Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/B2FF274A00EC11EDBC60AA4FC4F9AE02.roa
File:                     B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (raw, json)
Hash identifier:          tnQvcL+XlKj1mrWVClsnZNGw7PANVizY98r9YXkQdO4=
Subject key identifier:   A7:42:00:E3:DF:B3:AA:B1:7A:C3:13:B4:E8:36:9C:B6:EB:52:85:D2
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       3679
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/B2FF274A00EC11EDBC60AA4FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:47:53 +0000
ROA not before:           Thu 24 Jul 2025 14:50:20 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     134438
IP address blocks:        203.107.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13945 (0x3679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 24 14:50:20 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a489d9-622e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7d:26:0a:93:60:a2:fa:ca:19:95:6a:2f:e9:
                    50:5c:be:ce:0b:f5:23:d3:4d:64:8e:b6:1e:ce:3b:
                    95:21:e0:35:31:1b:92:cb:6e:28:4a:fd:bc:97:4f:
                    13:4a:b5:de:34:0d:37:ea:58:ce:7f:e6:9c:5d:87:
                    53:db:b2:6e:bc:96:43:26:7e:8b:a7:11:ad:ae:25:
                    4d:a4:89:53:29:46:a2:2b:dd:0e:fa:ba:09:65:e5:
                    87:3f:d5:64:0f:e8:55:59:46:ca:45:26:e3:1a:94:
                    4e:48:86:5d:a8:dd:c5:c6:ef:2e:cd:0f:b8:53:c4:
                    91:a3:c0:23:0b:5b:80:ab:90:63:89:e6:eb:2c:8c:
                    6d:f3:e8:3e:cc:0f:e6:42:a6:c9:a5:c8:bf:34:31:
                    aa:6c:58:e6:3d:a6:da:d7:5a:2c:db:b7:6c:10:dc:
                    8b:97:34:f3:c4:0e:98:41:b7:4f:89:7c:cd:af:00:
                    ed:5d:8d:0e:36:c2:88:f5:0d:13:18:96:a4:98:6b:
                    56:b4:aa:7d:b8:79:00:d7:f5:a1:8e:59:d5:f3:d8:
                    75:a4:34:00:d6:94:72:97:11:4a:0e:ee:ad:45:40:
                    4c:c7:0e:a4:e1:92:8a:08:a1:b5:9a:a1:c5:fe:2b:
                    0a:92:c1:46:2a:d3:0e:45:cf:35:d5:d8:25:69:67:
                    0a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:42:00:E3:DF:B3:AA:B1:7A:C3:13:B4:E8:36:9C:B6:EB:52:85:D2
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/B2FF274A00EC11EDBC60AA4FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.107.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:20:75:0e:d3:56:34:45:f6:fe:1c:94:90:54:73:f7:16:81:
         0b:54:72:e4:7a:7c:ec:ed:e9:57:fe:88:45:29:e2:7d:7b:c7:
         57:d4:3f:d4:33:f3:00:52:fb:8e:e0:6c:df:17:02:02:7a:fd:
         6a:d4:fe:9c:a3:4a:18:8b:7e:f1:2f:0d:5f:45:41:73:ff:dd:
         3b:c5:a3:46:65:bb:12:5d:d0:ce:59:3a:19:cd:e0:b0:76:f6:
         06:7b:57:d7:2b:13:9a:26:5c:d2:5e:fa:35:8a:8a:f4:97:12:
         e3:55:c4:4e:a7:58:b6:bb:d5:aa:da:9b:4a:25:46:d3:15:6c:
         32:1c:e6:8b:87:99:32:da:c2:2d:f7:f8:5d:fd:0d:b4:1d:1b:
         24:7b:eb:86:0e:2f:f5:45:95:c1:51:5e:7f:31:94:9a:6a:e6:
         bf:11:89:f2:83:4d:cc:94:2e:e4:fc:63:0f:d4:e3:85:c5:bc:
         30:2d:33:61:1a:d4:33:a8:2e:40:31:d5:7e:9c:90:1f:9f:34:
         07:23:a3:ca:55:73:a9:90:61:6e:1d:44:48:4b:a4:dc:5d:84:
         cd:5d:9f:4e:5a:f9:29:d1:6b:29:30:86:f5:f5:ff:71:36:69:
         bf:03:e6:9b:db:1c:40:f8:35:eb:d4:c0:7a:a0:a9:43:fa:b2:
         a1:39:a0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:30 2026 by rpki-client