Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4A71D7E08DB811E98ACC9F7EC4F9AE02.roa
File:                     4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          uu4m5WVb6SU6WZl3ObRQUMqZyoKCwCWL6M6mRfFvoL4=
Subject key identifier:   22:F5:2C:A3:F5:7A:A2:67:AE:48:2C:F3:C6:5C:40:4E:FF:6F:F5:B6
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       3692
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4A71D7E08DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:48:15 +0000
ROA not before:           Thu 24 Jul 2025 14:50:40 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     55844
IP address blocks:        203.155.156.0/24 maxlen: 24
                          2405:a000:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13970 (0x3692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 24 14:50:40 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a489ef-4e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:ae:50:78:e4:6f:92:2b:4d:1c:bd:e8:80:
                    d5:fc:7a:0f:fd:71:10:c9:6d:5e:d2:8e:6e:93:03:
                    5a:bb:6e:9f:03:61:26:89:a4:7c:49:15:b2:98:2f:
                    5f:90:43:0d:8c:f5:5e:3d:e3:60:02:e3:36:f6:10:
                    68:1d:00:c5:24:ef:ee:23:38:99:2f:73:11:b0:9f:
                    0a:18:3e:50:97:ea:5d:a9:78:c6:d7:b2:77:2a:b2:
                    aa:5b:01:57:c3:49:7a:9d:d2:e4:ee:da:44:3b:01:
                    3f:fa:ff:23:06:8b:24:99:f4:8a:2b:b0:a2:95:40:
                    14:7c:61:a4:e1:39:e8:8d:82:38:8d:0c:81:ec:75:
                    a7:a1:70:b2:8d:7b:5f:ba:1c:8b:cc:cd:61:d2:26:
                    af:e2:7a:cf:b4:af:04:9c:65:c3:b2:4e:db:15:74:
                    46:f8:17:e0:23:49:fe:05:70:e1:8f:ef:35:95:36:
                    94:f5:15:22:12:e4:6f:53:2f:b3:1b:51:b8:c4:5b:
                    fd:b6:7f:38:87:f4:ff:eb:3e:a1:15:17:84:b0:d3:
                    27:b5:46:18:47:fc:d8:27:35:66:1b:df:f8:39:e8:
                    53:4a:6f:c1:5b:01:7e:d3:fd:dd:c5:61:47:23:d5:
                    45:81:44:10:71:6c:6c:a3:51:06:30:10:c3:a6:2d:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F5:2C:A3:F5:7A:A2:67:AE:48:2C:F3:C6:5C:40:4E:FF:6F:F5:B6
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4A71D7E08DB811E98ACC9F7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.155.156.0/24
                IPv6:
                  2405:a000:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:8a:d0:c4:b3:6e:6f:d3:fb:20:d3:b3:65:ff:d4:18:2a:21:
         4e:a3:69:1e:7f:ec:7f:62:fa:2a:03:71:f1:be:5d:26:c2:45:
         d9:ac:0d:69:b0:76:db:5c:58:3b:63:51:03:22:7c:e2:62:3a:
         51:f3:e4:fb:dd:c8:55:97:f2:52:7a:54:47:15:06:01:eb:ee:
         d7:cf:df:c1:a9:58:48:44:40:ee:2b:90:8d:c0:f5:24:00:02:
         d2:32:35:2d:18:c5:ed:66:19:d6:19:21:a2:8b:1b:b2:3a:15:
         9b:23:54:9c:67:7b:cf:cb:99:f3:a2:2a:0c:ea:8b:0f:09:68:
         55:3e:85:9f:fe:9d:ab:eb:4c:bd:4b:b6:c0:09:02:36:7d:dc:
         f3:72:24:be:0e:b1:8c:1a:73:76:c5:70:41:77:27:3a:8e:96:
         8f:75:03:05:05:a3:60:5a:ad:b5:7a:c6:45:85:a2:71:c7:ce:
         54:f0:bb:d1:8a:90:f9:12:90:f0:ce:30:32:27:42:b7:f9:66:
         25:ef:70:7d:56:2a:f9:ad:cc:90:92:b8:e6:cf:2a:5f:d9:f3:
         8d:40:0d:94:72:84:7f:0c:7a:2d:ce:e9:30:72:95:83:78:a5:
         c9:40:b6:4e:53:cc:83:2a:37:96:36:b7:89:7c:c9:c4:e2:3e:
         ee:7f:ac:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:55 2026 by rpki-client