Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7D4AEECAA69D11ED970A2E1EC4F9AE02.roa
File:                     7D4AEECAA69D11ED970A2E1EC4F9AE02.roa (raw, json)
Hash identifier:          8lXFNalp+VAtXH5P3uOSawpn+k9++H+OieLK+bsEIlU=
Subject key identifier:   6D:EE:1E:11:81:4F:1A:05:49:18:A5:3C:31:E2:8D:41:03:3E:DE:0E
Certificate issuer:       /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Certificate serial:       074C
Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7D4AEECAA69D11ED970A2E1EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:09:21 +0000
ROA not before:           Wed 08 Oct 2025 22:24:19 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     134359
IP address blocks:        131.203.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
                          rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1868 (0x74c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
        Validity
            Not Before: Oct  8 22:24:19 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a480d1-8872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b0:44:26:eb:ad:dd:68:aa:95:46:f0:40:ae:
                    26:cf:63:35:3e:e3:4b:18:53:e7:4a:c2:9a:51:c2:
                    ae:81:ce:81:bb:57:0b:e6:77:4b:28:ff:08:d7:30:
                    f5:fe:9a:1a:c4:d7:ec:7d:1b:e1:51:21:ff:d4:1c:
                    7b:37:02:e9:d3:89:75:39:6c:3e:fa:f4:19:37:bb:
                    b0:72:1a:e8:05:87:90:d7:4a:6c:e5:57:3e:c1:65:
                    c7:5e:6b:fa:c6:d2:3a:c4:86:51:6a:70:c7:00:e3:
                    31:55:39:5e:6e:21:e6:d2:ef:09:bc:50:ec:96:9e:
                    33:56:58:e5:ee:e5:6a:b3:0f:63:93:28:29:6c:a9:
                    e5:09:b0:92:72:08:c5:e1:6d:2e:b9:96:c7:93:4c:
                    af:f2:7a:20:24:9a:b8:f7:db:ea:82:e2:59:48:2d:
                    5a:fd:5c:b7:d3:27:59:f5:e0:2b:24:1d:09:77:a6:
                    3d:0c:46:b6:2f:93:1e:2a:3a:b1:80:6f:0a:87:cb:
                    c0:6d:e8:eb:14:d3:0b:b3:bc:52:83:5f:97:90:84:
                    64:19:0a:df:a6:5a:f1:ce:93:18:f7:aa:5a:35:ed:
                    f1:64:44:34:ec:3a:76:dc:c5:96:e4:64:d6:5f:bf:
                    77:f3:3b:83:3b:bf:3d:ef:e1:06:99:ac:3f:34:2d:
                    87:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EE:1E:11:81:4F:1A:05:49:18:A5:3C:31:E2:8D:41:03:3E:DE:0E
            X509v3 Authority Key Identifier:
                keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7D4AEECAA69D11ED970A2E1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.203.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e0:4d:49:ac:26:25:4c:f8:45:da:78:54:69:7e:14:be:c3:
         e8:0d:73:0b:7e:c3:80:2d:47:18:a2:0c:78:3d:95:e9:37:82:
         6c:2d:b2:f4:f2:93:36:ac:05:67:f6:86:2d:af:c4:32:61:3e:
         4c:69:a2:28:24:17:a1:7a:c2:7a:88:1d:81:29:e0:2b:2f:88:
         e6:25:2d:d1:3b:3c:d6:2d:81:b1:44:0c:04:b7:10:cb:62:38:
         b3:7e:b1:11:43:bd:16:70:e1:36:f8:1b:e1:92:43:7d:93:77:
         01:f3:31:d1:88:22:49:83:c6:06:77:1e:2e:12:7d:d9:e2:db:
         05:3c:81:70:24:10:47:25:25:03:67:ea:4c:8a:a9:2a:3d:63:
         74:a4:56:65:55:f7:ab:81:1e:9f:a0:7e:de:3d:08:17:a6:ac:
         4b:36:dc:89:68:e1:26:13:70:98:a4:ca:9b:93:60:83:1a:14:
         a6:af:1c:ec:4e:5b:2d:e9:06:14:57:ce:58:d5:c4:c2:5d:92:
         7a:d9:57:c7:31:e3:d4:45:63:d2:34:8e:fe:ff:6b:fd:91:98:
         e4:f0:50:86:61:97:39:67:76:ff:31:bb:b0:8e:50:f0:f0:81:
         8c:70:93:5d:ec:07:1e:f7:3f:e7:06:71:99:ca:64:53:38:e1:
         ba:53:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:27 2026 by rpki-client