Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F3E0FDF6DBFD11EC8712B20BC4F9AE02.roa
File:                     F3E0FDF6DBFD11EC8712B20BC4F9AE02.roa (raw, json)
Hash identifier:          odj1txQ5n/7inFPec++9DB8rkwZncTqBM/JjGXcB7xY=
Subject key identifier:   76:55:CA:83:71:44:B4:65:99:A3:24:A0:0F:A5:4F:7F:E0:E9:03:62
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5F02
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F3E0FDF6DBFD11EC8712B20BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:20:39 +0000
ROA not before:           Thu 28 Aug 2025 14:57:30 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     55310
IP address blocks:        202.9.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24322 (0x5f02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:57:30 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60d37-7d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:92:0e:00:b8:23:96:7c:e8:dc:8f:7a:a7:53:
                    de:b4:fc:5a:87:db:a0:4e:70:b3:11:93:a1:a3:5e:
                    e9:57:7b:92:04:48:69:6d:fb:2e:aa:f2:97:cc:72:
                    55:78:4b:69:e9:7e:c3:f0:f9:42:07:03:39:7c:02:
                    f2:84:47:39:f1:db:51:74:34:7a:e9:2e:21:8f:ec:
                    f6:b2:7a:fd:50:d1:81:b9:f9:08:2a:97:ca:f5:dc:
                    a3:52:6f:54:e0:0e:fc:1f:fd:18:9f:eb:b9:e6:c8:
                    c1:02:bb:c6:96:3c:21:46:40:04:99:2d:a8:9f:3a:
                    b0:b7:87:82:d4:2f:e7:88:69:de:b2:61:1a:6c:55:
                    9d:be:68:65:70:c8:a9:12:9c:19:93:66:4c:ab:15:
                    6f:61:4c:76:2e:d2:c6:7f:4a:0e:cd:db:73:9a:29:
                    54:f1:a3:68:34:aa:19:95:db:7f:a5:b1:69:74:9f:
                    3b:ea:6b:91:f7:0b:70:a1:b6:0f:7b:7b:fc:79:53:
                    13:76:fd:a0:0f:fa:16:67:48:bb:04:7f:76:91:8c:
                    f0:4d:70:ed:f4:25:a0:f6:e8:30:25:6c:4e:b6:ff:
                    15:c9:4b:3f:80:b3:51:6d:ea:32:dc:05:7a:e9:fd:
                    72:69:91:7e:b7:07:b3:07:21:4f:27:d9:e9:87:28:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:55:CA:83:71:44:B4:65:99:A3:24:A0:0F:A5:4F:7F:E0:E9:03:62
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F3E0FDF6DBFD11EC8712B20BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:8f:46:0d:4d:f8:30:e0:a8:07:c3:1b:1d:63:44:75:46:4f:
         f5:7f:41:42:b2:d2:98:2c:26:7e:48:e2:4f:57:de:a6:6d:b2:
         c6:9e:46:73:26:73:ca:6b:17:73:f7:82:38:5c:2c:9b:e1:1f:
         88:be:f1:bc:3f:09:c0:47:5e:63:6e:69:dd:76:89:2a:b7:54:
         51:8e:83:11:99:e1:f8:d6:4f:22:77:e6:30:8b:83:10:e5:93:
         3c:af:b0:ae:bf:ab:f7:81:91:0d:24:2a:f2:18:7c:c3:3e:a4:
         7c:ce:69:f8:fc:14:c1:0b:a2:bd:87:54:86:ec:12:3a:d9:f5:
         66:49:4c:0e:53:3f:5c:83:7f:1a:35:1f:3a:25:6d:c6:20:a4:
         58:e5:34:45:13:08:60:37:6b:6b:38:b0:46:a8:13:a1:e3:8e:
         c0:7c:5a:8c:ea:fc:5d:3c:e5:20:ea:ec:c2:7c:d6:4d:98:b3:
         a7:e7:ed:d4:91:9b:a0:51:66:30:55:12:74:4b:bb:e9:9b:29:
         7a:35:ce:4a:bf:d7:8b:b7:4f:6f:b6:92:4e:9b:bd:ae:ec:0c:
         95:97:1b:38:cd:55:56:28:42:d0:02:f0:1d:04:4d:ae:aa:ee:
         bf:83:85:1f:ce:84:7a:32:fd:81:a5:5a:3a:65:87:79:e1:b1:
         05:70:0a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:42:52 2026 by rpki-client