Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/3A0818A6A6C711E9933CF621C4F9AE02.roa
File:                     3A0818A6A6C711E9933CF621C4F9AE02.roa (raw, json)
Hash identifier:          gMM5ROvKnx7iFCdJt1z9g9KyZLDqu98nMWEKixfI54I=
Subject key identifier:   EE:1E:DA:E0:91:E1:E1:5F:C5:BC:80:98:E8:35:F9:D5:BA:41:B3:0F
Certificate issuer:       /CN=A91619BE/serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
Certificate serial:       3559
Authority key identifier: C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/3A0818A6A6C711E9933CF621C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:57:54 +0000
ROA not before:           Wed 02 Jul 2025 14:50:28 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     59235
IP address blocks:        202.57.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl
                          rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13657 (0x3559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91619BE, serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
        Validity
            Not Before: Jul  2 14:50:28 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47012-f546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:ff:90:c0:5e:fa:18:b7:2f:78:9b:73:7d:
                    cf:ea:17:15:c9:5b:f2:df:29:c6:e7:bd:ef:47:a2:
                    03:be:ac:4c:5f:ae:9f:37:b3:ce:d8:d2:42:0c:de:
                    19:4c:c0:b3:e3:8a:4a:5c:17:57:5e:31:26:2e:fc:
                    b4:c1:55:84:dc:03:12:a6:ef:d4:25:0b:ed:1b:61:
                    e8:e7:0f:cd:54:af:64:78:7c:19:be:f7:77:87:46:
                    be:8f:b1:96:ae:16:d2:1a:74:ea:8c:fa:e5:61:0f:
                    b2:60:dd:39:63:e7:46:e4:ff:be:83:f8:f2:d6:fd:
                    03:71:28:4e:22:63:a2:40:70:8a:48:f8:a4:f9:63:
                    e8:41:ed:09:60:cb:b5:a1:7f:2f:5d:36:fa:9a:67:
                    e3:d6:1c:f4:2f:ca:fb:48:be:a1:d0:de:1d:40:1c:
                    68:d8:b6:1c:1f:9a:44:ac:b5:e0:47:96:f0:5c:3e:
                    87:47:f2:d5:e6:7c:3e:8f:d7:cc:89:9a:13:12:ef:
                    0e:68:50:93:39:f1:be:f8:72:8d:98:fe:ea:94:e9:
                    ef:8b:8e:b7:2e:2c:cb:c9:2d:bf:89:5e:62:bf:b1:
                    dc:c4:ce:90:5e:5c:03:09:e5:c4:60:35:f8:2e:d0:
                    83:5d:99:de:05:e3:52:39:97:0f:c6:5f:ef:89:ba:
                    53:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1E:DA:E0:91:E1:E1:5F:C5:BC:80:98:E8:35:F9:D5:BA:41:B3:0F
            X509v3 Authority Key Identifier:
                keyid:C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/3A0818A6A6C711E9933CF621C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.57.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:1f:5c:8f:3e:76:e5:5b:bd:46:ea:f2:90:1e:d2:e9:21:43:
         97:09:72:d4:b5:df:14:68:7a:e4:b2:c2:b0:d3:8d:cd:e6:d1:
         6f:59:09:4f:f6:b6:b6:12:ed:3d:6c:3d:1e:16:ee:87:5a:26:
         96:0d:a0:97:9d:d6:02:c1:22:a2:bd:e0:10:02:3d:06:30:5c:
         a0:e9:ab:9f:08:43:a4:02:eb:66:c1:39:5f:93:25:d3:ae:e5:
         16:2e:99:88:ec:7d:3a:f3:71:8b:04:1b:56:0e:f2:d4:97:d6:
         88:0d:7d:10:41:6f:83:42:34:56:3f:d3:bd:eb:ee:2c:95:1d:
         4a:e4:15:40:90:ed:18:63:51:d7:56:dc:99:40:56:0a:16:dc:
         52:3e:59:5f:19:49:ac:be:cd:f1:6a:6a:d7:ab:44:25:54:83:
         5b:fd:76:5e:79:5f:19:4b:3b:5c:94:18:7b:de:1f:01:0c:d2:
         71:ec:6a:de:b8:99:45:18:ca:b1:c0:36:01:18:fd:05:61:5c:
         d3:ff:42:02:fa:2a:82:5e:0d:94:49:dc:9f:e0:d3:21:76:78:
         b3:2d:12:4c:eb:7a:d4:ee:eb:0f:41:c7:04:4f:b8:29:99:0d:
         b7:5a:88:9b:91:1d:0f:a2:43:7a:7e:04:fc:e3:82:b3:fd:6b:
         3c:0b:d5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:49 2026 by rpki-client