Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/6B10211E032B11ED8B3C5B4EC4F9AE02.roa
File:                     6B10211E032B11ED8B3C5B4EC4F9AE02.roa (raw, json)
Hash identifier:          ZTRqgNwjBkeuivQjU7gcegMWDfuZgfLXOKzQP0Bh2cg=
Subject key identifier:   92:C1:15:5B:16:00:D7:7B:39:0E:6C:82:58:54:61:B6:64:DD:58:BA
Certificate issuer:       /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Certificate serial:       0339
Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/6B10211E032B11ED8B3C5B4EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:04:57 +0000
ROA not before:           Tue 29 Apr 2025 02:37:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     7545
IP address blocks:        202.94.32.0/20 maxlen: 20
                          203.24.63.0/24 maxlen: 24
                          203.27.44.0/24 maxlen: 24
                          203.29.208.0/23 maxlen: 23
                          203.55.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
                          rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 00:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825 (0x339)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
        Validity
            Not Before: Apr 29 02:37:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42b69-8d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b1:b6:7d:aa:1d:a3:04:3c:83:a6:c6:48:00:
                    a1:0a:5f:85:26:fe:1e:f6:d3:df:b8:83:8d:8a:37:
                    db:a1:ae:84:4e:af:44:07:ee:dc:8b:c7:76:2c:a3:
                    53:be:99:d7:e8:f2:3e:68:b9:5c:ce:57:71:df:5e:
                    bf:b9:04:b0:e3:69:10:46:09:91:7b:a0:19:6c:a1:
                    0f:9c:55:0e:74:30:08:17:c2:8b:9a:fc:10:b0:8e:
                    ee:b6:64:d9:e5:2a:c8:ef:68:00:05:8c:34:d1:79:
                    2e:fc:e7:58:6f:a7:bf:67:d1:20:72:d7:b4:d4:09:
                    ce:88:08:a2:3b:51:4a:27:5e:d2:49:9e:51:3f:32:
                    c5:92:38:a9:55:94:4a:a9:f8:82:f2:d2:67:70:37:
                    a4:5b:bb:9d:18:dd:3f:f2:cd:fb:3a:6c:3f:57:6a:
                    7c:8f:37:2a:9c:c9:d1:f5:70:91:b8:a2:d5:32:a0:
                    01:8f:2f:e4:f9:cc:f1:91:46:93:14:9f:28:04:98:
                    b9:a0:4a:1b:04:9c:f0:6e:27:da:5f:e5:01:f0:44:
                    58:65:8a:fe:cf:d4:36:fc:2c:d4:9e:a9:0f:7e:fd:
                    67:fe:b1:91:55:06:bb:fd:ed:3f:57:45:e7:ce:fe:
                    76:94:94:c6:fa:bf:75:40:a7:d6:3f:eb:59:d7:87:
                    1a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C1:15:5B:16:00:D7:7B:39:0E:6C:82:58:54:61:B6:64:DD:58:BA
            X509v3 Authority Key Identifier:
                keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/6B10211E032B11ED8B3C5B4EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.94.32.0/20
                  203.24.63.0/24
                  203.27.44.0/24
                  203.29.208.0/23
                  203.55.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:8f:23:e5:31:6b:4b:5b:38:aa:43:0c:49:fd:cd:a8:f3:d0:
         31:be:a1:f2:02:3e:9a:c6:3c:26:1f:19:07:11:1f:15:f1:7b:
         4d:cd:b5:92:7d:35:ec:b2:ff:48:d4:03:2f:cb:88:5d:55:97:
         e2:4c:c4:6f:5b:9c:30:8a:0c:c8:c4:65:f1:d1:5f:9a:b9:3d:
         44:33:cf:b4:c1:39:42:04:c9:e9:3f:61:4f:89:32:98:3f:f1:
         48:ac:60:47:9c:5b:a4:7d:db:0d:8d:5a:c3:dc:bf:83:de:ca:
         8b:e2:9f:36:32:67:17:ef:73:96:43:ca:b5:77:ae:51:98:81:
         bb:6e:87:a0:cd:02:21:da:2d:76:9f:2f:55:a5:1f:da:e7:02:
         7a:95:c2:5f:c4:ef:04:93:e9:d7:7b:a2:06:b5:dd:6d:e6:29:
         1a:ea:38:32:45:72:ba:ec:88:ff:07:01:d0:ed:c0:8d:47:d7:
         eb:8f:31:76:ad:1c:f3:94:27:79:45:4b:61:46:66:69:3e:15:
         99:b9:68:98:cd:18:42:f1:36:5d:c1:c3:d6:d7:8b:d8:5c:b8:
         aa:e4:61:f6:d8:ce:00:81:13:de:0b:51:52:0c:0e:ac:dc:df:
         ed:96:19:91:3c:39:f3:52:21:f8:6c:72:da:4f:e7:7f:df:85:
         af:d0:c5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:27:07 2026 by rpki-client