Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/402418C08DB811E98ACC9F7EC4F9AE02.roa
File:                     402418C08DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          Dx8o50rE1OKe1inVw3oUo0yNA4V99kP9sCKq9GKRraw=
Subject key identifier:   0A:56:48:94:19:83:C5:BC:8A:E6:C4:69:4D:37:A1:F1:1F:0F:B5:4E
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       367B
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/402418C08DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:47:55 +0000
ROA not before:           Thu 24 Jul 2025 14:50:21 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135620
IP address blocks:        203.155.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13947 (0x367b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 24 14:50:21 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a489db-6a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:66:d7:98:17:4f:08:2d:93:bd:75:a6:03:
                    6b:86:7d:a1:1e:47:f7:b4:05:48:89:f2:1f:37:83:
                    50:4a:94:e0:4a:60:53:88:6e:fa:fb:1a:a4:b9:93:
                    28:56:64:4d:1c:df:67:5c:08:07:3f:89:4a:87:5a:
                    e7:a6:7b:43:45:d7:d9:d8:e3:7c:1d:9e:b3:c4:42:
                    f7:5d:25:7d:63:55:99:a2:4d:29:06:d7:be:f8:ff:
                    c6:ba:4a:23:1e:78:21:95:d3:61:6e:bb:05:d0:54:
                    46:eb:a2:4e:58:33:f3:72:50:8b:09:ff:2c:c1:9f:
                    4b:93:14:bd:2c:28:8c:39:cd:4c:b3:8a:7b:10:bc:
                    d1:d8:89:fd:d1:a8:1b:74:dd:1a:77:44:7b:5f:d6:
                    f2:fc:5c:00:f9:aa:3a:a9:94:ad:59:3e:fc:6a:6e:
                    4f:ff:3b:33:2d:d8:5f:96:2f:ec:2e:b1:46:c4:a2:
                    88:78:f1:bf:b9:6a:ad:ab:63:d9:01:31:49:77:8b:
                    5e:80:d8:0e:12:c9:85:e6:ba:76:9d:6d:00:64:75:
                    dd:ee:39:1b:f5:f9:c8:4a:04:04:c2:5d:12:26:cf:
                    4c:24:d8:55:ec:4b:49:7f:72:b7:7a:5b:05:5b:bf:
                    1d:cc:d6:b0:6d:3a:e7:de:1f:ba:2c:42:07:52:fd:
                    41:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:56:48:94:19:83:C5:BC:8A:E6:C4:69:4D:37:A1:F1:1F:0F:B5:4E
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/402418C08DB811E98ACC9F7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.155.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:ff:65:1d:03:6c:e6:9b:d8:6c:2d:1c:62:36:d5:61:fd:89:
         97:38:d3:11:8e:b3:b5:24:4e:40:44:de:bb:54:4d:f5:90:31:
         19:0b:37:33:43:67:bc:68:c5:ac:d3:a6:7e:0e:da:40:4d:21:
         db:f5:36:47:eb:4e:7b:fa:a7:36:8e:e6:50:36:c8:d6:fd:5b:
         71:c2:68:2f:b9:c2:75:65:a8:bd:22:9f:ff:7e:1b:01:5d:7e:
         1a:bd:17:e9:67:6d:dd:01:93:1a:20:21:bb:f3:91:57:c5:9a:
         cb:8d:05:45:0a:4c:59:fd:84:b7:eb:68:24:91:df:15:ee:eb:
         77:66:04:78:0b:93:b6:c0:35:ca:76:c1:49:94:32:23:ce:c7:
         9c:72:67:ec:45:c9:b3:88:8f:bd:75:e7:ca:30:ee:1f:bc:49:
         ab:ad:6f:36:a3:0b:6f:1b:62:4f:79:5a:9c:96:ff:3b:27:d2:
         b5:c3:5a:ca:1b:97:54:7d:98:f7:51:3b:52:cd:7b:02:ae:52:
         2f:42:a7:65:d7:e7:74:69:e8:1d:ff:69:e2:fd:7a:de:b6:13:
         76:db:3d:ad:69:8f:d8:5b:6f:60:45:73:5e:54:13:81:85:e4:
         27:ed:5a:6c:c7:12:b1:cd:f2:17:65:52:2c:8e:29:d2:1e:16:
         3c:6c:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:04 2026 by rpki-client