Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa
File:                     5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (raw, json)
Hash identifier:          wYx1PeQ/7Fy2cG/DCJNU1b8Uc41NkcD4iMjLyRu1msU=
Subject key identifier:   88:0D:30:E4:CC:72:53:A7:D5:A4:B3:62:87:B2:76:72:42:1B:59:E1
Certificate issuer:       /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Certificate serial:       05FD
Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:21:37 +0000
ROA not before:           Mon 22 Sep 2025 16:35:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        213.170.156.0/24 maxlen: 24
                          213.170.157.0/24 maxlen: 24
                          213.170.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 16:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533 (0x5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
        Validity
            Not Before: Sep 22 16:35:22 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a51e61-0cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bb:19:0b:27:1c:67:11:2e:18:ea:eb:05:64:
                    34:bd:47:8e:a4:64:9f:56:9c:e9:df:4b:15:9a:5e:
                    10:64:bf:dc:25:2c:ad:43:26:ad:9c:e3:25:e9:05:
                    e6:30:68:0c:ba:f8:97:34:ed:ad:05:a6:45:2c:e0:
                    8c:e9:a0:8b:5c:9f:62:a5:67:41:c0:51:88:eb:ed:
                    37:73:df:7a:97:ab:b3:d9:24:d0:b6:d0:e4:5d:0a:
                    74:e9:40:78:5e:68:c8:ff:49:e3:25:9c:5b:0b:99:
                    93:c3:2e:3f:15:64:7d:7d:fc:ab:bf:68:5d:79:5a:
                    f3:7c:8e:ca:12:10:29:7f:0c:27:c4:ba:54:4c:e9:
                    1a:da:b4:af:84:86:d7:b3:8e:dd:a0:b9:a3:40:fa:
                    49:38:7f:1a:82:3c:b2:52:1d:ef:bc:e4:a4:96:a6:
                    c8:bc:ed:14:cb:44:c4:57:6b:12:76:f1:c4:35:1c:
                    df:ef:0b:0d:28:8b:d6:89:16:fc:40:21:d8:a7:10:
                    1e:2b:f5:67:9e:ed:07:c6:90:35:92:ec:0b:02:06:
                    cc:21:15:cf:b8:3b:04:87:40:49:33:81:75:ff:e4:
                    ab:6f:ef:4c:e8:06:b4:ed:9c:b4:be:eb:dc:5b:95:
                    bd:54:d2:f1:e4:3f:7d:c4:31:83:d9:02:a8:6d:54:
                    13:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0D:30:E4:CC:72:53:A7:D5:A4:B3:62:87:B2:76:72:42:1B:59:E1
            X509v3 Authority Key Identifier:
                keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.170.156.0-213.170.158.255

    Signature Algorithm: sha256WithRSAEncryption
         a4:ed:05:9f:18:8c:f5:ae:71:f0:0e:58:d7:89:ab:c9:a7:90:
         5c:0a:9f:31:ba:a5:59:21:4a:33:09:c0:cb:66:31:fd:fb:5c:
         c1:d9:94:d3:de:ac:46:5f:30:c3:c7:8a:27:32:a8:06:9c:84:
         6d:a5:36:8e:0c:ab:ee:74:49:32:bb:aa:12:11:cb:67:ae:70:
         f0:47:cf:e0:01:92:37:e1:a8:67:0f:bf:86:12:32:f3:12:45:
         31:9b:3b:be:3d:57:f8:1a:98:9c:40:f2:51:b1:d4:f1:08:a2:
         4f:37:6e:b4:f2:40:4e:75:47:19:ad:79:35:01:2b:a4:4f:be:
         c4:42:34:9a:49:a8:f3:aa:a3:30:1b:1d:53:bf:23:8f:db:06:
         fc:80:44:f9:6d:de:39:41:0f:17:9e:37:a0:85:f7:36:f4:24:
         24:c6:7b:d1:3d:31:33:df:97:74:15:cb:ed:fb:51:0c:da:b7:
         3b:dd:29:8b:e0:b2:78:db:e0:60:22:16:fa:e2:ce:0f:a1:b1:
         0e:b2:bf:37:e5:a7:e1:6e:5c:68:58:7f:bd:34:03:6b:2f:4d:
         71:60:14:2b:61:ac:d4:ac:10:77:7a:04:ab:2c:b1:3c:b6:6f:
         be:7c:cc:1c:5e:16:98:5e:b5:ff:44:fa:9e:4b:e5:4a:37:18:
         1e:41:a2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:12:08 2026 by rpki-client