Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DB701E584E6311EEBED9743CC4F9AE02.roa
File:                     DB701E584E6311EEBED9743CC4F9AE02.roa (raw, json)
Hash identifier:          aVcFD+7Cf2Q5NsiqVZPSqT6t7DqlHkbGwDM3SujhnaU=
Subject key identifier:   50:60:E8:87:E0:E5:34:E1:6C:0B:39:31:91:7F:0C:30:7F:AA:24:AF
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0B3D
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DB701E584E6311EEBED9743CC4F9AE02.roa
Signing time:             Thu 26 Mar 2026 19:24:47 +0000
ROA not before:           Thu 26 Mar 2026 19:24:47 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     10204
IP address blocks:        203.78.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2877 (0xb3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: Mar 26 19:24:47 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c587ff-fe93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:8c:c1:e9:20:5a:d3:c7:e8:d4:92:b9:b6:
                    07:c2:a8:84:77:22:b9:f4:21:0d:92:40:c9:7b:da:
                    b4:37:1f:7a:e7:77:2d:ca:2e:b0:1f:b1:89:06:c0:
                    b6:72:19:5d:96:65:ba:56:19:56:81:a7:f0:57:59:
                    94:8f:78:66:04:c4:6f:97:5d:64:34:13:5d:ec:00:
                    3a:05:df:dd:0c:a4:29:42:44:1b:89:d9:e4:af:ed:
                    85:c4:39:48:dd:62:0b:73:e4:6c:55:b8:61:51:a9:
                    32:c3:55:bf:1e:33:45:25:e7:db:9b:3d:51:05:66:
                    61:9f:b9:20:fe:9b:50:92:ce:1d:1f:12:7f:fa:90:
                    f1:d4:61:c7:45:95:0c:f9:91:db:19:72:85:54:b1:
                    2b:2f:bd:ef:65:4a:f5:60:da:c2:2e:79:71:ca:39:
                    b1:30:f8:88:a2:d9:49:4f:3e:8e:58:9a:27:bd:84:
                    86:6a:fb:01:fc:02:97:85:6a:4f:7e:f4:af:75:c5:
                    a1:b8:a0:75:b2:14:a2:9a:95:e1:80:99:2d:8c:99:
                    49:92:38:55:b3:1b:21:ef:29:b0:6b:a4:0f:75:4c:
                    e4:25:33:a6:3b:be:1c:9a:5f:eb:a5:e6:4f:99:1d:
                    cd:46:68:ee:70:b2:c8:72:e7:6e:1b:43:61:02:6d:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:60:E8:87:E0:E5:34:E1:6C:0B:39:31:91:7F:0C:30:7F:AA:24:AF
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DB701E584E6311EEBED9743CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.78.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:6f:7e:d1:57:9d:a1:57:fe:9f:b4:17:2b:4f:e5:b2:ec:61:
         2f:40:12:33:88:ce:07:28:72:da:1e:3f:bd:eb:26:ac:49:be:
         0a:19:85:ee:df:0b:3d:13:cc:f9:d8:6d:6d:a4:4d:6a:84:35:
         11:6d:4c:80:de:fd:9f:07:a7:2f:24:c9:d8:90:4b:f3:40:c3:
         5a:be:15:52:95:fa:00:f7:99:cf:fd:14:28:97:65:eb:28:17:
         62:f5:63:ef:23:83:de:11:ef:d8:28:30:48:6d:04:38:6a:20:
         37:7d:82:f2:a3:ce:98:08:a9:c9:17:41:85:44:84:78:1a:70:
         c4:a2:7d:a7:08:f7:32:69:d1:f5:31:bc:80:64:d4:df:58:73:
         55:a9:e1:1e:99:75:51:1b:d6:1f:be:f2:b3:5c:e2:63:16:95:
         f6:c7:68:5d:56:9a:4a:67:b8:33:69:13:ca:45:88:65:db:e4:
         3f:18:d9:3f:05:1d:d3:3b:e8:2a:20:c4:ad:1e:cc:c7:d5:a7:
         fd:63:14:c6:90:6a:93:3e:83:9c:91:27:35:f8:e4:68:b7:29:
         fc:1e:83:4f:66:27:96:74:d0:e9:58:54:c1:e7:f3:2c:31:8b:
         5b:17:02:91:20:52:b9:2d:8a:c9:92:37:01:5f:b5:a2:d3:35:
         75:73:9f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 00:20:07 2026 by rpki-client