Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/B5DAF292C6A411F092F1EE7AC4F9AE02.roa
File:                     B5DAF292C6A411F092F1EE7AC4F9AE02.roa (raw, json)
Hash identifier:          ZOE+ul17pVmegkb++bJCcAeEY8oGwonKzzJtuNTmLFQ=
Subject key identifier:   B9:A3:66:67:5F:38:02:36:28:75:3F:BB:95:52:80:73:F7:9B:5C:40
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       3601
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/B5DAF292C6A411F092F1EE7AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:56:20 +0000
ROA not before:           Mon 02 Feb 2026 15:11:30 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     147187
IP address blocks:        203.156.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13825 (0x3601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Feb  2 15:11:30 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48bd4-98f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:0f:2b:07:57:4f:f1:f7:39:a1:df:94:82:
                    37:50:f5:51:f0:66:91:13:f0:b5:47:c2:32:2d:eb:
                    32:a2:a4:84:e2:63:83:8a:84:28:60:8d:79:81:2b:
                    47:8c:71:80:ff:9a:ee:e1:8b:b7:89:25:8a:78:d0:
                    66:0c:d8:85:27:5c:c5:38:5e:0d:f8:ae:69:1c:87:
                    d2:6f:4d:4a:d0:7c:15:18:72:12:a4:b6:45:72:0a:
                    4e:99:b0:d4:bf:61:ca:18:e8:95:de:e4:70:2b:9b:
                    fc:7f:cc:15:2e:7c:53:9d:ac:e8:8c:75:f3:6a:22:
                    a8:d1:6e:67:6a:98:2e:89:c0:ed:69:6f:1f:98:1f:
                    aa:3e:fd:cc:a4:f3:97:41:85:d2:41:40:ad:e3:cc:
                    74:75:85:bd:0e:a9:d0:0f:4c:47:15:69:5b:89:b5:
                    8d:b3:8f:60:7d:62:ff:01:0e:9d:5a:e6:18:a6:e7:
                    a0:05:6d:c6:56:81:b5:b8:49:14:0c:78:e0:3c:b4:
                    93:09:51:8e:52:b8:a0:ca:48:8f:6a:ed:02:1d:d6:
                    6e:fb:62:5b:ed:4f:d7:9d:2a:74:c3:df:ae:1e:7c:
                    e7:41:1b:6f:9b:cc:74:6a:3a:fb:6b:b2:95:fa:52:
                    3c:41:9a:ae:d2:2c:09:7f:3c:de:ef:c1:28:3d:b4:
                    f9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A3:66:67:5F:38:02:36:28:75:3F:BB:95:52:80:73:F7:9B:5C:40
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/B5DAF292C6A411F092F1EE7AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.156.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f9:4f:9e:b9:de:17:9e:80:33:74:42:b0:84:35:a9:9e:6a:
         c9:e9:0a:0f:89:ca:f8:cb:74:81:90:96:f3:7e:8f:5a:61:27:
         89:16:41:07:63:82:73:8b:34:0a:2f:62:b2:48:59:c7:46:ec:
         aa:63:62:c0:42:69:dc:5a:71:77:d7:64:5e:93:bb:ed:a7:85:
         e2:e0:c5:9c:0d:40:3c:81:55:8b:ba:f4:e1:2f:b2:93:07:2d:
         5c:40:52:41:c6:5b:34:8a:00:38:e4:0c:d7:e3:f2:f8:31:8f:
         50:38:3b:62:65:2b:31:d9:cd:6d:6d:8a:0d:ed:2e:9d:b9:82:
         11:9d:87:f5:60:b2:64:35:e5:07:bc:20:a0:91:e8:8e:8e:ac:
         19:aa:9a:01:05:07:f7:71:50:75:6f:ae:2d:bb:53:77:28:b1:
         e9:41:d7:9a:53:c4:2b:d9:bb:e2:61:52:76:1a:b6:e8:b2:68:
         00:d9:31:e5:d5:af:b5:6a:96:99:60:19:9d:37:82:eb:06:16:
         a4:8a:cd:3c:d7:05:be:4e:52:f0:25:94:f8:a3:b9:33:61:cf:
         36:07:54:c9:39:07:8c:57:0a:58:93:9e:d3:60:44:26:2b:b9:
         a8:4c:16:bc:11:48:07:dc:07:a5:de:b0:c8:e1:02:b4:c3:8e:
         fd:c8:26:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:25 2026 by rpki-client