Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/DDBC2904F43811EB996EF71CC4F9AE02.roa
File:                     DDBC2904F43811EB996EF71CC4F9AE02.roa (raw, json)
Hash identifier:          efWLmAjCGT+rH7EUQj+k0eGhbyU6lxgg8mvw1IUQ7lc=
Subject key identifier:   AC:9F:72:27:6D:89:09:36:96:48:A2:0E:CD:3F:DC:7D:9D:EB:23:71
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       6141
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/DDBC2904F43811EB996EF71CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:39:19 +0000
ROA not before:           Wed 30 Apr 2025 20:29:09 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     10082
IP address blocks:        218.188.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 19:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24897 (0x6141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
        Validity
            Not Before: Apr 30 20:29:09 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a487d7-dc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:36:a2:cd:4a:7e:23:a1:1c:4b:11:8c:5b:89:
                    b5:28:8f:31:13:40:e4:57:f6:8b:bc:8f:b9:ba:3c:
                    5f:49:37:56:5b:2e:28:6d:19:91:e5:17:2d:bf:5b:
                    1d:9b:98:29:a0:8b:36:37:06:ed:f3:2e:30:ac:46:
                    43:78:2a:d6:22:0d:a1:93:21:7c:c2:4e:97:7b:82:
                    5b:2e:0a:d4:a7:17:ad:0c:2c:24:3a:99:0b:06:fb:
                    d5:c3:1e:d7:56:3b:62:fc:07:7e:72:19:06:81:4e:
                    b0:1f:9e:b7:4f:50:d7:89:d7:67:16:78:0a:9a:a5:
                    b8:1e:20:ae:d0:f4:57:f7:c6:20:de:8d:3d:eb:1a:
                    e8:a6:12:38:69:f3:73:cc:ed:7e:30:dc:af:3b:73:
                    ee:97:68:16:b0:a7:95:ba:62:cc:12:6f:2b:58:46:
                    20:cb:f6:8e:13:68:59:ae:67:26:d3:fb:28:da:06:
                    e4:13:d9:b6:99:12:60:6a:a7:04:2b:69:8c:57:f4:
                    d6:b4:32:39:3b:8a:50:39:a3:42:df:da:7b:83:a2:
                    76:a0:bc:c3:4e:83:10:41:c3:4a:8c:4c:fb:e6:c2:
                    27:6f:2c:75:d2:78:f3:90:35:93:f8:9f:80:ca:5c:
                    55:6c:c0:6c:24:e4:f9:40:d5:8e:7a:1b:e0:20:e5:
                    41:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9F:72:27:6D:89:09:36:96:48:A2:0E:CD:3F:DC:7D:9D:EB:23:71
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/DDBC2904F43811EB996EF71CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.188.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:cb:ec:8a:b7:55:57:be:59:6e:16:34:6d:12:6b:34:fa:83:
         09:91:48:9f:d6:70:30:6c:70:8c:62:ec:26:a9:63:fd:7f:9b:
         10:4e:cb:0d:20:4c:d3:6d:c6:63:18:6a:a1:8d:82:41:22:85:
         fd:69:d7:71:dd:c8:ac:2f:03:cb:27:92:42:5b:63:25:44:00:
         28:e1:f8:44:31:16:16:86:a8:41:82:25:92:46:a3:38:0e:48:
         5e:82:29:14:65:1c:68:4c:c1:08:62:8b:59:2a:bf:57:91:96:
         59:93:c3:f8:4c:3e:b3:48:14:a7:e8:12:27:4f:d2:d8:b9:db:
         9c:ee:fc:3b:42:42:13:55:c4:8d:c8:f7:39:99:5d:91:6d:fb:
         f8:f9:c2:ae:29:13:2d:ef:47:26:3a:ed:46:a9:35:65:a3:9c:
         e8:65:ca:7f:f9:fd:8d:11:07:e6:9c:18:fe:7b:e8:b8:9d:b4:
         ef:44:34:a9:c6:41:95:c2:88:5f:c9:06:03:16:36:c4:f5:d0:
         d5:e7:de:a7:ba:26:df:dd:eb:23:4d:50:5d:bf:74:33:8d:38:
         3f:6a:56:77:b2:95:38:69:31:e8:ad:ff:10:98:50:04:7f:81:
         0e:d4:fe:5e:7c:de:46:99:f7:bd:ed:cf:a5:a0:3c:ae:ab:38:
         be:22:a4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:51:26 2026 by rpki-client