Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/643961CCB39811EBBD3F524CC4F9AE02.roa
File:                     643961CCB39811EBBD3F524CC4F9AE02.roa (raw, json)
Hash identifier:          EK917a0brIXozyOjUJuFME0or9oqwhvu136xFaoo3CE=
Subject key identifier:   9C:D2:D5:89:41:A8:2D:CD:2F:C6:62:21:C8:A4:17:A1:E3:8F:A6:2D
Certificate issuer:       /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
Certificate serial:       0743
Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/643961CCB39811EBBD3F524CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:28:26 +0000
ROA not before:           Mon 02 Mar 2026 22:28:26 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     4785
IP address blocks:        45.251.240.0/24 maxlen: 24
                          45.251.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl
                          rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 21:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1859 (0x743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153
        Validity
            Not Before: Mar  2 22:28:26 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a60f09-7b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c5:0c:06:05:7d:c0:cb:65:e1:bc:b2:7b:c7:
                    a7:ec:0a:86:06:51:06:de:f2:81:bb:c4:d6:bd:9c:
                    1f:11:5f:39:86:4e:bf:0c:60:b8:ea:c9:e5:6b:53:
                    a9:18:c3:4e:20:3f:bb:9b:c8:ff:dd:eb:71:fa:1d:
                    b7:ec:96:ee:0f:8c:4f:39:3a:02:3f:79:ce:e0:84:
                    61:c5:85:8e:42:84:50:0b:92:d3:a5:a4:e9:8e:1b:
                    2f:fb:56:c0:a5:06:d2:3d:cf:4f:ed:34:a9:27:15:
                    2c:66:06:28:f4:84:da:ad:5c:47:a0:fc:6a:ba:76:
                    21:53:7b:45:89:0e:c6:d9:82:c4:46:ad:3d:79:66:
                    3b:13:51:f4:38:48:1e:67:6a:48:fd:30:6b:40:1b:
                    20:d4:09:40:05:f7:0c:91:1b:14:76:30:b3:45:4e:
                    77:58:f0:69:e6:0b:cd:e3:24:8d:8c:67:e2:6e:97:
                    b8:cf:23:77:fa:4d:63:d2:fa:6a:03:90:9b:78:00:
                    bc:f5:9d:b4:ed:70:83:74:73:34:8f:c9:68:8e:fc:
                    c0:4a:b9:4a:eb:de:47:6f:0d:4e:ef:91:8e:4e:70:
                    d4:0d:6b:e4:f0:ed:5d:47:2a:7d:c6:d7:37:c2:71:
                    41:4e:c5:a2:97:ba:d5:38:ac:41:c6:ab:b1:f1:cf:
                    a5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D2:D5:89:41:A8:2D:CD:2F:C6:62:21:C8:A4:17:A1:E3:8F:A6:2D
            X509v3 Authority Key Identifier:
                keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/643961CCB39811EBBD3F524CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:23:f7:c9:7d:31:23:35:a8:d0:ed:c3:12:69:bd:f6:31:97:
         3b:00:30:46:93:03:a8:a5:19:4a:02:74:2c:58:16:f6:42:e6:
         ee:af:26:31:e4:8f:e9:5b:09:b9:7c:29:40:78:f6:b3:cf:e7:
         18:3a:94:fc:e2:99:3a:73:97:70:f7:2a:4f:65:7a:fe:41:49:
         35:bb:4d:04:de:33:0f:7c:67:48:11:a7:ac:8c:33:e9:dc:46:
         bd:48:c0:19:f0:28:89:db:25:fc:b9:c3:eb:62:52:d9:5c:8a:
         c8:bb:aa:35:de:df:f8:83:9f:c0:82:4a:81:9e:0a:05:f4:aa:
         6e:b6:8e:54:1c:28:7f:8b:29:32:5d:e8:ad:2e:cc:4a:dd:f6:
         e1:3e:4b:f2:ea:b5:40:80:51:9c:28:b1:8f:96:32:4c:f8:d0:
         03:6e:13:65:d1:a4:6d:d5:4d:1f:85:63:06:de:9a:91:23:40:
         97:32:05:58:56:06:51:a3:65:66:50:95:b9:7f:0f:18:93:d3:
         d1:d6:9a:29:54:96:74:cb:70:50:a5:ac:4c:af:9a:7b:05:94:
         36:6d:41:1e:1e:0a:0c:5f:6e:52:99:8b:f8:cf:ca:5e:50:a8:
         73:19:ad:03:5e:70:65:ad:28:d4:c1:ed:09:9b:02:92:be:89:
         83:a8:c7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:52:34 2026 by rpki-client