Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/020607A2498711EFBB260663C4F9AE02.roa
File:                     020607A2498711EFBB260663C4F9AE02.roa (raw, json)
Hash identifier:          NE7gXopF/sfzGGjBPy5TRpiqm9S4sfZVevZ1+WaB9aw=
Subject key identifier:   4E:DD:FB:19:2A:E5:E7:98:F7:A6:5F:06:59:B6:7A:2E:6D:DB:42:E1
Certificate issuer:       /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004
Certificate serial:       0292
Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/020607A2498711EFBB260663C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:04:34 +0000
ROA not before:           Sat 31 May 2025 03:51:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     62610
IP address blocks:        101.47.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:08:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004
        Validity
            Not Before: May 31 03:51:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a47fb2-03a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:af:a3:5e:21:06:78:f3:8e:a1:5e:49:b0:
                    f4:12:09:84:cc:1a:e6:7f:49:16:f7:e4:f2:20:2f:
                    25:33:1b:1a:26:53:b2:4d:2a:51:53:b5:d6:d4:4e:
                    b0:22:44:4d:1a:df:da:80:40:a0:b6:b3:88:ae:94:
                    af:68:df:04:5d:4d:3e:d5:bb:16:ef:9e:53:2e:79:
                    60:84:25:5d:81:76:ed:fb:48:66:cd:4a:dc:cd:0c:
                    b3:5c:ca:13:a8:46:c1:ac:a5:1c:75:bb:54:29:99:
                    a1:c9:16:f4:67:55:a6:86:ea:cc:6e:33:37:ed:29:
                    60:e5:d6:1c:3e:4c:c9:51:6a:88:71:09:c0:29:98:
                    5c:7a:d3:8e:eb:7e:3d:8d:cf:c5:0c:ec:1e:5d:0c:
                    9d:b5:c9:95:a1:4f:6c:9b:fa:2a:d8:76:1c:0e:cc:
                    8d:49:4e:27:e7:4e:e3:39:0b:8c:cf:4b:f6:2a:3f:
                    cb:34:c3:1b:cc:89:43:27:a0:b6:5d:62:d2:a4:ff:
                    a1:e3:2a:2e:9e:1e:9d:08:b6:a6:a0:37:36:ed:10:
                    14:66:91:cc:51:74:c8:5e:83:e1:2a:03:a1:05:72:
                    fa:db:7e:ec:8f:1d:aa:a9:dd:88:bd:ce:23:1f:c0:
                    7e:45:99:50:ac:19:07:7d:2c:ba:63:87:2d:e3:ea:
                    df:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DD:FB:19:2A:E5:E7:98:F7:A6:5F:06:59:B6:7A:2E:6D:DB:42:E1
            X509v3 Authority Key Identifier:
                keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/020607A2498711EFBB260663C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.47.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:e9:21:a2:26:39:8d:5e:09:d1:0e:b5:0d:bc:b7:9a:9a:91:
         67:6b:fb:3a:6b:d2:1d:60:ec:49:77:b0:d2:06:d4:14:ce:12:
         08:48:a0:ce:e7:d9:7a:02:68:45:38:eb:d6:9c:77:2b:52:5b:
         22:eb:c6:de:e3:a0:6a:e3:6e:dd:6a:48:0a:96:cf:c6:b5:e9:
         a2:62:f2:63:13:4e:0b:48:82:05:29:25:d8:d8:d7:23:fb:da:
         0a:6f:cc:64:99:65:6d:14:23:e3:b2:79:7f:4b:b1:9b:86:f2:
         41:e1:6e:62:92:28:36:7f:68:40:59:fa:59:e3:5d:90:4e:25:
         e1:51:2a:63:bb:d3:c1:9f:5d:81:1c:5e:b3:bd:5d:67:a6:ca:
         ae:cf:b4:79:eb:49:2a:fd:ec:e6:ec:20:65:a0:56:ce:c8:1e:
         c8:b2:88:89:de:af:da:da:fe:8a:63:6b:29:d1:96:1c:37:b0:
         d0:a0:b0:48:1f:1f:3b:03:3a:64:a7:df:98:31:2e:2b:c0:00:
         3d:24:f8:2a:76:db:c0:07:74:78:fe:34:75:bd:0d:c2:52:87:
         f9:8b:5d:14:ed:cd:63:79:5b:eb:56:c8:74:28:8e:3d:ba:fe:
         99:6d:ef:3b:71:50:ae:cb:26:9b:b2:84:21:2a:92:06:00:e3:
         7c:b5:6f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:31:38 2026 by rpki-client