Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/25A7FE7E855211EB8DEDD812C4F9AE02.roa
File:                     25A7FE7E855211EB8DEDD812C4F9AE02.roa (raw, json)
Hash identifier:          JFLwuBXWDX0J8f5lX14aiOUiyE2v7U9ODxE/5aeQfZg=
Subject key identifier:   3C:02:6B:1C:CC:9B:2A:D2:98:35:D2:7F:FB:E8:22:A1:2E:FF:B7:1C
Certificate issuer:       /CN=A9185B0F/serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5
Certificate serial:       06ED
Authority key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/25A7FE7E855211EB8DEDD812C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:32:43 +0000
ROA not before:           Mon 08 Dec 2025 21:03:22 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     55941
IP address blocks:        202.94.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl
                          rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 21:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1773 (0x6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B0F, serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5
        Validity
            Not Before: Dec  8 21:03:22 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a431eb-ed5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:69:ce:83:b6:44:b7:b4:17:0e:dc:f1:e4:6b:
                    c4:15:ac:b4:84:5e:e8:d4:a8:5b:fa:f2:4e:a2:6c:
                    87:03:f1:58:f7:69:55:ee:11:e7:84:fb:c2:6f:b6:
                    34:89:56:54:30:0c:cf:27:6d:83:82:71:cd:f3:80:
                    28:92:15:e6:0e:73:84:e5:a7:bb:b2:10:9d:f2:ed:
                    ed:27:5e:5b:66:9f:a4:17:72:c2:0f:6d:e8:88:e7:
                    87:22:4c:fc:9a:6e:61:77:90:90:2f:ff:a7:f6:c8:
                    d8:02:ff:70:db:1a:79:33:75:eb:ea:7d:9c:91:74:
                    0f:c1:93:75:59:51:51:b6:03:47:06:74:dc:20:4b:
                    80:91:e9:4c:73:3d:7f:8c:e7:c0:6d:f5:c1:2d:e5:
                    00:8e:c2:44:eb:75:76:c1:4d:18:bf:44:b8:9b:6a:
                    98:1d:23:fd:e4:20:9a:44:e2:52:cb:8d:52:67:09:
                    cd:c6:3f:2c:ba:de:6b:83:ed:cd:69:1d:e7:27:78:
                    dd:d2:7f:c0:42:06:c7:b5:49:9b:a2:44:2d:c1:3a:
                    e6:44:f4:c9:ee:2b:13:27:a7:51:80:6a:fb:1e:11:
                    ea:ad:d1:ba:37:78:3f:bc:c3:39:eb:78:3c:02:86:
                    74:e8:c3:63:e5:13:c9:f0:a5:e0:03:6d:60:33:7b:
                    06:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:02:6B:1C:CC:9B:2A:D2:98:35:D2:7F:FB:E8:22:A1:2E:FF:B7:1C
            X509v3 Authority Key Identifier:
                keyid:90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/25A7FE7E855211EB8DEDD812C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.94.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:3f:17:9a:87:58:ba:70:07:d6:e0:dd:d1:07:51:37:3f:
         2e:26:19:87:6a:d8:09:c2:df:bf:75:32:a9:b9:62:1c:bf:90:
         bf:7e:eb:c1:53:6e:64:6e:46:67:de:c3:4b:9d:ac:9c:aa:3f:
         47:45:86:a6:66:59:45:61:ba:34:55:f7:4b:4e:1e:ce:a2:15:
         e2:5c:98:19:8a:69:19:ab:bf:97:b5:59:e8:a4:98:d7:90:97:
         45:32:a0:c3:5e:61:36:78:32:97:74:5e:ac:74:a2:c7:cc:25:
         33:25:15:fc:af:19:c7:b3:9a:98:f8:fb:8c:0a:7a:54:b6:cd:
         85:8e:c3:00:7a:68:f0:66:48:fe:87:00:c5:e9:1f:b9:85:f7:
         7f:14:fe:db:3d:85:3b:30:43:d2:ea:ac:47:79:60:e8:ba:2c:
         18:2d:7e:63:08:84:17:fb:91:3a:66:30:98:92:7a:ee:45:61:
         91:1d:87:fe:88:4f:7e:41:d1:84:e6:e3:6f:ff:04:d2:68:ad:
         0c:51:cf:32:3f:3b:4c:cb:b9:26:84:fa:0f:62:2e:3c:5d:1c:
         fc:6e:9b:99:58:e6:36:00:99:0f:56:3c:95:57:63:f6:3a:13:
         6d:ea:a7:08:c5:fd:a0:da:3b:8d:b6:58:27:bf:9a:89:2d:d1:
         f3:8d:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:10 2026 by rpki-client