Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/DB3E929E199611EF9EBFBF4AC4F9AE02.roa
File:                     DB3E929E199611EF9EBFBF4AC4F9AE02.roa (raw, json)
Hash identifier:          +vR+Qf874FzaB8J72tdgK88qeTknxNOTf4HTIhy1Brs=
Subject key identifier:   81:DE:D7:79:D7:F5:B5:5E:1D:94:A3:19:43:A0:D0:30:1A:0D:E8:BF
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       2858
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/DB3E929E199611EF9EBFBF4AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:38:48 +0000
ROA not before:           Tue 08 Apr 2025 15:53:27 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     132716
IP address blocks:        203.213.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10328 (0x2858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Apr  8 15:53:27 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a487b8-fbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:07:26:47:15:02:b3:fb:bb:bd:77:f6:b2:9a:
                    36:fd:42:d2:a0:44:28:c9:63:77:1a:43:c6:de:77:
                    bb:f4:c6:34:41:da:8d:60:22:3a:dc:09:b9:17:a9:
                    0f:47:22:82:12:3a:78:91:91:8d:47:60:19:f9:39:
                    b8:50:76:a9:f0:2b:d6:9a:8e:ef:33:12:4a:05:89:
                    e2:ed:8b:3d:6c:e2:24:d4:0f:61:a5:10:c8:98:84:
                    80:8a:24:c2:11:8e:4b:9b:21:68:25:56:0e:01:dd:
                    27:b6:a5:31:82:da:f2:25:78:4f:f5:69:f2:ed:49:
                    3b:58:81:92:f6:fe:35:42:18:7e:b0:6b:b6:84:8f:
                    23:37:f8:c7:c2:5c:6b:37:d1:54:05:05:86:4c:4e:
                    11:cb:a4:3f:47:c7:87:62:07:d8:82:cd:18:78:da:
                    8e:29:9c:1a:e0:db:2c:50:29:6f:b2:44:74:50:fc:
                    06:e5:e2:d3:8f:eb:0d:79:3a:2b:ad:df:ff:d3:7f:
                    28:f6:a5:d0:22:e3:ee:a3:9e:40:c4:ac:26:00:f6:
                    d9:e7:16:78:e0:49:0d:4f:84:e4:24:78:fa:3b:8f:
                    c7:d7:3c:0e:eb:79:5c:6f:0f:38:4b:ab:0a:09:47:
                    cb:8c:06:e6:80:e1:a7:98:c9:66:ab:ae:0b:4c:6b:
                    93:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DE:D7:79:D7:F5:B5:5E:1D:94:A3:19:43:A0:D0:30:1A:0D:E8:BF
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/DB3E929E199611EF9EBFBF4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.213.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:be:57:5d:1b:cf:b6:c0:09:66:b1:17:f3:fa:96:ab:03:4e:
         87:46:ab:b6:4a:76:fa:b8:9f:e7:5e:2f:30:87:0a:3d:84:95:
         d9:78:c4:f1:48:df:22:9b:50:c9:d2:3f:69:2b:c2:9b:00:5d:
         ef:b2:3a:2d:41:76:7e:12:f4:d4:10:d3:75:d9:ea:ef:ea:f8:
         41:73:2c:37:07:94:1f:b8:6a:19:40:e1:1c:dc:3f:a3:4e:d1:
         58:e4:d8:dd:e2:02:6a:14:08:f0:fc:42:86:5d:bb:b4:6f:fa:
         5f:88:68:62:d5:a1:c4:af:3e:5a:ad:b1:f6:27:19:b2:ab:6a:
         70:1a:39:1d:e9:b5:e4:49:8d:9b:1c:d0:99:a3:1e:6b:54:62:
         b9:75:8d:77:49:7d:43:df:65:a8:d5:de:f5:a1:d2:68:cd:7c:
         de:f2:a1:6c:71:07:af:55:82:38:60:d5:93:11:a4:6a:2c:6a:
         db:0e:21:f8:90:b3:11:5a:e7:3e:46:f4:1c:cb:cc:b8:59:87:
         54:3e:75:a4:31:4c:0b:01:03:2a:28:aa:11:99:e7:02:30:46:
         03:77:25:c7:e0:e7:3f:a1:9d:89:9e:9c:f0:00:11:a6:00:d2:
         18:06:15:05:6a:b3:46:c1:a2:d1:b8:6c:88:49:e8:4f:5b:ac:
         10:fd:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:22:37 2026 by rpki-client