Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/EFC2CA2489D311F0B3F8631DC4F9AE02.roa
File:                     EFC2CA2489D311F0B3F8631DC4F9AE02.roa (raw, json)
Hash identifier:          gxZFWSG/EQsmYDfM8pL8cu4/7hBAQnAKWm8Ca27ncb0=
Subject key identifier:   29:1D:2F:AC:5A:B1:7E:4A:FE:34:4D:8D:F0:3D:48:45:FC:43:1C:38
Certificate issuer:       /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
Certificate serial:       011D
Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/EFC2CA2489D311F0B3F8631DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:12:25 +0000
ROA not before:           Sun 01 Mar 2026 07:25:36 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     55933
IP address blocks:        103.224.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl
                          rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2364, serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
        Validity
            Not Before: Mar  1 07:25:36 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a43b39-83dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:e5:e8:e4:a5:13:34:7e:ac:da:de:bf:03:
                    47:6e:83:dd:4d:d5:37:91:05:eb:0a:d4:ce:9f:9a:
                    cc:a9:c6:2e:bd:45:6a:33:0a:82:7b:a8:6a:4b:70:
                    94:55:2b:88:3b:23:a9:12:41:ac:d3:12:2b:72:7a:
                    5b:15:bd:05:72:e4:3d:5e:7e:af:ba:83:f5:d7:5c:
                    78:d6:6b:d3:2e:1d:39:78:7b:af:48:19:3f:ec:05:
                    ef:17:7f:b2:33:07:70:af:68:3f:eb:45:e1:92:dd:
                    e8:a2:15:f4:ca:74:e4:09:50:c2:38:75:57:25:22:
                    97:5d:bf:fd:c9:a4:a2:d3:42:cd:52:bd:a9:80:fc:
                    5f:53:70:d1:73:34:60:dd:20:77:cb:19:0f:b0:c0:
                    98:09:b8:d8:29:0d:e0:16:67:ba:7d:e1:f5:d0:cd:
                    b5:be:84:f8:08:cb:0a:15:5c:00:59:7a:1a:1d:02:
                    d4:4a:38:2d:b0:e4:05:dd:14:ce:9b:71:20:c5:6e:
                    6d:41:7a:f2:a7:d0:57:03:52:c4:8b:5f:09:01:59:
                    52:ad:45:8d:fb:49:a0:5d:ec:e8:5f:41:ce:a5:06:
                    1e:ca:9f:4a:20:05:8a:f5:42:8e:4c:0f:be:03:4f:
                    3d:b3:2e:2f:8b:06:31:f0:0c:10:7b:e5:09:74:54:
                    a4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1D:2F:AC:5A:B1:7E:4A:FE:34:4D:8D:F0:3D:48:45:FC:43:1C:38
            X509v3 Authority Key Identifier:
                keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/EFC2CA2489D311F0B3F8631DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:0d:16:58:df:13:1d:8c:9e:72:d3:6e:6a:c1:f0:53:b0:b2:
         58:38:14:2e:b8:d4:24:2b:6c:0c:0a:71:c3:a5:0f:62:81:4f:
         1c:ca:df:f5:20:b7:75:9f:8d:0e:0c:2c:05:27:5b:56:f1:ae:
         be:92:f2:e5:8f:d3:3c:9c:01:86:1d:1e:fa:28:d3:37:ef:db:
         26:97:8a:9e:86:52:ba:77:de:33:7b:5f:c6:77:38:28:e9:72:
         d2:55:48:8f:f4:ab:0a:d6:d2:2a:ef:29:24:26:d4:57:ba:0a:
         c8:d7:99:19:f9:37:16:7c:9b:62:43:80:e5:cd:44:23:63:f3:
         6c:4e:d0:12:e7:d0:14:fa:3a:41:95:96:0b:a1:94:c8:61:7c:
         c9:db:ef:20:79:fc:f5:07:98:0f:b1:25:53:d2:83:d3:e0:f5:
         25:95:f3:1b:17:1a:38:5e:1d:b4:8d:35:2b:7d:d1:8f:ff:01:
         c0:28:5a:7a:40:0d:5a:d7:f2:bf:92:db:2d:c4:56:7e:b9:2e:
         20:72:a3:e7:9e:f0:3f:1f:4b:fd:4b:31:34:c9:7d:96:77:71:
         a0:06:64:e0:7d:47:d0:ff:23:c3:2b:58:cb:30:b9:d0:6a:48:
         6e:a2:68:a7:5c:13:50:87:98:b6:f7:f7:ea:d3:4b:6f:08:ac:
         cd:fb:2c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:30:29 2026 by rpki-client