Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/D4A8FF0273ED11F08E63C02DC4F9AE02.roa
File:                     D4A8FF0273ED11F08E63C02DC4F9AE02.roa (raw, json)
Hash identifier:          tHMeyTgXVjqu1F3xAY8dG3i7T9LkiFUkLAwr5V1RAGo=
Subject key identifier:   4C:5E:B6:B2:33:EB:0F:A6:61:21:DA:03:C4:29:DB:E8:11:69:5D:F4
Certificate issuer:       /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
Certificate serial:       3546
Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/D4A8FF0273ED11F08E63C02DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:52:12 +0000
ROA not before:           Thu 12 Feb 2026 15:10:27 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     131248
IP address blocks:        203.20.74.0/23 maxlen: 23
                          2401:c01::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl
                          rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13638 (0x3546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9EE2, serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
        Validity
            Not Before: Feb 12 15:10:27 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a460ac-c638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:29:45:23:30:57:d9:8b:91:ce:44:ef:64:
                    bb:27:d0:e4:7e:05:87:f9:81:be:40:b1:e5:e9:2a:
                    00:f0:93:1c:f1:60:4b:7f:11:83:14:da:06:d1:cb:
                    4c:f8:98:4b:45:52:e2:7b:2f:c6:9c:b8:a3:cd:56:
                    b0:7d:89:04:1a:be:19:e6:0c:05:2d:f1:98:96:cd:
                    6c:bb:94:97:0e:2b:b6:f7:7c:8b:b8:39:f3:d6:6f:
                    82:0e:1f:da:37:34:0b:34:44:68:07:dc:5d:17:97:
                    3a:bb:d7:08:5a:86:66:93:fd:99:b9:9e:7b:e7:66:
                    b5:24:ee:59:d9:b1:d8:86:72:73:d4:90:63:e7:08:
                    28:47:c0:09:c9:c7:92:0c:43:cb:a8:04:c4:ce:23:
                    f8:91:b8:fd:ef:d8:40:d9:72:29:ea:49:47:8d:2e:
                    a1:fb:09:1d:ab:2f:9b:46:87:95:d9:f1:05:d9:85:
                    fa:c8:1e:80:26:81:aa:6d:48:c0:af:90:05:14:24:
                    f6:46:2c:be:a7:5f:5b:43:54:b2:aa:a5:a6:a9:3a:
                    b5:7a:95:00:e5:aa:5c:9b:96:98:e8:53:3e:8d:40:
                    39:7c:2e:b5:0a:b1:70:c7:5c:6d:41:84:1c:2a:9b:
                    99:18:1f:56:fd:fa:0d:80:9a:19:78:9c:b8:13:2e:
                    bd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5E:B6:B2:33:EB:0F:A6:61:21:DA:03:C4:29:DB:E8:11:69:5D:F4
            X509v3 Authority Key Identifier:
                keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/D4A8FF0273ED11F08E63C02DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.20.74.0/23
                IPv6:
                  2401:c01::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:eb:46:4c:e6:bf:60:17:de:83:94:af:8a:ad:d1:c2:0f:16:
         bc:68:db:9e:cf:1b:1a:23:3f:ee:63:34:40:d3:30:f4:2f:af:
         44:e0:de:20:d0:89:3f:50:68:0b:81:85:4a:4a:3e:d6:a1:90:
         3a:39:08:5e:48:d5:33:30:6f:d3:4b:f8:8d:01:12:05:a9:ee:
         8c:4c:dc:72:21:64:83:a1:af:20:52:3c:d1:1c:2d:25:bd:64:
         b5:d6:0a:1d:6b:d6:37:f5:fd:ca:45:30:17:38:d0:65:ad:77:
         3d:52:6c:cc:b2:e7:58:22:60:43:7e:7e:1b:da:93:9c:e2:34:
         0a:a6:73:01:14:b0:16:a0:0c:44:12:f7:aa:73:d4:73:ae:94:
         8c:bb:40:6a:90:48:f1:d3:d6:6a:be:55:a1:5b:ca:f4:b0:cb:
         c3:0e:c4:be:dd:46:60:a5:2d:3b:32:15:c7:0a:2f:74:bb:df:
         97:1e:7b:03:01:56:79:d2:49:62:16:65:4b:af:b2:fb:77:bb:
         40:52:f3:c4:60:89:86:d6:12:94:c6:e5:0b:77:26:6d:c3:04:
         20:51:bc:9e:e2:72:1c:33:3e:a5:62:75:f8:c5:9c:8d:99:3e:
         39:79:92:58:47:96:7f:86:83:78:f9:5e:56:d1:2e:f2:a6:02:
         6c:2a:eb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:56 2026 by rpki-client