Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/4B5E14FC96AD11EBA4AC9F7FC4F9AE02.roa
File:                     4B5E14FC96AD11EBA4AC9F7FC4F9AE02.roa (raw, json)
Hash identifier:          VgB5I6QMqxnBLBYIkLAYzulZt0i2loK6LJFS/QrdqBs=
Subject key identifier:   5B:D6:7A:17:40:43:8D:E7:13:3D:B2:E0:EF:49:B5:DE:14:23:83:7C
Certificate issuer:       /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial:       10B5
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/4B5E14FC96AD11EBA4AC9F7FC4F9AE02.roa
Signing time:             Fri 06 Mar 2026 18:25:05 +0000
ROA not before:           Fri 06 Mar 2026 18:25:05 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     399151
IP address blocks:        203.17.72.0/24 maxlen: 24
                          2001:dcd:dd05::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
                          rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 18:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4277 (0x10b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
        Validity
            Not Before: Mar  6 18:25:05 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69ab1c01-adbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:4a:15:dd:e4:b5:60:73:ad:a9:1a:db:5a:
                    89:a1:8a:1a:3c:1c:95:d7:da:e8:e0:0e:ad:df:4c:
                    fc:d1:57:d2:7c:15:4e:ff:69:30:e3:80:37:cd:50:
                    c7:2a:95:4a:2f:9f:64:4b:8b:6f:9c:3a:4b:86:b5:
                    f8:72:d5:94:6a:60:f0:ba:9a:c8:02:60:71:d5:4f:
                    d8:f0:c6:dd:90:ca:cd:ec:7c:9f:e5:39:1b:c0:39:
                    fa:ca:87:cd:0d:32:9d:73:27:9d:8c:42:c0:88:48:
                    cb:4b:01:3f:a2:60:30:64:28:80:db:34:53:60:f3:
                    9a:8d:2e:73:99:64:f9:d8:94:9f:10:c3:1b:a4:3a:
                    57:e6:73:3c:7e:f9:6a:85:ca:45:6b:2e:e4:12:32:
                    d7:f1:d1:bf:bf:0f:53:90:10:c4:e2:5a:29:14:1a:
                    c2:33:3d:97:bc:c4:54:09:e3:59:f5:f8:13:55:f2:
                    d5:bb:a6:d9:8f:df:ae:6f:fd:38:3a:09:8b:cd:7f:
                    e3:43:45:48:f8:70:28:e8:90:0a:f9:8e:d6:0a:ab:
                    d9:77:4d:8c:08:ed:7b:6f:3f:23:a0:e7:e1:fd:cf:
                    3a:d0:ec:de:de:bc:d9:e1:e5:b9:3f:62:8a:8d:c1:
                    0c:46:00:8a:e1:d9:91:8f:86:fe:1b:ab:3a:94:5f:
                    78:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D6:7A:17:40:43:8D:E7:13:3D:B2:E0:EF:49:B5:DE:14:23:83:7C
            X509v3 Authority Key Identifier:
                keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/4B5E14FC96AD11EBA4AC9F7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.17.72.0/24
                IPv6:
                  2001:dcd:dd05::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:1e:d2:78:71:c1:e0:29:fc:17:47:6b:36:96:f6:cc:a7:f1:
         8a:56:80:9d:2a:d0:11:ff:32:96:a2:12:ca:44:d7:b4:09:9c:
         b6:32:60:b2:64:8e:4a:09:dc:8e:47:30:37:fa:8e:44:df:1b:
         73:ff:bd:02:62:67:4f:e5:17:46:f4:ae:f6:c5:77:8d:2f:ee:
         15:ee:ec:05:d4:7f:1d:bd:5a:61:23:ba:8a:c9:3f:f2:02:d5:
         73:2d:0e:f8:80:d9:0e:c4:67:19:23:0c:36:bb:b3:15:86:ee:
         e1:65:88:64:22:ff:1d:c9:5b:0c:72:18:83:ce:17:7f:97:17:
         a2:78:75:27:eb:da:01:ac:48:48:dd:43:79:e1:f0:e4:50:2a:
         91:42:42:cc:a8:2c:d5:6c:8b:3f:16:42:54:cb:52:44:4b:60:
         5e:d6:15:2b:46:63:07:21:04:e8:ea:a9:85:04:07:5e:f4:41:
         06:8d:16:69:6a:85:7c:f6:02:f7:50:3d:92:a1:ef:b4:23:fe:
         b0:45:76:85:24:94:b8:f4:b5:18:07:11:a2:58:78:0c:5c:22:
         d9:70:1a:94:0d:03:17:5d:61:15:c7:1e:56:c2:ff:21:be:31:
         e9:0b:3c:10:15:a9:2a:2e:1d:24:67:75:ad:48:d7:1b:18:18:
         2d:aa:73:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:38:19 2026 by rpki-client