Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/F9350C3C326B11EEA39EA051C4F9AE02.roa
File:                     F9350C3C326B11EEA39EA051C4F9AE02.roa (raw, json)
Hash identifier:          dWFquQhrS7sSJOfeONRYFC+8MprpTIsUClTiytmpg4w=
Subject key identifier:   E1:A1:62:FE:99:6F:58:64:93:86:18:51:2F:D7:29:D6:FE:F8:E2:9C
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       031F
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/F9350C3C326B11EEA39EA051C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:38:00 +0000
ROA not before:           Thu 05 Jun 2025 03:10:53 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     61317
IP address blocks:        202.126.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799 (0x31f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 03:10:53 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a48788-a383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:68:7f:3d:21:5e:3a:7f:7a:f8:9a:b5:87:
                    0c:0d:7f:2f:61:0f:58:a1:71:16:ae:7b:56:ca:3f:
                    47:9c:e1:57:d8:9b:d8:ad:e1:dc:79:11:9b:3e:11:
                    31:9f:a6:96:d2:94:cd:63:c9:1e:1a:f0:c1:f3:ea:
                    c5:76:93:89:6d:a2:01:49:ce:f2:74:10:84:b6:ad:
                    12:74:56:e0:99:00:ce:19:40:43:05:23:e5:c0:95:
                    0a:07:b7:c9:b5:c1:2c:1a:51:76:37:61:b4:f5:30:
                    11:a5:88:54:91:35:4c:32:30:0f:09:f5:b5:05:de:
                    0b:62:56:0f:bd:e8:42:da:32:d6:39:66:ae:b0:eb:
                    32:fe:50:7c:d9:6a:7b:c3:ed:51:5a:08:5c:5f:80:
                    f5:e8:4f:ac:19:23:56:b9:4f:18:9f:b0:9f:d4:2f:
                    92:93:f9:34:39:25:62:fa:97:3d:91:c2:b6:4e:81:
                    a7:d5:05:66:c0:71:47:a5:76:39:ad:9c:bf:89:c4:
                    d4:62:d0:e7:d4:0d:5c:80:05:e6:66:9e:86:95:e0:
                    98:6f:48:8d:c2:f9:26:6c:58:71:2e:a8:62:81:3b:
                    98:9d:2e:2d:40:9d:fc:85:ba:3c:59:e1:18:ec:83:
                    16:0a:bc:ed:da:98:c3:dc:c1:d6:cc:63:96:9b:1b:
                    dc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A1:62:FE:99:6F:58:64:93:86:18:51:2F:D7:29:D6:FE:F8:E2:9C
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/F9350C3C326B11EEA39EA051C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:44:f3:c5:f8:0c:bd:38:1f:54:ab:94:90:c3:b4:9c:85:61:
         03:99:96:cd:b1:18:a0:fe:71:56:7a:82:48:d1:23:02:78:75:
         40:00:a7:3c:1f:b4:aa:1d:d5:cb:f0:ed:6e:14:9a:b7:3a:ab:
         aa:49:25:dd:94:38:1a:d0:0f:1b:c2:81:a7:ed:ab:f7:38:c0:
         f2:d1:3e:33:86:a6:75:90:7d:35:3f:1d:79:11:66:59:ee:8f:
         6d:f9:86:1c:5a:5a:19:89:ec:62:73:6c:56:ff:cf:ad:0a:1a:
         3d:87:b8:39:92:02:17:0c:8d:2a:0a:1a:9b:35:94:da:3e:39:
         e0:7c:fb:c6:79:d0:43:df:b9:2b:cb:f5:8a:56:21:2a:c1:4b:
         77:52:27:18:49:22:b5:eb:41:d0:26:83:6b:94:50:46:1b:92:
         95:c1:07:e6:57:b6:0d:f8:e5:16:dc:d5:3e:e3:29:3d:72:b7:
         22:1b:51:19:19:45:59:25:17:13:22:c0:eb:7e:f1:43:47:7c:
         15:b4:7b:6e:93:68:7c:50:d5:11:a5:52:31:cc:92:85:e1:9b:
         b5:b0:20:c2:47:3f:eb:7a:40:cc:9a:2a:92:ec:37:2c:fd:cf:
         02:5a:22:7d:8e:61:aa:4c:7b:9a:be:86:00:57:bb:4a:ab:b2:
         f5:81:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:32:58 2026 by rpki-client