Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7DAE1400175111EC8D2A3722C4F9AE02.roa
File:                     7DAE1400175111EC8D2A3722C4F9AE02.roa (raw, json)
Hash identifier:          tX0MTPWA9P2CY1G2KCJQGGM6TFNQMY0kmhuwfNbndgE=
Subject key identifier:   AF:57:0F:5C:19:8C:15:D3:A5:2D:D1:42:FF:BE:C8:00:A6:AF:A7:7B
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       068C
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7DAE1400175111EC8D2A3722C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:37:08 +0000
ROA not before:           Sun 03 Aug 2025 00:06:22 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     134065
IP address blocks:        220.101.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Aug  3 00:06:22 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48754-db68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b7:74:60:da:ce:a9:e3:b9:58:71:32:4f:63:
                    25:9d:ec:65:17:20:8e:14:fe:34:7e:12:48:2b:4f:
                    a1:7b:1f:7a:0b:8a:5f:7e:8a:6e:0f:08:0c:ee:bc:
                    ab:65:74:cc:0e:14:6c:9a:43:82:99:f5:0d:5b:34:
                    79:47:93:a5:7c:45:6e:34:da:9f:3d:0d:5c:69:c3:
                    78:db:7d:be:c8:15:3e:8a:3e:44:b9:24:76:f4:cb:
                    e9:21:9d:42:89:f8:21:3d:13:30:74:a3:5a:a1:3f:
                    f4:e5:8a:0a:46:d1:00:72:06:5b:cb:2e:15:0a:dd:
                    fa:8c:e3:3b:92:53:40:ce:12:b1:8c:25:d9:a1:46:
                    7b:7c:8c:7b:63:aa:b0:5c:1d:06:9d:21:38:d9:6a:
                    50:42:7b:37:20:fd:38:5a:6f:9d:9b:af:c4:2a:0d:
                    30:d1:f7:9a:0c:3d:4e:93:2b:80:46:f2:61:34:15:
                    82:e1:e0:9b:a8:bc:48:2a:3f:b2:fe:90:ec:7f:6a:
                    dc:bf:4d:c9:79:de:4e:0f:88:43:0b:e5:2f:bd:63:
                    58:58:95:ef:98:2c:c6:4b:93:17:db:c4:f1:ca:7e:
                    7f:68:79:12:4c:f3:35:95:71:de:d2:a6:47:dd:a0:
                    51:d2:44:45:56:c8:75:b1:e8:4a:81:4f:61:d1:14:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:57:0F:5C:19:8C:15:D3:A5:2D:D1:42:FF:BE:C8:00:A6:AF:A7:7B
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7DAE1400175111EC8D2A3722C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.101.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:83:c0:e0:c7:2d:65:12:4a:6e:fe:f4:6b:aa:45:31:44:3a:
         06:82:8a:f0:e9:7b:e6:e9:6d:f5:ea:6c:c4:b6:63:09:b5:b5:
         7b:82:28:3f:e8:a5:76:f4:c2:fb:4b:4c:67:01:f0:52:91:d7:
         7f:42:18:ae:64:4f:6d:6a:b8:db:87:a4:20:2d:cd:af:f0:54:
         2d:84:5d:8b:f7:56:9f:69:61:31:fc:67:85:af:7a:82:ae:71:
         cf:5e:92:c9:49:1a:a3:9c:d2:63:d6:32:38:49:96:e9:a4:66:
         98:32:4e:e8:39:ce:3f:c7:7b:39:7b:d8:06:fa:16:02:6d:de:
         89:f7:0d:7a:8c:bc:de:0d:d7:5f:03:ac:ea:5c:7a:fb:71:9a:
         7a:e8:64:90:ef:3b:47:3c:3d:3f:ac:b6:15:ba:a5:66:43:8f:
         9a:6c:85:79:e1:4b:97:e8:ca:48:a5:dc:d1:50:5d:72:a1:e6:
         02:e8:61:b4:29:ae:b5:eb:d7:ad:d0:80:e4:5a:a2:28:fd:66:
         8e:a1:fb:1c:1c:cb:64:d2:5f:32:81:0e:4f:c5:c0:7f:2a:dc:
         7b:09:fa:c6:5d:ab:e6:02:f4:a7:58:33:01:25:03:10:97:d0:
         71:4b:bb:03:6a:15:9f:5e:f6:f9:a2:51:b3:f5:6a:4e:48:4a:
         1e:56:fd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:50 2026 by rpki-client