Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/791E1D14836E11EEAD2B0731C4F9AE02.roa
File:                     791E1D14836E11EEAD2B0731C4F9AE02.roa (raw, json)
Hash identifier:          EKcqobGPT0YIgB9tuLCYGjh4SgEoxfYLWulspLHjzR4=
Subject key identifier:   FA:89:ED:9C:E0:96:B8:97:B8:19:24:AE:A7:0C:69:CC:87:DB:5F:55
Certificate issuer:       /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
Certificate serial:       01B5
Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/791E1D14836E11EEAD2B0731C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:40:46 +0000
ROA not before:           Wed 19 Mar 2025 04:21:09 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     151833
IP address blocks:        203.223.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl
                          rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
        Validity
            Not Before: Mar 19 04:21:09 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3ed7e-4f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:0e:95:da:fe:50:42:93:c4:0c:b5:a3:1f:
                    82:a3:57:3a:bb:61:e8:6d:6b:8a:4f:5c:18:8a:9c:
                    2a:dd:5b:13:f9:22:bb:2c:4f:c0:89:c6:de:aa:4a:
                    b7:25:cc:d8:85:87:9b:aa:fe:92:fe:88:b8:f4:24:
                    3d:fb:01:80:6d:9b:ae:6d:b7:94:4d:9a:b7:ac:46:
                    5b:2d:08:ae:3a:0a:eb:99:59:30:c2:ef:fc:62:10:
                    1f:95:c0:85:f5:39:f9:c1:76:37:be:f7:3e:2b:b4:
                    3e:07:62:81:1a:f4:84:6b:86:bd:c6:cd:fa:2a:06:
                    f3:35:54:14:d5:70:1b:7e:5f:09:80:4d:31:cc:ad:
                    5e:ef:b8:e4:bc:f6:1b:f8:28:3f:dc:3f:85:8d:fb:
                    a9:be:39:ed:be:57:7f:da:b1:5b:5f:c3:c0:ce:3b:
                    b3:17:7f:b6:00:1f:79:ae:43:5b:d9:9c:63:9f:db:
                    0d:a9:f7:6e:6e:e1:4d:52:9b:fc:c2:06:48:0a:94:
                    11:ec:57:15:63:df:21:d1:c9:88:46:36:65:dd:2f:
                    7a:a5:f3:54:f9:b8:65:6a:77:8e:9a:80:4d:e8:fb:
                    ef:5f:79:a3:24:4f:34:3b:2e:56:fb:6a:cd:ae:10:
                    ef:42:20:cb:5a:a6:11:97:b9:e7:7a:70:c4:19:1b:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:89:ED:9C:E0:96:B8:97:B8:19:24:AE:A7:0C:69:CC:87:DB:5F:55
            X509v3 Authority Key Identifier:
                keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/791E1D14836E11EEAD2B0731C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.223.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:ba:96:10:92:e0:b6:f1:94:41:eb:93:b3:54:04:59:47:c6:
         1e:97:3a:40:a5:01:2f:a2:41:8a:38:43:10:85:69:40:f9:2c:
         4d:4a:be:a5:bc:18:2e:89:c3:6b:32:c3:a8:86:2b:8f:60:12:
         a7:aa:9e:da:74:cc:20:f9:b8:73:96:0e:c5:58:24:e1:41:cf:
         83:aa:18:66:2b:32:9d:f1:9e:93:75:07:1b:f0:b5:6b:02:34:
         3b:5e:31:91:47:c5:61:2b:6e:e5:ba:64:33:bd:d9:42:3a:1f:
         8a:8d:07:a4:98:8e:48:d1:36:de:d2:f7:30:4b:58:ff:34:d4:
         35:a7:24:36:9b:68:07:64:43:a2:36:cc:6e:ce:24:0c:94:85:
         7a:32:76:7e:77:33:6e:8e:4d:ac:58:d2:0e:09:9f:b6:69:11:
         57:b3:11:70:0f:69:e4:dd:85:4c:0b:98:2e:bc:b7:5a:11:d8:
         a4:e7:34:7f:e0:0b:5b:d6:4a:49:e2:69:ac:97:4b:cb:f1:f3:
         34:82:c6:14:be:16:ab:a2:9b:4c:f3:6b:9c:aa:4c:44:43:51:
         9f:6e:54:ea:46:ed:a4:68:18:bd:4a:02:18:a6:99:49:50:b2:
         bf:0b:74:6b:88:cc:9e:d0:08:f7:7f:d0:0f:c3:89:17:96:86:
         65:52:14:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:30:18 2026 by rpki-client