Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/1F8578820CD611EFAFFA4E63C4F9AE02.roa
File:                     1F8578820CD611EFAFFA4E63C4F9AE02.roa (raw, json)
Hash identifier:          lUTQyb/PuqxKCVv46E6ibT+jCGxyUOgNpFumB1KlC20=
Subject key identifier:   72:62:93:FB:A3:39:10:94:A4:D7:03:BD:16:85:FB:39:62:0F:89:9E
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       019F
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/1F8578820CD611EFAFFA4E63C4F9AE02.roa
Signing time:             Tue 27 Jan 2026 03:22:57 +0000
ROA not before:           Tue 27 Jan 2026 03:22:57 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     23979
IP address blocks:        203.84.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Jan 27 03:22:57 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69782f91-d6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e2:5a:06:9a:9c:55:89:8d:da:f7:10:30:c4:
                    a3:db:98:6b:d9:11:cc:93:01:a1:4f:b0:67:24:7a:
                    cc:60:8f:c4:89:6d:34:44:0e:9f:86:68:9c:00:4f:
                    64:6a:6c:32:fd:23:74:ce:79:af:7e:10:33:7a:ce:
                    4c:06:1f:91:74:93:3f:ef:29:0e:93:ad:17:07:6e:
                    6a:c2:fb:fc:d4:6c:be:92:3d:b5:35:70:f7:99:f8:
                    4e:58:96:86:53:e5:e1:21:5c:1c:cc:f1:e4:93:13:
                    fa:c0:23:01:09:20:58:cb:05:15:62:25:7e:05:a5:
                    ae:cf:07:e8:a3:65:fa:23:b8:b5:a1:e1:37:8a:80:
                    a3:5c:92:e8:61:1e:46:04:da:7b:6b:d1:2b:38:49:
                    bc:ef:79:45:d7:7a:73:5e:56:aa:50:ad:59:0b:a1:
                    2e:20:61:09:bb:5d:d9:db:83:3e:30:b8:c3:c2:cf:
                    1a:e1:8a:a5:34:5c:aa:9e:47:fc:ad:2e:53:40:0e:
                    11:e2:98:e1:4c:5e:31:8b:86:12:34:2c:a9:f1:b4:
                    d7:7c:20:8a:1c:c3:ab:df:a5:04:1a:94:f0:ad:df:
                    ea:a3:66:81:a8:cf:ee:0a:10:5f:6b:b9:a7:85:53:
                    0f:d4:4d:ca:0e:61:88:a9:f1:c3:44:de:7f:6b:77:
                    4a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:62:93:FB:A3:39:10:94:A4:D7:03:BD:16:85:FB:39:62:0F:89:9E
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/1F8578820CD611EFAFFA4E63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.84.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d4:b2:cf:dd:0d:96:2f:3d:b5:69:15:d6:c5:d9:5a:40:bc:
         41:0c:e2:bd:be:9a:a4:cc:8d:ed:36:63:a1:ab:15:a4:9f:06:
         06:e8:07:36:c2:05:7b:4f:42:5b:5c:b4:71:92:38:f7:ca:88:
         a6:4b:25:9f:0f:6d:a3:ef:20:57:33:43:68:34:b1:65:ca:53:
         df:9a:f1:4e:10:ee:cb:0c:15:4e:90:2e:88:0a:7d:49:b6:bf:
         e6:6a:62:95:c9:01:42:9d:8b:15:ac:df:6c:56:2e:17:c7:b7:
         7a:76:54:a4:cf:ca:05:ff:42:aa:92:1e:a0:2e:f4:4f:32:97:
         de:2d:0c:c9:3c:da:a1:50:05:cd:ac:07:30:ef:12:f4:10:f9:
         d0:a1:5b:a0:18:ff:99:25:bd:35:b0:49:ba:68:0d:50:5b:19:
         26:23:9e:56:2f:65:83:cc:0a:cb:db:cd:c8:8f:ad:05:b3:33:
         e5:14:b6:60:25:bb:01:91:3e:03:1b:6a:22:8c:c7:8b:84:b4:
         ec:1c:a8:d8:07:e4:d2:e5:07:62:da:77:2b:fb:c7:78:e8:5c:
         b9:63:48:7c:5d:b4:44:44:c1:92:6b:2d:18:1f:91:1c:81:06:
         00:4e:58:8f:93:84:b8:dc:8d:e0:58:b1:b9:79:8b:48:bc:53:
         11:87:25:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:58:56 2026 by rpki-client