Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/442749147D6311F0BC413466C4F9AE02.roa
File:                     442749147D6311F0BC413466C4F9AE02.roa (raw, json)
Hash identifier:          pZzQ3wcf5NhKLhQ5y0SYHfcdZzM5PRL9cbkeNwOsguc=
Subject key identifier:   22:EB:FE:4A:E7:25:E0:DD:74:6F:82:BD:91:9C:26:9F:32:49:4B:E4
Certificate issuer:       /CN=A914FD01/serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
Certificate serial:       81
Authority key identifier: D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/442749147D6311F0BC413466C4F9AE02.roa
Signing time:             Sat 11 Apr 2026 07:41:47 +0000
ROA not before:           Sat 11 Apr 2026 07:41:47 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     38170
IP address blocks:        203.30.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl
                          rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FD01, serialNumber=D25F8796E70D670E986C6C24773E6B778C360577
        Validity
            Not Before: Apr 11 07:41:47 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d9fb3a-c7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:d8:b6:96:f4:81:a2:f7:e3:09:a0:37:fb:
                    cf:ef:5b:ce:a0:92:f0:68:53:c2:af:80:d5:f5:e8:
                    04:f0:a9:ae:4c:37:04:50:f5:ee:77:11:b4:f6:ce:
                    30:17:1a:b9:a0:98:43:5e:b1:b0:13:10:d0:ee:90:
                    15:2e:8d:3c:74:df:e6:cc:69:4a:07:be:f1:49:a8:
                    b7:c8:86:5c:75:f2:69:ad:87:48:a4:de:2e:b0:c3:
                    fc:33:b1:0d:ad:02:b3:06:a5:97:13:9a:7f:f1:38:
                    8d:61:c6:1e:08:9c:17:43:5d:9b:85:0a:0e:a4:f7:
                    1e:9c:28:d9:cd:51:ea:3d:0f:2e:c4:f7:d0:fa:6f:
                    5b:63:31:d2:3b:f8:27:cf:da:06:5c:bd:af:c4:b9:
                    53:c8:a6:a9:3f:b3:1c:2b:f7:79:9b:68:69:fd:52:
                    46:03:1f:9f:fb:96:03:19:2d:06:88:ed:d7:77:18:
                    c5:22:bd:fb:8c:82:5d:10:00:46:1a:f8:6f:b7:3a:
                    53:90:eb:ff:59:c0:35:6b:28:67:95:4b:be:43:9c:
                    a1:91:aa:64:28:d9:95:60:7c:fd:ec:85:86:43:d7:
                    c1:ba:72:fc:5d:43:f8:0f:e2:d7:ce:bc:c3:3b:7d:
                    6a:ee:33:9a:02:96:47:9a:78:74:7b:3b:f3:fa:36:
                    3d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EB:FE:4A:E7:25:E0:DD:74:6F:82:BD:91:9C:26:9F:32:49:4B:E4
            X509v3 Authority Key Identifier:
                keyid:D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/442749147D6311F0BC413466C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:a5:cf:13:ca:b1:f7:a4:8a:c8:8d:05:f1:37:bb:62:e4:c8:
         95:3f:3f:8e:ae:7c:e5:18:a4:31:69:2e:98:bc:1c:4c:e7:dd:
         a6:a5:1c:83:2f:af:b4:73:55:24:60:89:48:95:34:ee:3f:bb:
         40:c5:88:fb:12:d2:75:eb:71:15:20:d6:46:ee:e8:2b:d1:5f:
         89:04:cc:3c:07:d5:07:90:96:ed:79:cb:87:a8:cf:04:a5:5f:
         98:89:2d:35:fa:7f:62:c2:fd:56:3d:c9:68:10:b6:cc:c8:9b:
         43:e2:ab:ee:a7:c4:ad:ce:8a:5e:b6:01:e6:4d:50:36:03:db:
         8f:98:b5:87:93:10:d5:7d:93:35:6d:c1:90:60:5a:6c:30:85:
         34:21:5b:b7:78:d4:b4:6b:ac:8d:32:d5:99:fb:57:65:b9:ab:
         06:4a:d4:95:33:1f:cf:f8:d8:4d:44:e6:81:b2:1b:44:96:34:
         b8:13:8e:80:02:16:c1:d0:44:36:6a:17:7b:e7:d9:7e:b8:8f:
         7e:30:c7:ad:d3:1a:b7:fe:cb:f6:eb:a7:fd:cf:71:d6:4a:89:
         ed:88:c9:16:ab:63:e6:50:41:16:8d:0a:5e:f7:4f:18:a1:5e:
         fb:2f:e4:5e:c2:10:47:b5:58:b0:c0:ef:67:cb:52:8d:a3:90:
         23:17:9c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:34:20 2026 by rpki-client