen: 24
                          2401:2000::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
                          rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 14:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13742 (0x35ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
        Validity
            Not Before: Mar  6 10:38:57 2025 GMT
            Not After : Mar 31 00:00:00 2031 GMT
        Subject: CN=69a46749-181d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dd:54:8a:52:7d:be:cb:2e:cf:0c:c6:e2:3e:
                    04:53:5e:77:e4:f8:b9:a5:28:1b:88:be:1d:34:20:
                    c8:59:ee:95:e8:03:40:30:b6:d3:5e:09:76:ba:ab:
                    6d:7d:39:5f:08:f7:ad:f3:37:e8:f6:c3:8b:df:0e:
                    44:d5:9d:88:5b:7d:9c:de:c1:49:6d:77:80:a6:77:
                    57:7c:22:e5:d4:44:9d:18:9f:d8:b4:8d:85:e1:13:
                    bc:ed:b3:3c:22:68:43:6f:31:20:0d:bd:11:85:25:
                    45:67:b5:33:9c:4d:29:44:e5:43:a5:fd:b9:d4:e3:
                    74:af:a1:84:fa:79:22:24:3e:bf:da:13:6f:97:71:
                    27:84:35:b6:aa:0a:06:9b:7f:3b:23:4a:29:3b:82:
                    fc:3c:e2:f3:21:23:4a:da:40:7b:2b:3e:88:74:c3:
                    0d:e6:98:88:f3:7e:20:08:f4:a4:6c:43:fc:b5:ac:
                    c9:bc:90:0a:35:61:28:12:a7:fe:bc:c5:08:f4:5b:
                    c3:c7:7c:17:20:a5:0a:05:a5:af:b1:55:0a:e0:36:
                    a4:1c:c5:db:0c:9a:dc:64:c0:c2:56:74:9c:91:8e:
                    87:a4:72:64:ae:e1:a6:a8:fe:51:e0:69:bf:e4:66:
                    cc:09:fb:30:e7:39:7a:b4:18:c9:b5:a0:ea:15:b8:
                    0c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F9:AF:F3:0F:DD:B5:BC:97:BF:42:6E:14:6B:F3:B0:27:8F:BC:B0
            X509v3 Authority Key Identifier:
                keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/35415D50FA7711EFB598EF54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.133.248.0/23
                IPv6:
                  2401:2000::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:65:0c:fa:51:b5:a4:f8:6c:d3:30:74:da:31:ed:ef:c9:cc:
         f8:91:57:9d:0b:5d:51:96:2d:67:63:42:54:bb:6b:2b:44:1d:
         3d:50:4e:89:f5:0d:d8:9d:08:61:de:59:96:72:2d:aa:6d:bb:
         7a:31:bb:a8:5f:2a:9e:db:41:b2:dd:52:65:d4:c2:97:eb:8e:
         fb:17:b2:97:0f:5e:a4:dc:70:a1:28:06:22:81:b9:77:05:5e:
         20:cf:ef:ac:2b:1e:9d:f7:a4:9b:4d:4f:a2:bb:63:47:3b:89:
         b9:9f:0e:f3:40:e4:b5:90:2f:1b:fd:b6:f0:dd:f7:ef:25:d9:
         1c:66:19:dd:72:5e:9a:7a:86:ef:79:74:c1:0e:66:fc:39:35:
         91:4d:b7:dd:ae:67:25:ca:89:63:cb:d2:47:d5:03:0f:cb:08:
         7f:df:81:fe:25:d3:39:69:dd:44:7f:5d:e5:2e:c4:c5:9a:62:
         12:1a:32:6c:02:3e:b1:6c:0d:e8:99:0a:a7:f8:a5:e7:e5:9e:
         51:b1:59:13:b9:78:d9:91:5b:46:39:7a:3a:80:45:57:f3:0c:
         cf:1b:8b:86:3e:ba:29:c3:a7:fc:33:1d:8c:45:3d:87:6f:73:
         e2:87:0e:a7:aa:2d:38:3d:d6:42:3d:1c:f1:35:53:5b:01:dc:
         17:81:04:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:15:14 2026 by rpki-client