Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/18193690B83511F08571AD3BC4F9AE02.roa
File:                     18193690B83511F08571AD3BC4F9AE02.roa (raw, json)
Hash identifier:          AcvcEdl+oGy6JYS8+KyLUo4frhDM5qi/jX2RKh1i0Y8=
Subject key identifier:   6B:B6:B3:91:AE:07:56:B1:D9:16:D8:15:C9:C3:AD:6D:05:85:5A:DA
Certificate issuer:       /CN=A91109D7/serialNumber=55FEC9E207B3DB4DED652E4958336F43D9E2739C
Certificate serial:       4D
Authority key identifier: 55:FE:C9:E2:07:B3:DB:4D:ED:65:2E:49:58:33:6F:43:D9:E2:73:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vf7J4gez203tZS5JWDNvQ9nic5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/18193690B83511F08571AD3BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:14:29 +0000
ROA not before:           Sun 02 Nov 2025 21:44:22 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     154275
IP address blocks:        203.100.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.crl
                          rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vf7J4gez203tZS5JWDNvQ9nic5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91109D7, serialNumber=55FEC9E207B3DB4DED652E4958336F43D9E2739C
        Validity
            Not Before: Nov  2 21:44:22 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a3d945-656e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0f:ed:4b:4a:d5:2a:d9:45:b7:5b:5d:5e:e8:
                    9d:18:be:69:e5:0c:b2:3c:28:3a:f2:54:cb:69:b0:
                    b1:c2:98:38:b0:74:46:ca:33:28:3d:9e:ea:1f:18:
                    d4:91:e8:d3:2a:03:77:16:60:c7:9d:a5:5c:f4:2b:
                    58:69:c6:29:0e:72:a5:80:77:28:bc:de:01:e1:19:
                    42:2c:6e:97:0c:95:76:d2:63:f2:01:2c:bc:02:38:
                    e3:26:c4:47:b4:70:0f:ee:c9:15:39:08:6c:93:78:
                    14:90:39:89:e3:79:71:00:59:13:f4:ed:54:03:f8:
                    81:a0:88:e9:2c:81:4e:a1:9a:bc:20:ce:30:2c:50:
                    4a:e5:b6:9d:27:45:6c:0b:dc:59:c9:76:1b:df:f7:
                    24:e0:c4:c1:16:c9:0d:7c:7c:bd:25:34:62:92:99:
                    33:ad:c7:ad:87:35:30:ed:24:5b:7d:8c:64:9e:8a:
                    11:46:e8:7c:46:0f:67:06:07:c0:5f:b8:1b:34:1e:
                    7f:46:35:20:6d:c9:85:9b:5e:ed:77:cd:94:e7:c9:
                    70:01:3f:b9:72:f3:37:39:6c:da:97:5b:6e:56:66:
                    da:f5:fd:41:91:79:d2:d2:ee:22:c2:77:da:49:64:
                    91:33:44:9c:e5:96:eb:38:af:91:ee:07:67:9a:e2:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B6:B3:91:AE:07:56:B1:D9:16:D8:15:C9:C3:AD:6D:05:85:5A:DA
            X509v3 Authority Key Identifier:
                keyid:55:FE:C9:E2:07:B3:DB:4D:ED:65:2E:49:58:33:6F:43:D9:E2:73:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vf7J4gez203tZS5JWDNvQ9nic5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/18193690B83511F08571AD3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.100.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:e7:cd:8f:29:48:c4:47:fd:fe:52:02:29:ce:da:0f:45:1b:
         71:6c:7d:1c:b5:9e:1e:d9:83:8e:c0:1c:8b:d9:47:be:c5:1e:
         3a:c3:4d:59:9d:40:16:b2:4c:51:4f:2f:d6:57:bb:cb:c2:9e:
         b9:4c:60:ff:6d:e3:a4:9b:c8:2e:97:1d:a8:d1:54:93:48:6a:
         51:00:62:75:30:ea:23:dc:71:25:b5:a7:f7:ed:51:a0:4e:df:
         55:df:5b:97:47:fc:0c:98:ce:ce:f8:b2:cf:52:d4:45:5e:00:
         fe:7d:59:1d:3f:af:6a:72:92:4e:bd:3f:59:0e:67:43:a0:0c:
         4c:96:dc:9c:17:1c:22:6a:c2:66:32:3c:bf:2d:1f:4e:82:5f:
         64:1d:dd:63:2b:6c:54:5f:42:46:4a:52:92:59:29:ee:54:a9:
         a7:9b:9b:47:42:cd:c8:a8:28:11:2a:91:1a:7d:b7:ee:51:ab:
         a1:be:d2:85:22:e2:2a:01:0a:a0:4b:ed:53:47:9c:85:5f:dc:
         56:c0:3c:f6:ce:44:49:de:1e:6b:c7:7e:f4:cc:3e:4f:5d:92:
         13:f0:e7:72:78:5c:9d:cf:b5:f0:5e:4d:27:33:7d:29:4d:a0:
         a2:f6:aa:39:d5:6f:58:fe:71:74:e5:86:9e:69:66:6c:fd:cf:
         d4:f0:5d:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:43 2026 by rpki-client