Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F6D9C45E7B1811EF82C90D2AC4F9AE02.roa
File:                     F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (raw, json)
Hash identifier:          wq81aF5SSoAZI/JyoA1vNO3zjZsKt2TkcT5Pso38nSU=
Subject key identifier:   A3:13:E6:A9:93:D2:40:B6:1B:C1:31:62:28:C7:71:FC:AE:A6:94:C2
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       367C
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F6D9C45E7B1811EF82C90D2AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:47:56 +0000
ROA not before:           Thu 24 Jul 2025 14:50:22 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     138003
IP address blocks:        203.209.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13948 (0x367c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 24 14:50:22 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a489dc-24be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:80:63:d0:23:d5:e0:ab:60:00:7a:0d:5f:
                    31:7d:c3:db:53:43:44:2c:02:8c:d4:48:eb:44:e4:
                    09:58:ef:85:2f:37:69:9f:ad:86:0c:f4:3e:3f:0d:
                    75:d1:0c:c1:c7:34:dc:69:13:00:13:21:ef:7c:1c:
                    95:92:8b:a0:12:6c:2a:a9:2b:3f:03:e0:c0:2b:57:
                    59:c6:e0:9e:8b:38:1c:87:f9:57:c7:f7:ed:cb:62:
                    78:55:f5:a2:69:92:39:6b:88:bf:51:a3:33:12:16:
                    16:a8:10:18:6b:8f:db:63:41:4e:ba:23:86:9c:b7:
                    af:27:62:d8:a4:7c:29:f4:f8:26:0f:8d:b2:09:c4:
                    c6:cc:3a:9d:4b:f8:22:b9:9d:8c:19:7e:79:fe:11:
                    aa:2d:9f:86:5b:df:b9:2c:5e:4b:66:35:fa:89:3b:
                    0e:0a:48:42:59:60:54:7f:21:ed:f4:8e:82:31:b6:
                    ab:ac:04:56:5a:9e:b2:2c:1e:94:1a:27:db:e6:eb:
                    2f:3b:4a:b9:44:ee:c8:4c:8d:2f:3e:5e:b3:64:d1:
                    85:fe:ab:3b:d7:72:9e:5d:c1:b8:20:f0:3c:af:66:
                    4b:d9:bd:2f:0d:47:0d:30:52:5d:d1:14:c5:60:d1:
                    85:f1:2c:f4:fe:53:d1:42:bc:1c:e6:45:dd:f0:aa:
                    56:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:13:E6:A9:93:D2:40:B6:1B:C1:31:62:28:C7:71:FC:AE:A6:94:C2
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F6D9C45E7B1811EF82C90D2AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.209.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:39:bc:7c:d5:ee:84:60:f6:5a:ab:95:a2:5f:fe:c7:22:0e:
         eb:c2:ad:59:94:38:3d:ef:41:91:24:a2:ae:61:60:4f:b7:c0:
         a6:d6:df:5f:50:76:25:b6:e1:1f:ef:f6:62:6b:87:6b:52:4e:
         43:59:cc:7f:c3:9e:72:d8:1d:51:2e:48:28:df:7b:f2:7f:e3:
         18:41:34:7b:eb:8a:b7:92:69:1a:b7:d9:30:e6:9d:c2:ea:9f:
         24:7f:ff:48:1b:c1:f2:16:68:46:86:03:e6:93:54:a9:e7:42:
         63:5e:1b:1b:34:82:75:eb:f5:b5:25:2d:a6:12:54:9b:3f:d0:
         73:45:60:3f:11:75:2f:43:3b:ae:03:25:2f:c1:ab:e7:94:c9:
         22:58:50:fb:30:71:06:d6:ab:17:06:b6:7e:67:d1:1b:6e:ec:
         6b:46:05:35:7c:89:a3:7f:c1:8f:c2:77:fb:f6:3e:af:9c:78:
         86:df:4b:08:5e:67:c9:73:10:17:42:d3:ea:0a:0e:7e:6d:8b:
         ae:47:f2:33:a0:6c:aa:50:82:ba:00:f1:0c:ab:fe:e6:f2:b2:
         7d:e6:e4:9a:44:b7:82:84:0b:59:c7:ea:6f:67:b8:b6:b5:14:
         f9:16:af:74:46:92:f9:b7:34:fd:d8:0a:f5:33:df:e0:72:1e:
         5b:ac:64:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:22 2026 by rpki-client