Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/8F368BEEF9C411EB9F9E645DC4F9AE02.roa
File:                     8F368BEEF9C411EB9F9E645DC4F9AE02.roa (raw, json)
Hash identifier:          hu4/Lak7f/lOdT0sej4Iilh6Wr2QTf9+LdnHpbx9BwY=
Subject key identifier:   C8:68:1A:FE:78:40:2D:95:15:AF:9C:4F:00:A3:E0:6E:B2:7A:CF:40
Certificate issuer:       /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3
Certificate serial:       3545
Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/8F368BEEF9C411EB9F9E645DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:20:56 +0000
ROA not before:           Sat 06 Dec 2025 14:50:43 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7532
IP address blocks:        210.208.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl
                          rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13637 (0x3545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3
        Validity
            Not Before: Dec  6 14:50:43 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a46768-f89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:67:65:e6:01:cd:4a:f4:6b:58:38:15:a5:
                    b5:cb:f6:c8:76:ff:d3:8b:9f:15:11:b0:7e:ea:f0:
                    71:05:f3:65:78:e5:55:dd:dc:7c:9b:dd:52:76:33:
                    09:68:af:0a:dd:f9:8d:93:37:3f:78:2f:fa:8f:42:
                    54:ca:a3:3f:d5:b6:a5:82:27:1d:da:43:c9:54:28:
                    f6:62:d8:86:e9:91:a4:f6:60:c1:c4:ed:72:c8:b3:
                    de:60:09:80:bc:fb:57:45:87:9a:38:79:ef:bb:0a:
                    94:93:45:dc:8d:13:6c:1b:d1:74:34:ec:00:59:5d:
                    76:64:ca:6e:22:ff:9e:2f:1b:80:99:f6:97:aa:61:
                    ba:8c:96:43:4e:e9:6a:1d:64:ce:09:b9:da:48:bf:
                    9d:b1:8b:d0:0b:de:2f:82:9e:2b:82:6b:ae:8f:7c:
                    a6:2d:31:ed:40:f2:4f:bf:6f:ff:71:8b:a8:65:71:
                    d8:60:dd:9c:37:00:94:1a:2f:a2:a0:e9:ea:48:43:
                    b7:f2:f8:b5:bb:79:ad:73:40:01:cb:12:aa:18:b0:
                    5f:5d:00:95:17:cc:a6:31:5d:1e:2e:ac:bd:15:5b:
                    ef:a5:5a:5b:ca:c8:8f:22:47:ee:7a:16:10:ff:b8:
                    57:ec:52:da:52:60:ff:85:0e:86:fa:f1:ff:70:8e:
                    b0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:68:1A:FE:78:40:2D:95:15:AF:9C:4F:00:A3:E0:6E:B2:7A:CF:40
            X509v3 Authority Key Identifier:
                keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/8F368BEEF9C411EB9F9E645DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.208.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:5f:ac:79:34:b6:c2:a0:ad:70:1a:3f:23:df:33:57:d3:25:
         78:53:25:71:bf:10:83:a5:43:b6:05:8a:1d:ba:39:54:4f:54:
         5a:96:64:94:02:a9:07:68:9a:04:9b:6b:f3:a2:f1:55:78:1e:
         ea:1e:54:39:58:c6:70:10:f5:da:ca:5b:d5:d1:e8:92:62:0b:
         3d:02:56:30:00:ec:45:2a:a7:9e:51:84:2d:1e:67:8f:22:e9:
         95:70:5c:d5:81:d5:e0:a6:b1:0a:01:a2:18:9d:2b:1f:c5:f2:
         dc:25:25:23:9e:c7:52:6c:a0:35:2b:96:7c:0b:34:33:61:ad:
         f7:02:f0:02:4d:d6:e9:c6:70:2a:f2:2f:4d:63:d2:ba:67:8f:
         d0:49:96:89:f3:e8:14:af:ed:cb:3f:a1:e8:12:10:a1:53:86:
         c9:c5:69:ec:4e:25:ba:d7:e6:c8:8e:ba:c8:a6:0c:fe:03:df:
         cb:ce:1b:1d:15:40:a1:23:94:03:fa:9b:bd:ba:6d:a4:6d:2a:
         18:87:4a:b7:51:75:54:d7:94:6d:67:c6:36:f3:e9:44:7a:bc:
         03:eb:af:1e:5a:da:80:cf:97:95:34:5c:2d:3d:ad:8e:a3:68:
         3d:2c:1a:cf:03:66:ca:76:c3:d0:99:7d:20:65:31:80:8b:8c:
         1e:b1:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:40:52 2026 by rpki-client