Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/4CE75372B9DE11EEBC5B0D21C4F9AE02.roa
File:                     4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (raw, json)
Hash identifier:          fuTljzKvBea7sJt2VNckungbhAnkDIYji3I6D462WJ8=
Subject key identifier:   90:50:B6:39:54:CE:F6:1F:2C:47:D5:1A:4A:D1:21:E2:32:E6:69:DA
Certificate issuer:       /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
Certificate serial:       1ECA
Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/4CE75372B9DE11EEBC5B0D21C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:19:32 +0000
ROA not before:           Fri 12 Dec 2025 16:13:26 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     38639
IP address blocks:        163.138.224.0/19 maxlen: 19
                          163.138.241.0/24 maxlen: 24
                          163.138.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7882 (0x1eca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
        Validity
            Not Before: Dec 12 16:13:26 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a47524-9f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ae:0f:9f:73:04:21:10:16:32:83:29:81:ca:
                    78:16:8b:e3:27:fd:ce:ae:98:02:8e:84:2c:eb:bf:
                    b4:0b:66:07:2b:6b:3e:d4:cf:4b:6f:1b:54:9f:6c:
                    4b:a2:a3:49:b8:76:42:d3:e0:94:3e:30:fc:1b:00:
                    7b:51:c5:8a:37:e4:aa:6f:86:10:44:63:3f:cf:24:
                    cb:a9:96:a8:c9:d4:2a:ce:3a:78:a3:33:ed:9c:e9:
                    db:70:37:52:39:4d:1c:35:75:e9:c2:6a:31:cf:8f:
                    fc:d5:ac:1f:74:96:dc:96:18:60:13:49:7d:55:7e:
                    27:4a:04:dd:d1:66:d4:75:1e:96:b2:27:43:54:1f:
                    f7:98:e3:15:32:64:eb:0f:81:38:fd:66:52:be:15:
                    87:07:d9:c0:48:82:4c:45:23:94:b4:a5:a5:58:5e:
                    cd:9d:e0:6b:77:62:aa:57:54:15:e0:a1:3e:3c:ee:
                    1f:14:e7:3d:cd:01:5f:ec:e2:bb:1a:c4:90:fa:ae:
                    ca:46:1f:95:1b:8f:bf:87:34:0d:f2:b5:c9:21:93:
                    d2:4f:e4:84:ad:3d:bd:1a:2b:d1:b6:65:1b:5f:8c:
                    0b:44:c4:bd:b7:8b:9f:12:76:a0:b8:62:62:94:98:
                    c6:33:83:54:12:bc:0d:01:39:d0:83:d8:08:71:21:
                    87:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:50:B6:39:54:CE:F6:1F:2C:47:D5:1A:4A:D1:21:E2:32:E6:69:DA
            X509v3 Authority Key Identifier:
                keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/4CE75372B9DE11EEBC5B0D21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.138.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:a7:eb:a7:30:a2:a2:d8:24:68:99:08:c4:38:0f:57:1e:a1:
         ac:c0:e5:71:2a:8c:1c:b8:9b:1a:69:51:08:ce:9a:16:2b:23:
         c6:82:8d:86:bf:05:75:cd:69:1c:2d:1c:84:cc:a4:ca:1d:92:
         18:34:28:69:ee:30:84:28:90:4c:89:68:68:0d:44:8c:bf:92:
         1a:a4:8a:b4:81:28:01:f5:a8:d3:14:68:16:90:68:8c:f1:42:
         3e:a9:72:97:26:99:69:77:6b:a8:b6:85:59:07:d8:82:c1:c0:
         08:d7:7a:b3:3b:11:0c:ba:8a:46:9a:9b:c9:ee:a9:c5:8e:ed:
         9b:3f:35:02:3b:e3:b2:3f:6a:f6:9e:f1:54:05:dc:81:5b:0d:
         8c:3e:8e:3a:6e:34:bb:83:d4:55:c0:d4:60:17:47:90:77:ae:
         17:09:4e:80:e1:86:a9:d3:ac:aa:2c:c9:0e:5f:a3:20:81:5c:
         d6:9c:e2:12:4b:c9:96:5a:35:e6:10:6a:c9:a5:36:d7:51:ee:
         f2:fa:6c:df:76:f3:d5:aa:c5:7b:47:08:52:f9:48:8d:01:81:
         ec:9c:b8:e4:72:3a:d4:a5:db:03:6c:a7:16:da:3b:1e:b4:40:
         5e:7e:77:e6:ce:40:87:9b:3b:96:cc:c4:52:3b:1c:8b:55:6b:
         9d:5b:4a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:31 2026 by rpki-client