Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/439638A88DB811E98ACC9F7EC4F9AE02.roa
File:                     439638A88DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          T1/3yr80tQn2wXUoaI6SgP3gcD+G/JWjJxOxFcBZOzQ=
Subject key identifier:   93:F8:E7:9A:66:7D:05:4B:9B:98:24:B6:BE:B4:B0:8F:52:9B:F4:F4
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       3685
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/439638A88DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:48:04 +0000
ROA not before:           Thu 24 Jul 2025 14:50:30 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     23683
IP address blocks:        203.155.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13957 (0x3685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 24 14:50:30 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a489e4-8fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:ed:74:ae:ab:fa:b1:93:8a:41:ae:c5:63:
                    b5:4a:9a:4e:14:96:4c:49:3c:46:2d:7a:51:43:65:
                    d1:a2:a6:a5:31:db:b5:a9:0b:9f:d5:92:b7:34:1b:
                    eb:2b:a7:c1:a6:5f:ce:39:ba:e0:e8:76:b1:27:fd:
                    96:f3:f2:05:27:0b:58:a8:2e:61:34:bb:68:e5:5f:
                    fe:73:f7:91:18:ee:5d:6b:49:0f:bf:72:be:6e:95:
                    14:40:bf:8f:8c:09:1b:d7:86:59:36:31:81:97:f7:
                    34:3c:25:aa:bc:c7:60:e4:9a:23:2b:fc:9b:52:79:
                    88:3d:32:6c:1d:6a:a9:39:7a:5e:8e:af:08:a8:d0:
                    b4:24:08:eb:6e:ce:83:6b:8a:e8:08:81:1a:34:27:
                    5d:65:17:f7:46:16:dc:37:2a:53:22:08:4b:eb:bc:
                    6e:13:a7:56:25:15:1e:da:d5:79:e9:15:31:fb:4b:
                    91:e6:79:64:02:17:e7:4a:cb:33:f4:8e:a1:33:a1:
                    42:2c:ae:07:a0:61:82:c8:48:6a:50:3a:4e:e9:8f:
                    45:33:91:e3:d8:9b:ee:ea:49:6d:4b:36:b2:07:0d:
                    82:2a:96:03:ec:73:98:e4:d5:66:0d:b7:45:cf:81:
                    ff:65:7f:44:43:7b:25:71:28:af:90:d6:1c:1e:0a:
                    8e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F8:E7:9A:66:7D:05:4B:9B:98:24:B6:BE:B4:B0:8F:52:9B:F4:F4
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/439638A88DB811E98ACC9F7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.155.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:4a:f5:57:88:6d:52:c7:58:dd:95:2d:3d:22:6a:c2:15:3d:
         3a:7c:78:dc:2d:be:af:87:b2:88:03:7f:dd:05:16:69:14:30:
         01:e2:18:68:9b:c7:24:d3:03:53:f9:fd:ed:16:a4:c5:ae:6f:
         f1:72:22:db:9e:d3:dd:bf:8b:85:17:07:c1:03:49:fa:e3:74:
         2f:61:83:cf:ee:64:bc:3b:b5:3b:06:69:65:91:c7:39:ba:be:
         3f:aa:9b:60:17:75:54:ab:ff:9f:30:a6:80:55:06:3c:cb:93:
         51:41:63:50:e2:64:0e:b1:62:83:d1:98:99:15:df:89:59:e6:
         92:c0:30:ff:eb:bc:38:a9:b0:c3:6e:51:b1:12:f3:4e:51:a1:
         c1:1a:16:6c:7c:b5:68:6c:ac:88:63:f4:fc:16:06:39:6a:cc:
         03:6a:27:fe:7d:02:f0:7a:84:40:47:3f:9e:8b:b3:c6:5f:10:
         17:9f:56:d8:e9:09:16:86:62:c7:4c:f9:e2:c7:45:6c:ed:33:
         d6:50:1b:73:59:73:21:0b:a8:08:b3:7e:22:1f:5c:22:9e:95:
         09:fa:ed:29:c8:2d:63:69:95:79:f8:a8:93:65:73:65:99:3a:
         ec:7f:48:92:6f:7a:e4:74:d1:d5:4f:23:ef:2a:cf:75:e0:e8:
         c0:77:ee:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:28 2026 by rpki-client