Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/91E9F5FCEB7211F0B89C2E104F6F56BC.roa
File:                     91E9F5FCEB7211F0B89C2E104F6F56BC.roa (raw, json)
Hash identifier:          VEHFIL+hcJEK3QNTlF8lEQzRTP0/e2Y3Of5xJtsfhRI=
Subject key identifier:   13:87:D2:E6:45:F1:13:9A:CC:A6:FD:BB:CE:48:E5:4B:8D:4E:BF:45
Certificate issuer:       /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial:       0189
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/91E9F5FCEB7211F0B89C2E104F6F56BC.roa
Signing time:             Sun 01 Mar 2026 13:07:47 +0000
ROA not before:           Wed 07 Jan 2026 02:42:55 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     17461
IP address blocks:        203.3.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
                          rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
        Validity
            Not Before: Jan  7 02:42:55 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a43a23-ab63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4b:bf:7f:94:4a:f7:2f:3e:e4:42:77:21:8e:
                    f4:2b:d2:1c:61:ca:6c:40:8e:83:b1:f5:ba:50:49:
                    9c:41:db:9d:4e:4f:f6:a0:0c:93:6c:c7:34:66:9e:
                    6c:eb:5e:67:79:ec:55:2b:eb:44:be:91:3c:57:a6:
                    17:ad:7c:4b:90:9f:df:b9:e9:b9:97:44:4e:8b:19:
                    9d:93:b8:48:37:2b:0f:1a:e2:5f:77:6f:26:fb:0c:
                    4f:e0:6d:2c:8d:cd:d9:ae:ba:f4:55:50:61:d5:97:
                    5c:4d:49:d5:88:a1:b8:cc:d6:19:e1:ac:d1:50:e0:
                    81:95:d0:7c:26:4a:00:37:ff:ff:16:f7:30:45:f0:
                    f0:cd:7a:06:08:02:03:72:3a:00:da:10:89:18:bf:
                    1a:45:52:ea:56:69:b0:de:c2:51:1b:ee:b2:7d:c1:
                    06:6b:25:8e:ff:2b:4f:d2:2b:50:7b:fa:f1:c6:46:
                    67:38:98:25:19:67:19:ac:ac:72:ac:0a:1f:bd:d1:
                    22:b3:04:16:10:6d:13:dd:bd:8c:61:a8:fa:a8:9d:
                    22:ea:6a:1d:3d:bb:71:f0:dc:df:16:ed:f3:ce:b5:
                    aa:61:a5:e5:d7:97:5b:0c:62:36:7a:1a:01:30:5b:
                    97:52:59:35:4f:94:42:69:65:28:b9:97:9f:1b:c9:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:87:D2:E6:45:F1:13:9A:CC:A6:FD:BB:CE:48:E5:4B:8D:4E:BF:45
            X509v3 Authority Key Identifier:
                keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/91E9F5FCEB7211F0B89C2E104F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.3.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:d2:4d:26:5f:2e:d4:25:ff:2a:d1:1d:37:7b:1f:5e:49:05:
         e9:4f:1e:1d:96:d8:a6:9f:b2:73:e8:fc:a4:91:6f:64:48:b1:
         c7:c1:82:43:38:ab:87:83:2d:47:3e:8a:11:00:87:43:eb:f6:
         c4:1d:56:bb:d3:10:57:91:cd:05:35:26:30:22:e7:be:cd:43:
         9f:a2:4d:a5:a7:b0:bb:84:67:5e:95:37:d4:33:54:9b:88:14:
         ea:7f:24:18:3b:7d:96:65:58:6f:7f:25:8b:ae:76:53:4e:e3:
         3e:5d:8e:8c:6d:d5:fd:b8:0d:5b:29:7e:d2:c4:fa:e5:6f:6b:
         c4:af:ab:bf:6d:9c:34:1e:e8:f0:d8:d0:dd:16:17:20:49:57:
         ad:d3:06:6d:e4:d5:2c:18:ff:55:53:78:9f:4f:2d:88:31:5f:
         fe:3f:08:a2:1c:c5:a2:2e:75:13:29:de:30:36:bc:b5:a3:f6:
         66:c1:6f:e2:df:33:f0:4c:1d:86:9e:c9:0a:90:30:74:c7:2d:
         03:1b:0f:d7:53:35:0b:7a:e5:d5:a0:a4:9d:14:53:1c:94:50:
         c3:a5:7b:1e:1d:87:95:22:d2:91:14:5c:4e:ed:8a:56:a2:0d:
         cd:20:1c:4c:95:8f:f3:af:d1:91:9a:9d:f5:43:c1:95:94:ea:
         38:be:40:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:38 2026 by rpki-client