Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/5D822954368F11EAB3D4CE7FC4F9AE02.roa
File:                     5D822954368F11EAB3D4CE7FC4F9AE02.roa (raw, json)
Hash identifier:          9JumQFAgpUzEW74gFO5Z3fmZifxROGpVHgiZnhG6Tag=
Subject key identifier:   23:FD:7A:DD:FF:4F:D6:27:86:E4:9C:DE:EC:FE:20:75:98:9F:05:71
Certificate issuer:       /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813
Certificate serial:       0BEB
Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/5D822954368F11EAB3D4CE7FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:02:15 +0000
ROA not before:           Wed 08 Oct 2025 19:19:53 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     132683
IP address blocks:        203.161.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl
                          rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3051 (0xbeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91250FA, serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813
        Validity
            Not Before: Oct  8 19:19:53 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a47117-ad9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:91:41:3a:04:c9:ee:b7:98:3f:5a:a5:8f:
                    52:7b:b2:5d:64:d0:d2:b1:87:69:63:68:93:95:24:
                    24:3b:29:6d:21:ce:55:3e:3e:bc:c2:72:91:19:ba:
                    99:33:98:af:73:f1:4c:32:2e:cf:e4:d7:87:f3:2b:
                    81:2d:cc:7b:d8:ab:a6:f0:4f:9f:02:aa:9f:fa:8b:
                    8e:f7:ad:ab:f0:c3:0f:12:93:cd:c7:51:a0:cc:c9:
                    29:fb:a9:45:68:62:a8:e1:f6:eb:02:8d:8d:d5:b7:
                    ce:11:1c:56:de:3b:d0:14:64:75:94:36:d2:f1:f3:
                    e6:99:76:4b:17:8d:fc:fb:29:55:c6:85:32:a0:d7:
                    93:33:1d:6a:4b:28:ef:cf:ea:6a:91:5b:1a:87:e0:
                    d6:97:85:2d:79:25:d0:13:ea:b9:43:b4:e3:ee:c2:
                    82:69:67:e8:ac:54:d6:23:06:03:51:37:2a:77:76:
                    1f:53:a8:c4:32:d1:a3:76:8c:e6:02:b1:74:a5:d5:
                    bb:2b:52:15:f8:56:68:65:8c:3a:ac:c5:22:cc:3b:
                    38:c2:f0:68:53:39:f2:3b:f1:63:89:9c:10:3f:b2:
                    b3:1f:27:ea:b4:97:c6:b8:3a:1a:08:89:55:92:a1:
                    af:2a:54:55:e1:2d:20:42:74:58:cc:23:03:9c:72:
                    cc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FD:7A:DD:FF:4F:D6:27:86:E4:9C:DE:EC:FE:20:75:98:9F:05:71
            X509v3 Authority Key Identifier:
                keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/5D822954368F11EAB3D4CE7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.161.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:ba:a9:fd:8b:ab:6c:ec:5d:f0:ad:54:87:ed:bb:ef:7d:a4:
         9a:03:f7:92:65:d0:ca:78:3f:9f:3e:e2:e5:97:db:76:8d:f4:
         f4:56:7e:59:28:2c:35:a7:f0:2e:40:c1:5b:15:ae:17:43:8f:
         6f:eb:3f:27:c8:60:8f:65:a7:8a:f1:e1:d1:2f:1c:94:95:aa:
         2a:c4:7f:93:88:e9:c0:df:95:d1:6b:00:a0:28:2b:b3:be:03:
         dd:00:98:10:c3:dc:ed:59:4c:42:a7:15:cd:1e:ee:0f:38:26:
         fa:c1:8e:ab:6d:dd:0c:59:52:2d:2f:ab:e7:69:7e:a0:41:79:
         7c:60:3e:a2:64:57:04:ac:c7:74:0f:4e:73:36:15:38:2a:53:
         89:ef:63:7d:45:da:a1:90:02:d5:ee:04:e1:97:83:98:8f:3a:
         07:03:d2:88:6f:cf:ac:da:97:57:af:41:49:11:f1:8d:43:79:
         f7:79:f6:f8:04:34:f8:47:a1:fd:d3:26:3a:b9:17:95:a1:96:
         a9:b3:39:7a:88:66:5a:8c:e2:75:be:30:fc:0a:ca:0a:0a:8a:
         92:22:9f:37:92:d1:d2:b8:8d:42:fb:37:a9:1b:9a:33:4d:89:
         a8:0c:ca:c8:dc:a7:f1:5c:10:f8:21:df:05:bc:03:ad:49:bd:
         7e:1b:f1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:12 2026 by rpki-client