Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/93D86AAED76611EF9C982924C4F9AE02.roa
File:                     93D86AAED76611EF9C982924C4F9AE02.roa (raw, json)
Hash identifier:          5LEwZVP3gn1Crzmr/BGvDiXU9AXSe9nHWV3J4mCLHgU=
Subject key identifier:   8A:10:AB:A0:20:97:05:A9:CC:13:8D:7E:2C:91:CF:9F:19:A0:2A:55
Certificate issuer:       /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Certificate serial:       CA
Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/93D86AAED76611EF9C982924C4F9AE02.roa
Signing time:             Tue 03 Feb 2026 06:28:50 +0000
ROA not before:           Tue 03 Feb 2026 06:28:50 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        203.55.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl
                          rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 05:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
        Validity
            Not Before: Feb  3 06:28:50 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=698195a2-d22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:5a:01:55:59:01:6e:c8:9d:9b:0f:d2:51:
                    3d:14:22:c9:18:e2:ba:a7:ef:7f:f5:fb:7f:f0:d7:
                    8f:29:50:36:dc:12:54:0f:67:1b:6d:45:f2:d7:34:
                    62:0f:84:c2:e3:86:e8:d8:7b:da:e2:26:59:11:7d:
                    66:83:72:3d:e8:6a:1c:ef:49:b6:1f:27:b0:a6:87:
                    a0:92:bf:85:d1:d4:7a:38:3c:ac:ed:80:5a:eb:f4:
                    73:49:54:0c:3b:e6:84:88:e1:a1:80:f8:ff:64:c2:
                    aa:56:88:c7:51:a9:34:bf:53:c4:61:34:4c:30:8c:
                    d2:e8:c9:95:0b:b0:b6:b6:35:6c:59:06:af:9d:a8:
                    15:d4:34:b1:c9:e8:7f:a7:84:c2:3b:e4:3f:13:3b:
                    13:57:69:6a:80:c6:1f:dd:c8:00:1e:8c:2c:41:c7:
                    58:c0:69:90:52:cf:7f:a8:dd:39:d2:e4:a8:c9:64:
                    1f:a6:ab:ea:5a:c2:05:62:ae:76:ff:57:b9:90:c5:
                    1f:00:14:bb:2b:73:90:41:2f:0d:9e:73:39:4e:01:
                    80:a8:3d:40:e8:60:95:99:07:a2:24:b4:c5:fa:27:
                    84:36:c5:ac:fd:59:94:9d:20:11:73:dd:c7:7d:21:
                    53:9a:22:24:56:ff:da:0e:a3:7b:a9:ea:63:95:d8:
                    de:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:10:AB:A0:20:97:05:A9:CC:13:8D:7E:2C:91:CF:9F:19:A0:2A:55
            X509v3 Authority Key Identifier:
                keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/93D86AAED76611EF9C982924C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.55.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:38:ba:a1:fc:56:a6:9f:91:dc:44:38:09:ff:82:d0:67:6e:
         9e:15:7a:a7:14:86:0f:dd:64:77:dc:16:8f:ce:c9:8a:be:31:
         1e:aa:6d:86:41:1c:4a:f1:0f:c4:94:66:91:54:f4:6d:a7:a2:
         96:08:95:fe:dc:02:48:45:59:0f:6f:70:8a:39:25:ce:f8:4f:
         71:f2:ab:af:8b:f6:60:b9:a5:73:4c:10:42:fa:3e:7e:b2:38:
         41:4b:8e:d4:0b:d8:16:ea:f7:ba:3c:e6:93:ce:32:e1:27:a3:
         f9:b1:fa:23:2c:77:b9:ab:4d:eb:cd:b1:a9:86:73:6c:64:ef:
         8e:84:cd:9c:67:d5:9c:c3:cf:3b:a1:af:c3:33:ba:a7:2c:d3:
         a5:c1:fd:32:da:b5:3d:dc:d3:9b:9c:77:5c:92:b1:29:ba:7d:
         ec:83:66:f9:19:0d:05:d3:85:a1:ca:b8:9e:d1:39:f9:79:27:
         26:78:c6:39:c6:8d:9e:09:5a:04:34:8e:67:13:77:78:85:96:
         cb:97:eb:9f:7a:e9:b1:51:58:5f:f8:24:8a:f2:17:bd:7d:76:
         7d:9e:a2:15:ec:a7:d7:cf:a9:98:42:ac:d3:42:23:19:ce:6e:
         c2:c2:44:33:bb:ba:c2:5e:0f:68:fe:5d:65:78:7e:a2:12:a7:
         96:e6:99:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 14:11:00 2026 by rpki-client