Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/16C1510E310711EE8328F181C4F9AE02.roa
File:                     16C1510E310711EE8328F181C4F9AE02.roa (raw, json)
Hash identifier:          ayI697ySbVca1KSEK/NxkWsToRmOT/tj1u2PoHYIaQ8=
Subject key identifier:   1E:53:2B:80:FD:08:44:51:27:DD:66:06:E1:36:24:84:99:C6:A8:70
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       031A
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/16C1510E310711EE8328F181C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:37:55 +0000
ROA not before:           Thu 05 Jun 2025 03:10:47 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     397423
IP address blocks:        202.126.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 03:10:47 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a48783-f3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:34:f9:55:c6:de:af:0d:1f:f8:28:05:64:cf:
                    50:f1:dd:66:7d:79:71:b8:cf:89:c2:77:f5:aa:7b:
                    ea:88:b6:f8:2c:08:3f:a7:c4:69:42:8c:63:af:65:
                    45:3f:e7:77:fc:ab:6b:b7:33:22:e2:46:cc:8f:dd:
                    2d:32:01:49:dd:63:6d:ac:2f:27:21:81:0f:8b:73:
                    a2:4f:de:f8:86:c0:51:0a:38:95:d1:4f:8f:a8:c9:
                    79:49:42:ec:a9:ba:db:75:7b:7b:6d:16:17:b9:26:
                    d7:b6:c7:d7:07:62:d5:95:6f:b1:6c:b7:98:0c:6a:
                    99:80:67:fe:9d:1c:7e:8e:27:23:ea:d3:ec:da:af:
                    2f:92:26:d0:c4:2d:dc:32:88:e0:a2:b2:62:98:b3:
                    58:c8:4f:36:2a:6d:45:67:ab:6c:cc:7b:2c:ab:5a:
                    59:e0:e0:42:ce:7b:05:18:55:6c:c5:1b:0a:92:e0:
                    58:82:62:f0:96:30:ad:0e:3c:4d:7a:1e:bb:c1:7c:
                    62:b1:67:5a:9e:d1:76:30:25:88:7f:fd:56:38:8b:
                    f9:80:aa:06:f3:f1:91:16:97:4e:89:59:6b:ee:11:
                    3a:15:28:30:95:51:3b:a8:9c:3f:0c:5b:22:16:1d:
                    52:23:1e:e8:c3:81:0e:3f:d6:17:3a:41:34:45:78:
                    36:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:53:2B:80:FD:08:44:51:27:DD:66:06:E1:36:24:84:99:C6:A8:70
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/16C1510E310711EE8328F181C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:f9:3a:70:9c:ac:a4:fb:e5:35:88:f4:44:0f:58:f1:95:68:
         e2:02:18:86:50:13:f2:0e:4d:b7:d8:bd:4d:05:87:07:f6:be:
         ca:18:a5:32:6e:25:8b:cc:b3:0f:cd:b9:ca:09:3f:f2:fb:58:
         23:35:fc:2e:17:e6:52:22:b4:9e:9f:4d:f9:25:fc:97:4c:e3:
         de:90:51:db:fb:ac:1e:a4:c5:f6:e0:c9:60:a0:ae:cf:2d:35:
         d4:06:a4:50:ce:c4:81:62:ad:c7:06:51:30:69:9e:e3:a5:b0:
         56:52:f4:9b:02:69:e5:e2:44:2b:1d:a8:37:12:1f:b9:d3:bb:
         d6:1b:91:13:89:c1:30:dd:0c:cf:aa:e9:8d:10:2b:90:32:f8:
         c0:64:07:2f:d5:15:f7:b9:d9:67:ea:b5:ec:e9:31:52:0f:0a:
         82:5e:2a:86:c7:24:b2:ad:ee:c1:76:82:85:f1:82:74:52:bc:
         9d:d5:70:a2:91:46:b2:3b:1f:4a:ca:d7:04:1e:a6:ae:13:5d:
         29:dd:90:e0:89:bd:d2:62:54:e4:65:00:8f:4a:84:d0:1e:92:
         15:15:29:9c:fe:9d:af:4d:51:0a:9a:7f:58:6d:03:aa:54:d1:
         17:49:44:ce:36:56:71:3e:cb:86:71:18:08:be:40:10:de:96:
         9c:61:e8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:31:40 2026 by rpki-client