Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/C369BA98260D11F082934618C4F9AE02.roa
File:                     C369BA98260D11F082934618C4F9AE02.roa (raw, json)
Hash identifier:          cXQDcqjGHQK7UALmkZP5e0hc3VzG0s7yGBDOUKs2gKE=
Subject key identifier:   45:3F:E2:B7:D6:4F:44:B3:B7:41:7B:CB:98:00:51:E2:FA:51:50:34
Certificate issuer:       /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial:       0211
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/C369BA98260D11F082934618C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:31:10 +0000
ROA not before:           Wed 27 Aug 2025 03:39:05 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        202.12.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
                          rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 02:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
        Validity
            Not Before: Aug 27 03:39:05 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3eb3e-a698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:b8:b7:8b:55:19:9c:96:0d:87:61:5d:a7:
                    85:0d:c4:0d:71:3e:a9:25:05:fb:3c:b1:d3:4a:72:
                    b4:a7:d0:0d:d0:fb:9e:fa:c0:d3:1c:dc:1e:e0:00:
                    78:7a:7f:81:d1:f0:e0:ac:99:14:a6:70:7a:9c:64:
                    b9:8f:c3:6c:38:30:e3:a9:60:e1:14:09:9f:f0:1f:
                    84:ac:0e:a7:95:92:c8:d7:29:04:38:8a:a6:27:aa:
                    3c:4c:42:c8:41:10:e8:95:da:c5:b5:2f:16:36:b6:
                    a9:f1:a7:c0:f4:53:ef:16:9f:56:6e:52:01:d8:96:
                    2c:cd:ff:bb:6c:b7:c4:8e:f9:14:ae:11:a1:63:0b:
                    91:b9:f6:19:35:0c:65:a1:08:ef:ba:4b:1c:65:7c:
                    c0:e6:ce:82:81:5d:0c:71:ec:c6:7f:e6:33:ce:6a:
                    f5:9d:ca:f3:80:37:69:ec:ec:9d:fc:1f:90:f1:d8:
                    3b:d7:4b:1d:8e:2e:df:0c:c3:0e:7f:33:7d:3c:cf:
                    93:68:f6:f5:cc:ff:fe:21:f5:02:44:e2:7c:e5:24:
                    9f:0d:45:29:eb:29:98:86:90:66:28:76:2f:d2:68:
                    9c:c2:80:90:4f:84:88:3a:21:ea:e8:6f:dc:84:7c:
                    c3:eb:a9:71:a3:b5:9c:71:78:0a:c0:1a:bd:13:16:
                    32:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3F:E2:B7:D6:4F:44:B3:B7:41:7B:CB:98:00:51:E2:FA:51:50:34
            X509v3 Authority Key Identifier:
                keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/C369BA98260D11F082934618C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:4a:b3:cc:2c:c7:74:1c:3c:30:6b:dc:35:fe:ba:8f:f5:80:
         48:67:72:d6:bf:9e:cd:bf:98:42:08:66:36:23:4c:25:31:b3:
         12:7c:11:00:e0:76:40:9b:08:01:91:78:c5:d4:04:af:75:ca:
         3d:93:9a:58:ad:04:07:23:45:c0:d6:5e:0e:94:5e:be:9a:f3:
         16:2d:e6:bc:06:b4:a0:05:18:bd:92:ea:17:f6:0a:2c:fb:40:
         cc:d6:62:ce:fe:c2:e4:78:e7:47:c0:2e:46:e7:74:06:38:fe:
         ce:99:95:75:32:db:94:e0:9e:b0:7f:54:27:25:b2:61:6b:b6:
         0d:a3:4a:af:f8:5a:a5:a5:1f:09:82:0b:38:fe:3f:47:9f:74:
         fb:a5:07:8a:b3:21:01:f9:6c:1b:51:ab:72:41:58:c7:8a:e7:
         16:5e:d9:a9:53:3e:9d:80:ed:ba:d3:ff:03:a8:2d:52:4d:28:
         20:db:95:ea:27:62:47:e3:63:9c:f0:ad:f4:f4:19:45:c5:3a:
         a0:e6:f3:45:d8:f7:68:02:ae:a3:93:37:1a:c1:f3:f7:a9:41:
         1b:7a:b6:c3:ea:82:66:be:0c:f1:00:ba:72:23:fa:48:4b:62:
         f5:ae:6b:3e:b1:b0:c9:de:fc:08:c3:02:94:69:49:62:fd:a0:
         92:73:77:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:55:47 2026 by rpki-client