Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/7CB1102487DD11F0A89FB377C4F9AE02.roa
File:                     7CB1102487DD11F0A89FB377C4F9AE02.roa (raw, json)
Hash identifier:          7Tw7MUa2YgJbW9fiP2QoyuCg4X9lbUhL25iL2lzhjcM=
Subject key identifier:   EA:32:B4:9F:0F:23:F6:FE:00:1A:B4:3E:CE:CD:F7:F4:D2:F5:83:27
Certificate issuer:       /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369
Certificate serial:       5D
Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/7CB1102487DD11F0A89FB377C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:29:12 +0000
ROA not before:           Tue 02 Sep 2025 09:16:20 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     18055
IP address blocks:        192.108.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl
                          rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369
        Validity
            Not Before: Sep  2 09:16:20 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3dcb8-f03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:08:8c:62:10:8f:a9:0f:c5:a5:7a:ca:c1:5f:
                    62:87:72:ea:c2:22:d9:62:9f:b8:00:d9:d2:9b:f7:
                    47:da:3c:2d:d7:4c:5e:33:72:38:d1:f8:db:02:9b:
                    b6:8a:3e:5d:de:d4:ce:d0:16:f7:d5:0d:57:75:dc:
                    0a:77:eb:af:f8:ce:16:77:ee:76:62:b7:0a:c0:5c:
                    ab:50:bc:fe:0c:52:70:e3:f6:2d:f5:47:5d:35:41:
                    50:b5:6f:56:6d:7a:c9:09:54:be:6f:b4:1c:ac:3b:
                    77:ea:05:d0:e3:17:98:23:f4:df:37:56:c4:59:a3:
                    10:32:bc:43:0d:9a:68:cc:f6:c8:d9:57:33:9f:7d:
                    ee:36:48:7c:79:a7:d0:09:88:72:62:b3:ff:db:69:
                    b8:7c:aa:72:1c:e4:2a:99:cf:21:87:2b:41:fa:a0:
                    6d:d5:22:10:8d:a5:85:7e:72:75:88:a8:73:60:8a:
                    bc:51:b8:73:08:ee:a6:9c:39:93:be:d5:10:ad:7e:
                    9d:0c:22:1f:62:3c:05:d2:df:92:73:86:0f:b4:08:
                    69:83:fb:a0:c0:12:d1:02:6a:96:83:e0:3a:69:bf:
                    da:28:a5:18:6f:60:e6:16:6d:28:eb:7d:8a:13:38:
                    54:53:ab:19:98:d2:a7:79:c6:7e:11:b9:3f:b7:33:
                    5a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:32:B4:9F:0F:23:F6:FE:00:1A:B4:3E:CE:CD:F7:F4:D2:F5:83:27
            X509v3 Authority Key Identifier:
                keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/7CB1102487DD11F0A89FB377C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.108.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:6a:0c:d6:c1:63:de:9e:0d:96:78:1e:16:30:0f:86:69:83:
         a4:41:34:30:9f:f7:8e:d1:ae:8b:e0:63:90:33:0c:08:d4:fb:
         50:41:64:1d:c5:a0:ae:51:3b:51:dd:a1:a7:e7:f4:72:f1:31:
         d4:78:04:92:f0:18:c3:a4:88:0e:de:27:91:af:ae:12:9c:e8:
         c9:e6:07:10:cc:a3:72:d7:f2:9e:a7:01:97:82:a0:4b:83:60:
         d3:53:48:1d:eb:ab:ed:53:cc:91:90:33:cc:88:c8:c9:aa:2d:
         94:15:31:c4:05:80:00:61:ed:0c:36:a7:02:12:2e:6f:4d:6f:
         c0:c7:02:58:d7:89:5e:4a:c3:31:28:db:a6:5d:ec:de:1e:84:
         50:7d:12:7c:2a:c5:f9:cd:d6:93:b5:5c:10:ca:a9:3a:b9:9b:
         1e:29:cd:8b:48:d2:a4:60:5d:be:6b:75:a1:4b:61:36:9a:e6:
         76:fe:77:21:1b:d1:31:5d:30:55:28:bb:ca:aa:b8:27:0d:11:
         15:5c:1a:e8:77:9d:49:1f:73:c3:9e:d4:65:74:6c:0d:42:63:
         b5:02:51:48:91:7b:6d:83:d1:27:76:8a:bb:b0:1d:ff:14:64:
         0d:47:7b:d7:bf:88:ae:b6:7f:2c:8e:74:c2:56:bd:1f:6a:81:
         30:53:a7:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:57 2026 by rpki-client