Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/8205A466A73111ED97576186C4F9AE02.roa
File:                     8205A466A73111ED97576186C4F9AE02.roa (raw, json)
Hash identifier:          rtjDnkP1XJTCpkI2J/yJ+McKzjgNtJldb8Vx9S87ecc=
Subject key identifier:   F3:CE:A1:0F:49:38:66:0E:33:15:62:F7:41:44:F0:FE:85:BD:24:ED
Certificate issuer:       /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial:       0879
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/8205A466A73111ED97576186C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:44:28 +0000
ROA not before:           Wed 08 Oct 2025 22:24:36 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     45459
IP address blocks:        202.89.57.0/24 maxlen: 24
                          203.89.178.0/24 maxlen: 24
                          203.89.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
                          rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2169 (0x879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
        Validity
            Not Before: Oct  8 22:24:36 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4890c-edaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:63:c6:99:0f:a2:bc:44:06:0f:6d:44:1b:8e:
                    d2:31:50:24:54:ad:8e:af:23:5e:f7:3d:62:ee:c3:
                    20:a0:e6:ba:f5:8d:06:41:19:c5:e5:c5:32:88:2b:
                    af:69:f5:43:54:32:9e:d2:c1:9e:e6:13:05:ac:a6:
                    af:4f:34:c4:56:3b:19:16:71:5e:00:9d:32:81:1a:
                    f1:b2:e9:d7:78:b7:45:51:0e:3a:39:cb:e2:45:f9:
                    74:24:27:36:f4:86:72:6a:26:83:19:4c:07:aa:50:
                    1a:9b:e4:e6:1c:d1:6c:33:a8:b5:f3:64:e1:89:a4:
                    eb:66:07:69:82:1b:06:26:d6:fb:65:c8:94:91:c8:
                    e0:61:cd:8f:4c:0d:dc:d7:62:10:a2:b2:29:45:82:
                    40:62:76:4f:b8:5d:ca:a9:2e:6d:d7:ae:d1:36:00:
                    18:42:21:a6:8c:63:89:09:75:dd:71:c3:01:f9:cb:
                    86:17:9e:d1:c8:91:6f:01:93:21:dd:19:83:81:c4:
                    7f:01:6a:55:21:d9:b6:8b:28:71:c7:a9:8d:b5:f9:
                    9d:9f:6f:65:42:be:fa:09:c2:fb:2d:f1:41:0d:61:
                    60:67:b4:3d:21:3f:1d:5a:b3:40:e8:27:47:84:07:
                    1f:5e:0d:32:67:46:78:41:5d:b8:35:3e:c7:1f:48:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CE:A1:0F:49:38:66:0E:33:15:62:F7:41:44:F0:FE:85:BD:24:ED
            X509v3 Authority Key Identifier:
                keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/8205A466A73111ED97576186C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.89.57.0/24
                  203.89.178.0/24
                  203.89.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:56:47:24:e4:b9:ec:86:06:16:f0:0d:4b:c5:40:85:35:67:
         f5:60:84:55:2b:ef:3b:d5:9e:66:6f:b6:8a:cd:74:56:eb:b5:
         ef:39:7f:2e:c1:30:d5:74:f3:b4:bf:93:23:57:e0:54:a7:bb:
         c6:a7:b5:2c:ba:0b:05:8c:ce:04:b6:90:b7:98:dd:f1:eb:e2:
         ea:a8:87:bf:79:72:14:a8:94:cc:9a:b3:f6:10:79:46:bf:8f:
         a5:09:7a:90:10:de:38:7a:cd:a8:f9:97:5b:af:cc:5e:ea:75:
         a9:39:fa:26:c3:42:45:ab:a0:78:de:7b:7b:c3:f4:1a:69:f7:
         e4:63:19:9d:3b:52:49:c8:88:5b:8b:ae:64:ab:af:29:bc:56:
         5d:6a:3b:ec:31:4c:98:81:78:ea:b3:bf:df:34:84:f3:ad:f2:
         6d:7e:f0:e3:7c:59:26:94:86:92:a4:b9:8f:7c:2f:9a:b1:91:
         8a:2a:1a:91:b8:54:1f:2b:87:8b:4d:bc:35:ba:64:20:34:f3:
         9b:fb:3b:ba:f4:2f:61:2b:29:59:46:12:1a:80:c9:d3:c7:40:
         1a:55:f7:88:1b:a1:97:45:96:c2:54:19:1c:5f:54:7b:64:ff:
         b1:e5:86:00:ad:96:3e:01:36:54:99:a9:9e:6a:f4:f6:11:a5:
         c4:8c:e3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:43 2026 by rpki-client