Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/81C83A9ADD9711ECB450D332C4F9AE02.roa
File:                     81C83A9ADD9711ECB450D332C4F9AE02.roa (raw, json)
Hash identifier:          9EVY6/bljSmGk69kgq+cWH0JVAlXlHuEraH6jeuw/7c=
Subject key identifier:   56:03:7E:41:B5:A8:6D:20:8C:1A:89:02:FD:8F:3F:BF:22:6B:96:29
Certificate issuer:       /CN=A916A6D2/serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
Certificate serial:       05F9
Authority key identifier: 80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/81C83A9ADD9711ECB450D332C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:46:35 +0000
ROA not before:           Fri 30 Jan 2026 23:19:07 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     134963
IP address blocks:        203.78.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl
                          rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1529 (0x5f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A6D2, serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
        Validity
            Not Before: Jan 30 23:19:07 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a45f5b-afd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:d8:4d:a2:ba:fc:5d:08:6f:36:a6:e1:f6:
                    cf:25:66:f0:31:61:e2:c2:bf:e0:7d:91:54:d2:b5:
                    52:eb:b9:e5:55:6f:eb:e0:fa:e3:a5:3b:27:a1:87:
                    48:52:cf:49:11:ae:5f:55:1d:9f:5f:09:13:49:50:
                    5b:fe:c0:57:a1:bb:49:ba:3e:19:b4:69:c1:f6:00:
                    e9:3a:a6:b2:46:3f:e9:5b:ca:24:ed:e3:f3:bd:5a:
                    7a:6f:04:f4:42:55:ae:62:e3:77:52:42:c4:6c:63:
                    3c:66:ce:37:d2:38:bd:e9:0b:b4:25:8f:7f:11:7d:
                    4f:fd:2e:9d:ee:ef:1f:86:c4:76:10:d6:96:66:9d:
                    3e:ff:0b:1d:72:8c:5a:6f:b5:9d:0b:e5:7c:bb:60:
                    91:0c:3a:e9:ce:1d:fd:a9:ca:1e:fc:a6:7b:30:b9:
                    0e:ee:66:a2:06:77:21:e5:b8:65:9e:76:17:21:05:
                    51:9a:86:5c:14:1a:d6:73:b9:c1:85:54:aa:b8:b7:
                    0f:19:76:85:e6:6d:f8:65:b0:8b:44:55:cd:6c:77:
                    cf:d4:3b:5e:03:3f:a3:fa:be:5e:5b:02:9b:dd:b4:
                    18:81:c5:ae:c6:59:6e:72:e1:b2:56:f7:95:ae:f9:
                    c4:1a:8c:ea:77:73:a4:91:f3:c1:6b:ec:90:54:ae:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:03:7E:41:B5:A8:6D:20:8C:1A:89:02:FD:8F:3F:BF:22:6B:96:29
            X509v3 Authority Key Identifier:
                keyid:80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/81C83A9ADD9711ECB450D332C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.78.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:d1:91:be:7b:7f:d3:24:6b:d4:80:8e:f1:fb:a3:00:91:08:
         68:f6:32:b6:29:c4:27:3c:d5:26:26:20:c6:6c:90:2f:a8:9d:
         52:84:aa:4d:57:df:0c:dd:50:c8:7b:cb:91:a1:43:8d:22:92:
         69:1f:81:01:15:68:af:02:d4:af:94:c7:93:19:a8:4c:da:fc:
         f7:91:be:66:91:b9:a6:e0:ec:dd:b0:32:13:5b:94:5c:0f:65:
         de:d8:38:0f:97:53:97:ca:1e:24:77:65:bb:4a:3b:59:2c:66:
         a2:b1:6f:a3:09:10:44:11:28:4e:a5:90:08:cb:4b:26:4b:c3:
         5c:2e:96:06:c5:db:a7:f7:99:38:00:f8:b4:eb:ec:dd:f4:d3:
         d7:7e:55:b5:0a:f5:ac:85:9c:46:4d:c7:7b:00:5b:66:83:b8:
         8e:35:fd:ab:d5:f3:d5:91:64:be:19:cb:66:3d:af:14:e0:40:
         f6:e9:82:1d:9e:42:26:90:ed:a6:22:f4:df:4f:61:ab:da:84:
         30:96:af:80:19:0f:29:c8:de:3b:a3:6d:33:b6:5a:e1:37:38:
         f8:91:c3:bd:5f:7a:85:fe:7a:98:e1:73:d5:6c:81:15:9a:4a:
         bd:96:85:4b:1f:fa:4d:5f:9c:c5:95:99:d0:23:3a:1b:ca:99:
         60:8a:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:55 2026 by rpki-client