Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7FCB16B6175111EC8D2A3722C4F9AE02.roa
File:                     7FCB16B6175111EC8D2A3722C4F9AE02.roa (raw, json)
Hash identifier:          tT/fnjB2azP2c1Bes9KkfGycw+0VmrQqgMxit51iAYE=
Subject key identifier:   37:DF:0D:63:08:F2:49:D2:84:2D:D4:64:8C:CE:14:DD:0C:FB:2B:68
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       0699
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7FCB16B6175111EC8D2A3722C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:37:19 +0000
ROA not before:           Sun 03 Aug 2025 00:06:33 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     58780
IP address blocks:        220.101.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Aug  3 00:06:33 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4875f-99d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:b3:1d:ac:80:5f:6d:44:3a:d2:98:5c:52:
                    b4:da:00:84:22:4d:2c:36:28:04:1e:5c:f6:86:73:
                    e5:5f:6c:d9:2a:41:49:f0:2f:78:9f:a9:c3:05:07:
                    4c:7d:0d:6c:74:f8:dd:e5:93:ff:19:a7:14:0e:e2:
                    57:b1:1b:f8:46:bc:7b:a4:de:f6:e9:0e:8d:05:30:
                    db:96:9f:9a:7a:28:b9:23:0a:e4:86:a0:1b:83:46:
                    07:3b:76:e2:ed:4f:79:e0:1d:5e:ed:bb:3a:96:fa:
                    9a:3b:33:01:86:30:15:22:e8:96:1e:b7:3b:06:90:
                    60:6c:17:2a:77:55:56:49:5a:38:14:41:a5:25:8b:
                    40:bd:fd:da:4c:2f:84:fe:2f:11:e8:f6:09:e9:d2:
                    cc:5d:3e:df:f7:60:7b:e4:c3:1f:d4:ba:03:66:7f:
                    34:31:f3:ee:76:52:54:51:90:31:62:fe:54:1f:e8:
                    ca:a7:79:c4:89:b6:61:35:b6:c0:00:b9:09:c7:bc:
                    10:42:95:54:24:a0:53:29:de:a5:71:8a:90:a8:e5:
                    7f:60:b4:6c:9a:98:f2:52:2e:67:14:13:25:e0:e3:
                    b3:2f:d6:e2:f1:64:70:95:28:49:91:b9:99:e3:55:
                    ec:8f:14:64:d4:ed:6a:28:7f:45:fd:ba:b6:1f:88:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DF:0D:63:08:F2:49:D2:84:2D:D4:64:8C:CE:14:DD:0C:FB:2B:68
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7FCB16B6175111EC8D2A3722C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.101.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:ed:7f:76:6c:6a:41:b8:4c:c9:ac:d2:98:ef:48:03:f3:a2:
         65:21:21:73:e3:48:2d:af:31:a2:31:28:3e:01:be:18:ce:67:
         9a:88:4e:d8:ed:79:cc:b5:c7:3e:ab:8e:51:46:6a:d2:af:12:
         d7:87:d9:b8:cb:96:67:9b:28:21:b6:3d:95:6f:57:d4:ee:66:
         6c:93:dc:f7:27:e6:03:0c:28:2f:2c:b2:f5:43:70:0c:8f:a8:
         5c:b6:28:08:2b:22:c3:16:cb:a0:0d:79:f8:91:2b:6d:a8:fb:
         af:4b:01:70:64:c1:90:36:3b:db:bd:07:ff:34:15:9a:5d:62:
         67:df:4e:96:33:40:46:d4:ba:24:14:4c:b2:75:19:10:ab:a0:
         60:9e:9d:15:2a:1f:79:2a:99:1b:7b:f9:3c:6c:75:be:8c:88:
         3a:a5:4a:38:86:c7:1b:66:b2:a0:4e:73:20:b1:71:7d:88:d6:
         77:6c:03:1e:ee:8c:4d:61:22:58:52:14:ad:fd:3e:10:fc:8c:
         76:d9:f9:ba:d0:c9:bc:58:5c:e1:5c:81:e1:3d:ad:3d:be:8b:
         b5:f8:5b:e3:7a:b7:96:ed:39:14:6e:fc:df:c2:a2:7e:da:a8:
         8b:97:b7:fa:25:a0:b2:d6:92:8e:79:0a:a6:97:01:3a:e8:52:
         44:6a:4a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:49 2026 by rpki-client