Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/2154A9349EC011F1B15E06384311F970.roa
File:                     2154A9349EC011F1B15E06384311F970.roa (raw, json)
Hash identifier:          IaN1CbJjVBbSbEXHP5CyiCsaIkx1jFd1E5bqJGTrPXY=
Subject key identifier:   7A:78:79:47:F0:6A:C7:48:F1:CF:97:DF:02:20:00:F2:86:C5:B3:D0
Certificate issuer:       /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB
Certificate serial:       0D58
Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/2154A9349EC011F1B15E06384311F970.roa
Signing time:             Sun 23 Aug 2026 06:59:06 +0000
ROA not before:           Sun 23 Aug 2026 06:59:06 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149994
IP address blocks:        202.125.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl
                          rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 18:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3416 (0xd58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB
        Validity
            Not Before: Aug 23 06:59:06 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a8a9a3a-e979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:70:5a:c1:bd:40:49:1c:94:74:a2:47:05:
                    f2:95:d1:52:9d:30:fb:85:b3:e1:e5:39:ee:dd:89:
                    bb:92:1e:21:82:74:20:a5:0e:e4:f6:88:ef:0d:8b:
                    ac:75:c2:b8:d3:6b:9b:23:9c:4e:7b:ad:5c:f4:6b:
                    6a:fe:d4:ad:83:e7:b2:33:11:e9:c7:f4:c1:9f:cd:
                    1e:7a:8a:6e:d3:9c:4a:5c:46:6b:d5:6e:7b:9d:22:
                    35:66:42:34:29:a4:bb:17:2e:43:e3:9c:aa:04:1a:
                    8d:42:2b:11:ab:ce:b1:90:b4:25:d0:2a:84:69:2b:
                    f4:57:54:32:be:ef:41:e8:26:59:73:0c:1d:ff:0a:
                    39:63:ce:0e:f6:d5:61:a9:c2:06:9a:05:6e:24:25:
                    c8:18:a2:7f:e4:fb:dc:43:7a:83:87:67:c0:4a:b1:
                    af:52:6b:56:50:3b:b8:f2:e5:ea:ef:09:84:90:dd:
                    33:e0:b5:97:36:bc:4a:7b:2d:2b:76:77:e1:45:1d:
                    ec:02:20:11:0e:89:55:3c:94:cf:f1:d8:a3:a1:37:
                    79:13:56:da:04:8c:40:46:15:9c:77:3f:93:89:3e:
                    e1:54:04:8f:b4:47:39:96:8a:3f:51:fd:db:d6:1b:
                    a8:b5:41:58:f8:5a:e5:ad:d1:0b:97:5a:7b:e1:0d:
                    a5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:78:79:47:F0:6A:C7:48:F1:CF:97:DF:02:20:00:F2:86:C5:B3:D0
            X509v3 Authority Key Identifier:
                keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/2154A9349EC011F1B15E06384311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.125.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:9b:1f:7a:a1:6a:46:8d:fb:79:18:4c:18:64:9b:77:46:cc:
         e0:0d:16:5b:a7:b3:77:c0:f7:96:ec:53:c5:1a:72:59:43:c2:
         6a:24:a7:5d:c3:e8:8a:0f:df:b7:0c:9b:ed:04:f6:4b:1f:55:
         06:ea:48:79:75:2d:9c:2c:55:a8:32:7a:e2:32:60:d3:75:30:
         bb:c1:52:cf:13:17:c9:70:d2:2e:99:14:fa:e0:b4:ea:2a:dc:
         4d:46:4a:43:eb:aa:fa:a1:64:24:de:83:02:1c:8c:76:46:8a:
         5c:8f:6d:7e:38:1d:1f:02:29:4e:c5:15:f8:8e:38:5b:7d:ec:
         6b:2b:c6:ab:95:c6:70:0b:eb:33:7a:d0:37:4f:e3:42:8d:d8:
         8e:2f:64:bf:1a:90:7c:2b:43:cb:51:e5:af:84:17:4c:0b:47:
         c6:25:d9:64:63:a7:33:b7:97:af:7c:f2:e7:2b:04:d9:0c:7a:
         a7:5c:df:09:09:ab:3b:92:cc:25:f8:86:74:97:c2:16:75:9c:
         bb:fb:d2:cb:c6:90:d8:9b:33:26:03:ec:5c:7a:c8:e5:26:08:
         55:0c:8f:d2:b4:24:60:45:4c:37:eb:42:f3:3c:2d:f3:2d:28:
         e0:2b:c2:e9:48:d3:6e:5c:76:55:f7:4e:fb:7a:a1:2e:52:20:
         32:5a:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 20:05:46 2026 by rpki-client