Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/9F9EE58C783011F0B097E07BC4F9AE02.roa
File:                     9F9EE58C783011F0B097E07BC4F9AE02.roa (raw, json)
Hash identifier:          fSYltpxk2u14lPvWhCXB9QKuMuDj8l4c6pcDEmZNiXo=
Subject key identifier:   2E:EA:6C:C7:4A:BC:81:E4:09:65:72:6E:D1:BC:96:DA:EC:65:65:F3
Certificate issuer:       /CN=A915E402/serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
Certificate serial:       76
Authority key identifier: F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/9F9EE58C783011F0B097E07BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:20:53 +0000
ROA not before:           Fri 13 Feb 2026 06:26:34 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     140637
IP address blocks:        203.31.52.0/24 maxlen: 24
                          203.31.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl
                          rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E402, serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
        Validity
            Not Before: Feb 13 06:26:34 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a42115-d425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:79:50:fa:6c:9e:46:5d:c9:3c:e3:e7:63:
                    53:4b:9e:9c:d2:33:11:8d:f6:5f:59:9b:13:44:b7:
                    2b:11:dc:ce:a4:18:72:1d:bb:22:61:73:4d:7e:f1:
                    96:db:f7:b2:8f:26:b3:99:df:74:af:fb:8a:54:94:
                    09:75:96:1d:08:6d:b7:50:7f:d3:5f:81:19:8d:dd:
                    52:62:8a:28:3c:17:32:57:f7:49:c8:38:12:e5:bd:
                    ff:cb:59:19:bf:b7:f1:0c:34:d5:18:b0:63:68:09:
                    82:f7:7d:41:06:1a:ee:cd:4e:95:ca:2c:e7:3b:e1:
                    05:1f:7e:92:e1:56:f5:28:a6:cd:78:96:b2:a4:91:
                    64:84:4f:2a:84:30:eb:01:2d:93:68:19:86:5f:be:
                    f1:84:14:5c:8d:76:37:43:17:83:4b:44:9e:f4:94:
                    2b:b6:8a:c0:27:80:28:ce:fd:cb:4c:9b:07:f2:e7:
                    3d:84:b2:44:ca:bc:39:78:8c:27:bd:61:fc:70:02:
                    d1:3d:25:bf:fb:ad:73:f2:76:1f:82:82:49:3a:40:
                    1a:10:b0:be:bc:fd:7b:cf:90:e6:d9:76:59:fb:4b:
                    f0:25:9a:ea:83:04:1f:37:b9:d6:14:9f:17:71:92:
                    b1:71:9a:47:d6:08:f7:ee:f5:ff:a0:e5:aa:21:c5:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EA:6C:C7:4A:BC:81:E4:09:65:72:6E:D1:BC:96:DA:EC:65:65:F3
            X509v3 Authority Key Identifier:
                keyid:F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/9F9EE58C783011F0B097E07BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.31.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:61:2c:8e:44:1a:47:a8:db:21:30:2a:85:92:a7:41:f5:5c:
         af:b6:4a:90:a6:d3:c1:23:06:5a:3b:79:39:6f:90:5e:5b:84:
         96:88:d0:5b:16:8d:ef:9a:c6:d1:2a:58:89:b9:c9:88:5f:cb:
         5e:40:78:5b:3f:e3:af:5c:6d:d7:7d:e5:70:39:06:74:7d:7e:
         7c:f8:c4:03:53:a5:6f:a2:24:36:38:fb:d2:67:9a:99:31:ac:
         22:24:a3:df:a4:bd:4b:86:ca:5f:c8:ec:13:a8:60:03:50:ab:
         a7:40:56:07:f3:87:c2:30:f4:af:27:0c:7b:40:4e:c6:a8:6c:
         99:6e:c0:b5:14:5d:3a:21:a9:c3:63:35:ca:88:51:9a:e9:94:
         e0:a6:5c:20:6c:a6:03:fd:bf:f4:71:53:4a:80:47:3c:ba:01:
         58:10:93:50:7b:81:82:87:cd:01:22:ad:d6:bf:06:4b:c4:6d:
         5c:98:df:92:ca:4a:54:b2:ca:9c:39:21:5d:66:26:50:e0:b6:
         b3:7f:75:29:3c:e0:8e:c3:11:b5:70:f3:6c:30:88:ff:7e:24:
         73:f5:7f:be:2b:79:02:ce:3c:ee:53:bd:84:fc:97:2e:bd:c0:
         8a:24:b6:2a:d2:04:6d:10:87:1b:3f:d5:d7:78:d5:24:de:aa:
         fe:16:63:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:01 2026 by rpki-client