Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7E42E396175111EC8D2A3722C4F9AE02.roa
File:                     7E42E396175111EC8D2A3722C4F9AE02.roa (raw, json)
Hash identifier:          5SeDKnVW+Z2bZrOh/tUD/fazda7G0sNTdN9LtEAWN7E=
Subject key identifier:   03:DD:E5:F7:E4:5D:82:54:BE:E6:B1:B6:D3:08:45:56:8E:23:5F:77
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       068E
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7E42E396175111EC8D2A3722C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:37:09 +0000
ROA not before:           Sun 03 Aug 2025 00:06:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     138475
IP address blocks:        220.101.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1678 (0x68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Aug  3 00:06:23 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48755-2f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:a8:ad:79:df:ab:77:da:70:89:0c:0b:92:
                    a9:7b:11:8d:b0:2a:fa:57:b8:d2:22:84:42:4b:52:
                    d6:ba:41:71:e4:2d:a1:d8:e3:c0:47:42:08:58:f3:
                    3d:36:bd:50:07:b4:e5:c4:a6:81:35:92:41:5a:d2:
                    50:46:0c:82:71:2c:b0:8d:d2:9d:d1:0f:a9:5b:bb:
                    8c:c9:dd:75:2d:03:cc:63:0b:10:8d:97:72:c6:53:
                    f6:91:87:eb:19:4e:b8:9d:33:b1:19:30:ff:5e:3b:
                    86:bb:83:00:a6:3b:73:91:da:2a:52:7d:c3:a9:5a:
                    0a:b8:f4:83:d9:f0:d0:b1:aa:7e:ff:20:ab:c6:43:
                    45:71:5b:c4:e3:45:7b:97:da:5d:72:ba:33:85:8b:
                    14:96:dc:a3:df:47:e5:6d:a7:9e:49:09:af:e9:dd:
                    33:2d:64:6b:7a:14:fe:7a:c7:d2:61:16:77:8e:7a:
                    92:dc:bd:bf:15:d3:69:50:11:5e:2c:3d:4f:3f:75:
                    b3:92:5e:25:82:92:6c:19:ae:be:ed:fe:72:8f:71:
                    fd:62:e5:b7:67:78:f4:1e:e0:9e:1f:92:b3:73:49:
                    40:e8:05:d3:d8:9e:da:75:14:32:8e:db:0e:e6:08:
                    00:db:13:08:ee:db:f9:2a:82:91:9a:90:f6:f8:35:
                    19:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DD:E5:F7:E4:5D:82:54:BE:E6:B1:B6:D3:08:45:56:8E:23:5F:77
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7E42E396175111EC8D2A3722C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.101.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:61:8e:ce:7f:32:1b:52:be:e2:cb:56:5e:db:58:21:c2:09:
         a7:d6:c0:d8:bc:2c:6e:81:35:a9:e6:73:44:53:87:8a:12:34:
         8d:22:b4:45:10:42:c7:d8:de:3a:87:24:11:b1:4d:dc:8f:47:
         db:59:bc:38:07:1c:c0:fe:18:0a:78:8c:b8:8a:15:91:e7:1c:
         f6:fe:60:6a:3c:66:20:99:29:0c:57:1a:27:32:bf:c8:20:43:
         3a:40:ca:61:49:4b:6d:1a:07:00:31:41:44:c7:8d:9b:b1:87:
         3b:5f:4a:79:7b:98:4d:61:71:a0:94:42:f6:80:f8:78:0b:9f:
         80:d0:d2:7f:74:3f:b7:5f:ac:d6:99:7e:c6:66:ac:7a:36:24:
         7e:54:bb:9e:3c:51:a4:fa:0b:0b:d7:6f:47:b8:01:ec:c2:64:
         6b:4a:b0:eb:14:61:9d:ae:6f:73:62:33:b5:a5:1d:ab:c3:dc:
         7c:d2:8e:95:44:1b:81:0f:ef:9b:aa:fe:e6:dd:41:3c:0b:e7:
         d8:9d:91:aa:1d:b6:90:8a:a3:19:52:e8:5c:f5:ea:1b:8c:bb:
         9c:b5:1b:e8:50:2c:1d:90:63:2a:10:a2:27:b0:95:6c:01:c9:
         b4:af:f0:48:1e:45:c3:70:a6:e1:45:da:56:10:a6:4f:23:ff:
         1b:8e:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:32 2026 by rpki-client