Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/2B7DA728397E11F19603F3529B833773.roa
File:                     2B7DA728397E11F19603F3529B833773.roa (raw, json)
Hash identifier:          6jcLP2Ff5kNHQzJq73ID1QGceVd0PGeFk+UxM9roUcg=
Subject key identifier:   43:E9:6C:EF:93:52:EB:31:42:B1:D1:AB:1A:35:EF:C7:D1:EC:78:15
Certificate issuer:       /CN=A91647ED/serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
Certificate serial:       58
Authority key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/2B7DA728397E11F19603F3529B833773.roa
Signing time:             Thu 16 Apr 2026 10:25:40 +0000
ROA not before:           Thu 16 Apr 2026 10:25:40 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136597
IP address blocks:        138.252.102.0/23 maxlen: 23
                          138.252.102.0/24 maxlen: 24
                          138.252.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl
                          rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 10:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
        Validity
            Not Before: Apr 16 10:25:40 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69e0b924-2c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f7:c0:b4:26:d0:cc:0c:b3:53:ab:de:04:1d:
                    cf:e5:05:7a:9b:a5:af:63:77:d9:e2:46:88:40:f7:
                    8d:23:b7:63:51:f7:23:c3:b9:7c:25:f0:a7:f7:21:
                    a6:3d:01:f8:ae:fd:42:3f:45:fd:70:d6:5d:e5:c3:
                    da:9d:0e:84:30:a1:28:d6:90:92:ae:e8:81:e3:d0:
                    0f:0b:2e:a3:0e:8b:57:0d:87:cb:5c:dd:ac:7b:fc:
                    af:08:fc:d5:90:84:50:37:fe:32:1c:30:84:0b:b0:
                    42:ab:59:0c:69:83:f2:20:8e:13:b3:82:4c:c0:cc:
                    9e:a2:52:89:2a:95:d5:b0:87:03:ff:32:a4:da:5d:
                    04:76:f3:83:ec:59:67:c8:86:8b:7b:ce:ac:3d:f0:
                    b5:54:78:02:70:91:b8:6b:23:bc:3e:ef:de:ab:f5:
                    57:fb:f2:b8:ae:d0:78:9f:df:a3:3d:19:97:e7:fd:
                    12:a6:b0:af:fd:ee:ca:be:11:13:94:53:91:5d:20:
                    3e:0c:a8:ec:6e:0f:7b:3d:a5:ef:fe:ce:95:43:b8:
                    9d:c8:60:88:d6:40:b4:99:2d:9c:e0:2d:59:af:ce:
                    1a:af:75:10:fa:c4:3f:3a:00:0f:69:b0:87:08:f1:
                    f3:ad:96:a0:67:50:e6:37:e3:85:d2:31:e3:7e:da:
                    da:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E9:6C:EF:93:52:EB:31:42:B1:D1:AB:1A:35:EF:C7:D1:EC:78:15
            X509v3 Authority Key Identifier:
                keyid:D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/2B7DA728397E11F19603F3529B833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:b7:f7:19:60:e1:c0:c0:0c:ab:0f:44:e2:c4:92:a0:2a:d9:
         40:7e:16:a5:02:45:4c:cf:40:c9:d2:c5:e5:34:26:b7:f3:b3:
         f8:4a:9e:2f:6c:ef:93:1e:67:b4:04:c0:b5:6b:bf:f8:0d:37:
         51:a2:8a:a6:60:b8:ba:5b:8d:13:41:ef:19:ef:02:f2:d0:99:
         9e:04:75:2d:0c:5f:ae:23:af:e7:0d:47:fd:49:40:f3:e2:fe:
         52:09:b1:c2:87:4f:49:77:51:65:5c:fe:73:6c:3b:51:fb:2b:
         30:ff:67:18:1e:10:bf:72:68:57:c6:b7:d0:6b:e2:b0:5e:c0:
         c8:7d:2a:c7:5f:9f:eb:f6:4d:3e:fc:90:1b:a8:38:bf:42:10:
         e1:e3:03:24:b8:66:49:d7:d6:55:59:4a:72:b3:35:67:53:b7:
         9a:92:f3:85:e2:dd:86:4c:4f:e1:8b:9c:a9:a3:15:72:a7:f9:
         60:a0:9b:f1:23:1f:14:75:6a:0a:15:35:8c:68:c8:3d:22:03:
         2b:e9:cd:bd:64:4d:a2:ec:92:5d:fb:5f:ef:ca:47:cc:54:5a:
         d3:bf:9e:c3:46:72:f2:de:9d:c0:bf:bc:d3:8f:6c:2e:e0:23:
         28:e5:a1:25:1e:7e:da:52:aa:79:d2:3a:62:19:bd:ee:d8:6b:
         9f:10:d5:2d
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NDdFRDExMC8GA1UEBRMoRDVEMEQ4RTFGMDNENTEwMDg4OUY0MTgwQTY1RjU1MEEw
RDU4MEI4NTAeFw0yNjA0MTYxMDI1NDBaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZTBiOTI0LTJjNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDO98C0JtDMDLNTq94EHc/lBXqbpa9jd9niRohA940jt2NR9yPDuXwl8Kf3IaY9
Afiu/UI/Rf1w1l3lw9qdDoQwoSjWkJKu6IHj0A8LLqMOi1cNh8tc3ax7/K8I/NWQ
hFA3/jIcMIQLsEKrWQxpg/IgjhOzgkzAzJ6iUokqldWwhwP/MqTaXQR284PsWWfI
hot7zqw98LVUeAJwkbhrI7w+796r9Vf78riu0Hif36M9GZfn/RKmsK/97sq+EROU
U5FdID4MqOxuD3s9pe/+zpVDuJ3IYIjWQLSZLZzgLVmvzhqvdRD6xD86AA9psIcI
8fOtlqBnUOY344XSMeN+2toRAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUQ+ls75NS
6zFCsdGrGjXvx9HseBUwHwYDVR0jBBgwFoAU1dDY4fA9UQCIn0GApl9VCg1YC4Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0N0VEL0M5QzYyREE0Q0I4
MDExRjBBNjhFNTQxQ0M0RjlBRTAyLzFkRFk0ZkE5VVFDSW4wR0FwbDlWQ2cxWUM0
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMWREWTRmQTlVUUNJbjBHQXBsOVZDZzFZQzRVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDdFRC9DOUM2MkRBNENCODAxMUYwQTY4RTU0MUNDNEY5QUUwMi8yQjdEQTcyODM5
N0UxMUYxOTYwM0YzNTI5QjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGK/GYwDQYJKoZIhvcNAQELBQADggEBAIG39xlg4cDADKsPROLEkqAq
2UB+FqUCRUzPQMnSxeU0Jrfzs/hKni9s75MeZ7QEwLVrv/gNN1GiiqZguLpbjRNB
7xnvAvLQmZ4EdS0MX64jr+cNR/1JQPPi/lIJscKHT0l3UWVc/nNsO1H7KzD/Zxge
EL9yaFfGt9Br4rBewMh9Ksdfn+v2TT78kBuoOL9CEOHjAyS4ZknX1lVZSnKzNWdT
t5qS84Xi3YZMT+GLnKmjFXKn+WCgm/EjHxR1agoVNYxoyD0iAyvpzb1kTaLskl37
X+/KR8xUWtO/nsNGcvLencC/vNOPbC7gIyjloSUeftpSqnnSOmIZve7Ya58Q1S0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:35 2026 by rpki-client