Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/91AB3450299911EDA389EC34C4F9AE02.roa
File:                     91AB3450299911EDA389EC34C4F9AE02.roa (raw, json)
Hash identifier:          5RLlV4ijeertGbm3DoWZ53jHcJXnvrYTVH5AHd/5UEI=
Subject key identifier:   78:34:22:62:DA:2E:7E:A2:C5:EB:39:EE:61:41:EB:3E:E2:65:C2:FB
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0BEE
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/91AB3450299911EDA389EC34C4F9AE02.roa
Signing time:             Thu 02 Apr 2026 20:22:46 +0000
ROA not before:           Thu 02 Apr 2026 20:22:46 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     136547
IP address blocks:        203.168.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3054 (0xbee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Apr  2 20:22:46 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ced016-cfc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:2d:39:8d:ce:d5:a3:1f:08:8e:02:df:ae:
                    e9:3a:31:e2:c3:36:bd:36:70:23:e3:b1:d1:63:47:
                    89:16:f1:fc:b0:b9:6f:33:df:2f:c1:44:91:aa:96:
                    ed:19:81:ab:50:74:a5:cf:12:f4:c9:36:f4:9a:cc:
                    f4:d6:76:9a:5b:3b:5e:d2:15:0a:44:96:53:74:12:
                    e2:65:81:73:0c:d4:1c:21:ba:85:e9:42:0f:70:11:
                    e0:9a:57:40:be:ae:a6:54:41:c0:0f:c8:7e:81:1e:
                    93:cf:47:5e:5f:a8:7d:74:ab:e6:a5:7f:63:b3:fe:
                    89:74:a9:75:5a:12:ca:1c:e8:e2:ff:00:ba:3f:37:
                    41:a7:b4:a3:77:49:51:f0:9d:db:4b:66:35:f2:fc:
                    9c:c4:16:cf:a3:4f:4a:9d:58:65:2a:91:ef:38:7a:
                    58:cc:5f:2b:dc:09:7f:f4:26:91:14:5f:4e:69:5a:
                    28:75:92:73:2c:0a:b3:d8:39:5c:f9:1c:d0:c6:17:
                    ac:ca:52:de:d8:62:3e:d5:3c:4b:a8:a9:f8:91:eb:
                    52:97:93:3b:20:54:75:b2:81:c0:ec:06:5e:fb:43:
                    0b:b6:21:2a:99:98:35:34:1b:8a:eb:ef:e4:30:31:
                    34:64:30:1c:40:0d:79:86:92:fc:fa:d3:6d:41:c1:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:34:22:62:DA:2E:7E:A2:C5:EB:39:EE:61:41:EB:3E:E2:65:C2:FB
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/91AB3450299911EDA389EC34C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.168.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:7e:6b:19:4d:32:cd:ab:6c:9f:1c:3a:66:ef:9e:30:e8:b2:
         45:fc:8d:35:e5:d0:d0:b8:b8:10:51:aa:69:80:2c:a8:81:47:
         33:1a:60:a1:4f:98:13:bc:62:aa:c1:88:7d:01:15:53:4f:f7:
         b6:96:bb:f2:55:fe:c4:9b:3a:c6:76:e7:5f:5c:48:a6:c0:3b:
         32:99:27:4d:26:14:8d:77:db:02:af:07:2b:53:f0:18:d3:1f:
         fa:cd:1e:79:be:86:c5:4c:24:e8:51:6d:1f:2e:70:26:39:24:
         c8:12:26:1c:72:70:a8:0e:e3:55:6f:e9:23:9c:62:9f:33:5c:
         98:b0:02:51:e8:54:67:9d:9c:62:f4:ac:13:b9:9a:68:90:d5:
         26:63:aa:0b:fa:3e:77:9e:e7:44:26:f9:58:e9:e7:85:9d:28:
         96:2e:61:65:b9:04:36:99:2d:57:a7:c2:60:fc:d8:e7:ee:f7:
         7e:8e:53:76:b2:e2:72:0b:83:4f:3b:43:e2:b3:dd:98:57:7b:
         89:1d:2e:88:ef:02:34:97:9a:45:ed:ae:7a:e0:46:01:8b:87:
         88:7e:8f:7d:b8:ae:b0:33:9a:9a:e4:c5:42:4e:2a:41:c3:89:
         b5:28:35:be:3f:9f:bb:91:d1:35:52:05:75:fb:b9:ca:a1:e7:
         58:cb:c4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:54 2026 by rpki-client