Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/F55EDF36D83811F196330F2A3366CEF9.roa
File:                     F55EDF36D83811F196330F2A3366CEF9.roa (raw, json)
Hash identifier:          Q5Luvv634TjtVQ0y8cyjwW1cfNAAdcsB0tmaTC/pcKw=
Subject key identifier:   B2:0F:86:22:5A:AD:1D:54:35:EC:63:A2:26:1A:22:03:17:1A:0D:B0
Certificate issuer:       /CN=A91332FE/serialNumber=42280B7D058D53A401F4271AAAD68116B9608B5C
Certificate serial:       02
Authority key identifier: 42:28:0B:7D:05:8D:53:A4:01:F4:27:1A:AA:D6:81:16:B9:60:8B:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QigLfQWNU6QB9CcaqtaBFrlgi1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/F55EDF36D83811F196330F2A3366CEF9.roa
Signing time:             Wed 04 Nov 2026 10:17:37 +0000
ROA not before:           Wed 04 Nov 2026 10:17:37 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154741
IP address blocks:        203.31.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/QigLfQWNU6QB9CcaqtaBFrlgi1w.crl
                          rsync://rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/QigLfQWNU6QB9CcaqtaBFrlgi1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QigLfQWNU6QB9CcaqtaBFrlgi1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 09:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91332FE, serialNumber=42280B7D058D53A401F4271AAAD68116B9608B5C
        Validity
            Not Before: Nov  4 10:17:37 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aeb0641-1488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:59:49:a6:01:7b:35:a6:ac:c3:df:65:95:d6:
                    e6:24:1a:aa:3f:8c:3a:21:4d:6c:97:58:e5:fb:67:
                    ef:de:51:a1:12:f6:02:53:56:15:82:21:5e:2f:21:
                    32:2d:9b:f9:a6:a0:83:04:d5:b8:ce:74:32:fe:d7:
                    6e:f0:11:12:de:ca:9e:1c:e9:37:55:72:c2:62:c0:
                    2d:32:5f:be:17:08:fe:ed:a4:f6:7a:7a:11:f8:ec:
                    f6:14:92:e9:7d:9f:08:3c:6b:0d:fd:28:fb:68:59:
                    43:3f:10:4e:76:a9:84:11:b9:86:eb:48:03:58:bb:
                    44:84:cd:b2:da:9c:e4:64:f0:eb:af:25:22:af:db:
                    c3:2f:f3:a4:ca:b7:6d:c9:0b:0a:9c:ff:6e:0b:06:
                    0f:48:ae:dd:80:c5:63:b6:37:ee:4b:61:8b:d7:b0:
                    d0:1c:70:15:b2:24:12:ba:73:7c:03:60:cf:ba:06:
                    9b:64:05:83:99:51:ae:55:45:77:34:60:5a:8b:af:
                    a6:c1:f9:a7:88:a2:00:43:05:b0:37:bd:17:75:e4:
                    da:4c:44:6d:79:47:07:79:9e:01:f5:fb:6d:b1:ec:
                    be:51:fc:85:5c:b5:19:c4:92:01:8b:5b:cb:d6:b6:
                    3e:d2:c7:df:0b:d8:3f:ea:7c:b4:e1:df:a5:6e:06:
                    c3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0F:86:22:5A:AD:1D:54:35:EC:63:A2:26:1A:22:03:17:1A:0D:B0
            X509v3 Authority Key Identifier:
                keyid:42:28:0B:7D:05:8D:53:A4:01:F4:27:1A:AA:D6:81:16:B9:60:8B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/QigLfQWNU6QB9CcaqtaBFrlgi1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QigLfQWNU6QB9CcaqtaBFrlgi1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/F55EDF36D83811F196330F2A3366CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.31.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:98:9e:e3:cd:2b:3e:af:8e:75:74:19:c5:b5:77:3d:bd:ee:
         2a:2f:21:e0:7b:30:9b:5b:db:29:e5:71:b9:46:69:10:78:36:
         17:8d:53:34:2a:34:79:39:8c:a0:ba:1d:83:cc:2c:1d:89:e8:
         4f:59:d8:c6:76:b4:29:15:6c:f7:21:c5:7c:db:23:17:7c:d3:
         3c:86:7a:24:a4:cf:b2:6d:94:f3:9e:41:f4:0c:4a:ff:a6:13:
         ef:f6:2f:0d:44:60:e9:b6:a5:d7:8f:87:bf:f5:b9:90:1e:63:
         2c:65:74:75:7c:7a:58:72:0a:6d:8e:b8:af:42:30:0e:3f:17:
         20:7e:78:dc:ab:5d:f6:fd:59:54:b8:ae:0b:fb:20:48:42:ec:
         74:c7:f8:0b:80:f5:8e:61:cf:c6:31:2f:5f:59:47:78:1e:01:
         11:5f:37:f6:a8:7d:f4:8e:71:bf:18:ca:fa:81:47:63:c2:32:
         bf:f5:ee:7f:5c:07:16:4f:55:dd:c1:a1:d7:88:30:07:e1:54:
         b5:a3:70:5f:8a:95:7a:3d:c1:8f:52:e5:f8:4f:c8:a2:fb:62:
         cd:b3:fb:6d:d9:9f:ec:e4:04:6d:3a:29:7b:38:93:b3:cb:82:
         7b:e9:4d:06:52:7c:23:0d:c3:12:76:78:d1:97:42:cd:6f:73:
         79:39:2f:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 10 23:00:02 2026 by rpki-client