Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/347735B4C00511EE82324069C4F9AE02.roa
File:                     347735B4C00511EE82324069C4F9AE02.roa (raw, json)
Hash identifier:          /kUd9dg2x7gbUussL1CZiH5//c2g+atYXyM6o1Fjd68=
Subject key identifier:   7F:58:CF:89:5B:1E:C3:67:58:4B:E8:AC:49:12:A2:2C:AB:CD:71:C8
Certificate issuer:       /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial:       365E
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/347735B4C00511EE82324069C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:18:36 +0000
ROA not before:           Wed 04 Jun 2025 15:10:51 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     150718
IP address blocks:        114.130.94.0/24 maxlen: 24
                          114.130.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
                          rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13918 (0x365e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Validity
            Not Before: Jun  4 15:10:51 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a474ec-0332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b5:e7:57:e4:2d:f7:db:4d:04:b5:d1:4a:27:
                    9d:1d:fb:a7:af:5e:86:7c:bb:7f:2d:ac:eb:1f:47:
                    5c:c9:20:fa:5f:26:13:76:dc:5e:7f:f9:f5:f4:96:
                    ca:71:b9:02:7f:88:85:54:7c:37:0f:15:a2:fc:d7:
                    70:17:bf:d7:09:75:7e:32:35:53:7e:60:8f:e5:45:
                    19:e2:97:36:e7:4d:8b:2a:ae:5a:04:94:87:17:fc:
                    83:34:42:17:c5:9c:32:8d:9b:c0:b1:03:fc:5b:1f:
                    96:1b:08:5e:77:26:32:ba:61:26:4f:28:b9:5c:c1:
                    6c:0a:53:45:d8:0a:c1:e1:24:13:4c:8f:65:8e:f0:
                    06:dc:77:4d:96:31:55:bb:d6:3a:cd:44:cc:98:12:
                    f4:17:6d:1c:e5:cf:bc:77:2a:e4:57:f0:8c:3e:49:
                    25:3f:ec:fd:d4:71:d0:d6:c3:ba:b5:6f:13:f2:0b:
                    fc:79:36:82:c4:81:ad:37:7d:74:4b:92:5f:e8:ba:
                    05:f0:73:7a:b2:7d:cc:17:08:a9:97:ca:de:1a:31:
                    a8:d0:28:00:70:31:b0:b4:b3:ee:db:e9:9d:c7:93:
                    3a:00:8c:3b:bc:53:4e:a5:57:af:cc:fd:b0:96:1d:
                    3c:d5:ff:36:77:1f:1e:71:32:05:fe:a6:80:51:2f:
                    d9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:58:CF:89:5B:1E:C3:67:58:4B:E8:AC:49:12:A2:2C:AB:CD:71:C8
            X509v3 Authority Key Identifier:
                keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/347735B4C00511EE82324069C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.130.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:28:a6:b7:87:7b:d2:0e:66:ff:74:d3:ba:a4:3d:10:1f:be:
         9f:80:bb:06:d0:a0:2f:85:11:ed:91:d4:e4:3d:9d:4f:e1:11:
         9e:34:92:4f:72:76:dc:fa:4b:54:a3:e4:47:16:94:30:90:c9:
         8a:e4:dd:56:4f:79:8c:a3:46:dd:15:af:d1:82:c1:95:40:69:
         b2:a1:c6:49:c6:02:e2:6f:0b:b4:92:94:c8:df:5c:76:cf:f6:
         1a:de:82:7f:8d:39:98:81:21:ed:bc:9a:33:01:60:1c:e4:13:
         c7:2c:dc:33:9a:a8:3c:ff:14:60:f3:28:66:87:46:60:f2:b8:
         82:e3:e8:48:74:59:d8:5d:84:d0:81:86:f4:d2:40:e1:ff:2c:
         e6:5e:64:dd:3e:91:41:2b:b5:e4:69:31:5a:b0:e7:05:6b:00:
         7a:2e:7b:3c:98:c3:98:68:41:7a:ed:99:c1:7d:1d:51:8f:a0:
         bd:c8:04:e4:ab:24:6e:a8:d8:b7:cc:5f:cb:6a:c3:92:c6:18:
         46:83:22:30:00:67:a9:ff:3b:63:30:b7:f1:c3:a7:37:38:9b:
         e5:bd:1d:69:c2:6b:90:76:7f:81:b9:49:4e:65:e3:26:f0:d3:
         bb:e7:7b:ff:92:bd:d9:a2:18:98:79:5f:75:2f:cd:f5:af:05:
         b7:ca:e7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:42:00 2026 by rpki-client