Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/76CB57EACB6311F090A2C33AC4F9AE02.roa
File:                     76CB57EACB6311F090A2C33AC4F9AE02.roa (raw, json)
Hash identifier:          U/YsrUn+v9r526e/rkMZyZHGM5vhOkv/VS0PWXoa7xQ=
Subject key identifier:   51:80:06:A1:FA:AC:7F:46:77:07:8B:80:7E:A0:1F:1D:D9:5E:C4:06
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0325
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/76CB57EACB6311F090A2C33AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:38:05 +0000
ROA not before:           Thu 27 Nov 2025 07:34:10 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     136557
IP address blocks:        202.126.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805 (0x325)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Nov 27 07:34:10 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4878d-5726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:95:49:1c:8a:e9:f1:24:18:e9:17:c1:1f:2e:
                    b5:f1:ad:6d:29:df:d1:91:1f:28:56:21:39:30:c0:
                    59:1b:bd:e7:99:f8:9e:d6:da:c0:6e:6d:e2:82:68:
                    ca:6c:29:b7:25:18:9e:fd:52:96:75:1b:dc:3e:83:
                    74:9e:cc:23:39:77:d4:48:9a:a2:51:17:0a:93:1b:
                    9f:05:69:d7:67:e5:ef:2b:8a:8b:b9:cc:25:88:f9:
                    21:d7:f6:b2:98:6c:bc:61:26:33:14:54:02:3d:32:
                    45:4e:4b:f3:93:01:d0:35:66:9a:0a:00:2d:9b:d9:
                    30:b5:e2:7a:f4:c2:c4:10:59:5c:2e:53:72:dc:71:
                    77:54:28:9b:19:f2:66:53:d3:5f:54:95:ac:84:ae:
                    6a:6c:80:05:e4:c3:fa:38:39:9c:5a:49:b7:72:d8:
                    82:13:2f:3d:8f:db:b0:19:a2:0b:50:dd:2d:4e:d5:
                    0e:98:60:ae:5d:5e:13:86:60:1e:bb:19:b2:fc:1a:
                    ac:94:ec:a4:e4:e1:b6:14:4d:4d:93:cd:99:74:2c:
                    b8:5a:eb:ee:b8:26:01:18:2c:f8:ab:88:04:5a:88:
                    36:e2:90:e9:a9:de:30:4b:ac:c2:78:37:81:97:6f:
                    28:c6:68:45:7c:6b:31:f1:fa:6a:34:0f:20:f4:de:
                    a4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:80:06:A1:FA:AC:7F:46:77:07:8B:80:7E:A0:1F:1D:D9:5E:C4:06
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/76CB57EACB6311F090A2C33AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:b9:a6:b5:82:a6:18:93:5b:e2:9e:38:50:fc:19:0d:88:bf:
         ba:61:c0:49:04:c1:ca:34:22:14:be:d7:82:ed:2d:7d:98:81:
         36:8e:c6:df:44:3f:ab:f2:bd:94:22:86:e9:90:ac:c9:1d:b5:
         41:e1:15:f8:16:5a:d9:fd:ff:c4:e9:1b:30:fe:a9:df:fc:76:
         51:90:85:23:29:58:d0:0b:e8:53:0e:d2:3d:b1:54:7b:d1:ef:
         a6:1f:be:2a:49:a1:60:4a:c2:90:d5:f4:f6:31:e3:40:22:e3:
         50:12:63:2a:98:97:0f:19:3c:34:5f:95:ae:5e:8e:c1:65:06:
         6a:57:16:35:8f:b7:d4:26:d4:04:7f:6d:a8:6e:09:42:d4:41:
         d2:c1:ec:35:8e:48:5f:4e:a6:2a:4f:71:d0:db:06:3d:6a:74:
         25:33:9a:ec:03:21:79:29:b1:a3:1c:f1:d4:f0:21:45:bf:34:
         25:b2:9f:39:d8:48:d6:40:3b:ac:01:9d:a2:59:e3:2a:97:e7:
         d4:7a:6d:6b:58:af:49:e8:32:49:dc:e8:45:45:2d:62:5b:7d:
         db:a1:d7:66:71:d0:8f:cb:81:e7:20:9e:16:fb:f0:cc:02:15:
         7c:3c:74:d2:3d:5f:eb:92:04:c6:e2:ff:dc:ca:5f:a5:28:f3:
         22:72:09:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:32:05 2026 by rpki-client