Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E2E360EEF3EE11ECBAE10054C4F9AE02.roa
File:                     E2E360EEF3EE11ECBAE10054C4F9AE02.roa (raw, json)
Hash identifier:          YYtbQVr1blBcfl0KXa9WX3fO1sfcPhFjjPvdgZB4tRs=
Subject key identifier:   7A:20:B5:91:D5:58:C5:7C:52:3C:77:66:CC:A9:07:2C:80:BC:80:47
Certificate issuer:       /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Certificate serial:       267D
Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E2E360EEF3EE11ECBAE10054C4F9AE02.roa
Signing time:             Fri 06 Mar 2026 16:19:53 +0000
ROA not before:           Fri 06 Mar 2026 16:19:53 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     6453
IP address blocks:        123.136.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
                          rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 16:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9853 (0x267d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
        Validity
            Not Before: Mar  6 16:19:53 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69aafea9-e707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9c:ec:37:8e:99:fc:37:9a:42:f0:18:bf:29:
                    88:41:37:9b:c1:58:72:cb:d8:18:89:95:fe:c5:15:
                    7c:92:82:ea:e2:44:28:44:ec:be:28:03:a1:3c:d5:
                    0a:84:a3:6c:cc:55:bb:3a:16:93:c3:84:db:cb:a4:
                    5b:7b:5c:a1:bc:06:76:87:f8:a9:b3:99:f2:da:98:
                    f2:b3:d4:4a:22:24:76:80:4f:6d:77:1b:41:b5:1c:
                    0c:5d:01:5f:d2:d8:c3:56:d1:af:16:de:bd:6a:5f:
                    ee:e3:d7:aa:62:21:c8:a0:58:ca:bc:91:81:af:5c:
                    aa:54:1a:39:47:fc:61:b2:42:fa:51:b5:55:b4:7e:
                    51:57:27:9f:ac:59:bd:ac:80:95:08:77:79:27:40:
                    aa:3c:7c:63:2f:48:2a:96:27:f4:59:74:fc:dd:a4:
                    04:08:73:22:7d:6c:75:db:53:1b:04:86:23:0b:b5:
                    c5:0e:4c:8b:33:11:c0:5f:a5:4b:0e:0a:e7:18:fd:
                    c6:83:2e:2b:3c:90:38:12:b9:bf:92:9e:44:57:25:
                    86:cb:81:38:36:b6:94:05:d3:8c:6c:5f:e6:aa:05:
                    f5:c8:dd:fd:8e:27:e5:25:11:fa:81:dc:eb:f4:1c:
                    fe:37:50:a2:09:ea:64:63:6b:cc:2f:67:de:bd:62:
                    3d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:20:B5:91:D5:58:C5:7C:52:3C:77:66:CC:A9:07:2C:80:BC:80:47
            X509v3 Authority Key Identifier:
                keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E2E360EEF3EE11ECBAE10054C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.136.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:7e:a5:8e:52:2b:0a:40:13:af:9e:e3:81:37:0e:11:8c:84:
         1d:55:39:3d:31:cf:92:a3:41:1d:92:f3:10:bf:f2:83:f3:3a:
         bb:9c:03:d4:88:75:c8:3e:0b:e1:45:8d:b1:d7:fd:ca:83:33:
         44:10:af:65:24:18:33:f2:30:54:8d:e3:01:e5:7a:13:5f:e5:
         7d:cf:7e:8d:98:82:4d:27:66:32:22:d1:52:00:b0:ad:61:57:
         f9:0c:74:35:2b:91:a7:f5:86:c4:fe:04:83:9e:87:5b:63:f1:
         dc:6a:93:cd:47:53:9b:f6:42:0c:a2:24:a5:e1:31:03:b7:ac:
         82:94:4f:7e:8d:bc:04:0b:66:9b:08:24:a1:31:ca:5a:ca:75:
         06:fc:5d:34:fa:68:24:db:bc:9f:69:0d:db:68:63:0c:33:f3:
         32:e6:38:be:f5:9f:c8:ab:78:0d:69:bc:df:bb:8a:71:57:18:
         25:c3:d6:fc:95:b6:26:1e:53:ff:f8:f7:a2:e1:75:d8:eb:e6:
         03:6c:e4:8d:98:31:1f:ed:e3:82:1d:c4:ef:3e:d7:71:8a:85:
         5c:bf:43:f3:51:08:f5:d3:81:98:7b:76:eb:5c:82:36:b2:dd:
         51:7b:2a:b5:cf:eb:81:7a:14:7b:f3:bc:91:9c:9b:99:3e:c9:
         58:41:44:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:25:27 2026 by rpki-client