Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/399302423C8B11EE83400D20C4F9AE02.roa
File:                     399302423C8B11EE83400D20C4F9AE02.roa (raw, json)
Hash identifier:          5hO8Ug+1/7vY45RWQ6wVs5kg9ClWPEJe9d8hoiAndPY=
Subject key identifier:   5D:D7:17:8F:8B:EA:21:0C:1A:9C:71:2A:4D:95:2A:28:04:3B:91:04
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0317
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/399302423C8B11EE83400D20C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:37:53 +0000
ROA not before:           Thu 05 Jun 2025 03:10:42 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        202.126.97.0/24 maxlen: 24
                          202.134.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 03:10:42 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a48780-6bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:76:de:1f:6a:af:fa:8d:ee:4d:35:3d:19:56:
                    58:ce:cd:01:ce:2e:aa:dd:5f:38:ea:3c:6d:e0:f2:
                    20:c3:16:16:8c:41:33:92:f4:2f:11:e6:15:49:d2:
                    d4:a9:86:40:10:1c:53:5a:d8:5e:03:ae:23:b7:65:
                    13:57:05:65:4d:b7:ee:6b:f9:b9:8a:79:d8:d9:10:
                    09:1a:ba:23:16:26:2a:c9:39:d7:f7:e2:c5:f8:9a:
                    80:e1:48:5c:0d:75:7f:06:92:58:19:87:12:ed:24:
                    ce:2f:be:7a:25:68:ab:cf:de:ba:0f:b1:d5:d5:00:
                    65:91:7b:46:cf:1a:9b:bc:98:32:f5:02:39:f9:64:
                    47:c5:dd:64:20:e4:99:6e:d7:fe:8b:c8:16:34:8c:
                    12:60:8e:18:ad:4d:5d:15:5f:9c:6d:11:f0:53:4d:
                    8c:87:7b:10:a9:64:33:21:16:cb:5e:5a:9a:ad:62:
                    38:db:82:f0:91:a3:7b:5a:28:7b:51:e8:74:b8:c7:
                    2c:71:7e:1c:3f:15:12:70:87:45:d3:ec:f7:8f:19:
                    2d:b5:e3:24:f7:e5:19:59:e7:ce:84:cc:e5:6e:5b:
                    86:a6:0e:55:16:df:1d:a9:ca:1d:c8:70:d4:68:f7:
                    39:3c:e6:ef:56:75:7b:fb:e0:86:ac:20:b5:b4:24:
                    7a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D7:17:8F:8B:EA:21:0C:1A:9C:71:2A:4D:95:2A:28:04:3B:91:04
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/399302423C8B11EE83400D20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.97.0/24
                  202.134.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:33:ac:6c:a5:97:b8:1e:bf:b8:1f:67:71:a6:af:26:d9:22:
         9d:6a:be:c9:75:c8:09:c0:8f:4f:17:67:83:2e:4d:de:b6:b0:
         d9:0a:68:62:e5:8d:31:5f:36:9e:48:3b:2b:f6:2e:d4:42:0b:
         fa:0c:1a:35:84:21:68:3c:57:aa:5b:04:cd:2d:6e:68:06:01:
         c3:c5:ef:be:e3:f8:80:d6:f3:6d:b3:c6:ba:c3:cc:d4:5c:2f:
         3f:bc:20:db:f1:1c:4b:36:bf:fa:54:7c:d5:8b:75:76:a3:95:
         13:dd:5a:eb:4c:ac:d3:b9:19:f8:95:04:e3:d7:1e:8a:57:45:
         cc:d3:44:28:ff:1c:35:be:4f:f7:03:61:ef:90:e5:1b:22:b1:
         aa:0c:75:92:ef:4b:a2:20:c3:43:88:84:e1:8b:43:2a:48:05:
         fc:21:d8:8b:54:87:b1:95:fa:a5:02:6f:5b:1a:e4:6a:04:bb:
         40:a3:cc:fd:09:f4:9a:70:85:9a:b1:38:cc:93:63:62:89:de:
         6e:23:8c:22:99:a6:0e:d6:ce:d5:83:c6:d2:13:9a:ba:bd:2e:
         63:a5:f8:80:8b:ab:72:65:1d:17:02:18:14:6a:63:c0:18:5e:
         aa:1a:69:39:0a:29:55:27:c3:1a:f5:bb:30:58:a0:e1:bc:2d:
         2d:2e:3a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:31:41 2026 by rpki-client