Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/FD398FA0BB5D11ECA62F8674C4F9AE02.roa
File:                     FD398FA0BB5D11ECA62F8674C4F9AE02.roa (raw, json)
Hash identifier:          lCNfDmCO6Vy6uu5QW43aJqJrNK0XuY+KKPY1oeY2SkM=
Subject key identifier:   62:1C:7A:D4:7F:D6:72:6F:8C:66:69:C9:88:F2:F9:9E:09:A9:C3:07
Certificate issuer:       /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129
Certificate serial:       03DC
Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/FD398FA0BB5D11ECA62F8674C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:57:32 +0000
ROA not before:           Thu 07 Aug 2025 01:36:43 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     56286
IP address blocks:        203.222.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl
                          rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91607DE, serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129
        Validity
            Not Before: Aug  7 01:36:43 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3ff7b-08db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:14:bb:3e:cc:eb:a7:17:1c:c0:90:02:2c:cf:
                    78:44:85:47:b9:d3:6f:ed:9c:0a:c8:4b:c2:30:41:
                    91:31:cc:db:e2:51:a0:83:6c:60:46:b8:ea:be:e9:
                    bf:77:bb:3d:5f:95:1f:3e:50:b0:5e:fe:b8:8c:f9:
                    ad:a7:4c:3e:08:38:b9:18:6b:b6:b9:05:b5:10:0e:
                    72:33:5b:3a:4b:71:71:eb:b1:16:02:41:1f:7e:91:
                    d1:09:0f:c8:d6:1f:0a:9f:d4:f6:da:cc:4c:71:20:
                    ad:13:96:a7:17:e0:e8:4e:75:89:9c:90:bd:42:1e:
                    8b:ac:a3:dc:da:fe:61:fc:5e:67:c0:c6:d3:55:91:
                    a7:9e:8b:d1:65:f5:2b:5b:8c:5c:4c:53:d1:37:9f:
                    b5:87:0d:26:65:5e:97:47:d8:3e:68:3d:2b:8a:63:
                    21:27:dd:0f:12:b2:aa:53:65:da:39:d7:f3:65:55:
                    5e:52:c3:dd:5e:44:6c:a2:90:55:7e:55:86:df:56:
                    53:01:e2:7a:bf:54:6a:44:3f:ac:22:39:de:b5:4b:
                    e6:8d:be:22:4b:9a:d2:75:90:8c:ec:ba:a4:18:14:
                    ca:01:1a:96:20:58:3b:bc:f0:01:0b:96:d8:f1:6a:
                    f7:a4:7c:91:08:3a:64:72:db:9b:ef:70:a7:0c:16:
                    d1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1C:7A:D4:7F:D6:72:6F:8C:66:69:C9:88:F2:F9:9E:09:A9:C3:07
            X509v3 Authority Key Identifier:
                keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/FD398FA0BB5D11ECA62F8674C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.222.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:03:1e:41:92:e0:40:2d:d9:c0:57:67:39:48:b4:15:6f:51:
         d6:59:57:63:b6:34:89:b7:b7:b3:ac:49:66:df:b1:53:70:86:
         2a:ed:34:30:f2:21:8d:47:4a:1f:73:77:8e:fa:46:82:e9:77:
         7c:8b:52:e8:d1:7d:02:c9:80:0d:45:f7:e2:7d:25:97:39:98:
         fc:b1:76:ac:8c:7b:85:c4:be:3d:e0:de:4d:e6:f4:62:7f:cc:
         b1:24:d9:65:5a:c0:00:b9:77:a3:b2:03:99:24:cc:a2:c9:b1:
         aa:96:b1:d1:de:35:b8:7e:ec:98:95:30:f9:53:0b:6d:44:6c:
         bf:76:2b:4a:d2:c1:ec:3a:4c:35:39:c5:a8:be:b6:57:f4:08:
         58:bc:85:f3:98:a7:fe:d0:04:b5:28:0c:c2:71:15:73:84:68:
         6b:fc:26:06:b8:fb:0e:97:f9:ff:ec:99:6a:79:05:2c:4c:0f:
         e8:f9:dc:e5:27:ac:51:8e:82:32:bc:ed:c3:dc:d4:8b:7f:28:
         e7:80:fe:41:5c:d0:42:97:79:9a:c1:b1:59:cd:92:c5:72:73:
         17:d2:b3:20:fe:f8:81:e3:25:9a:1f:b7:a1:e0:93:f7:f3:a9:
         aa:d1:89:d8:04:42:d2:ce:b4:36:46:45:bd:f1:51:b6:dd:15:
         37:e1:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:28 2026 by rpki-client