Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/E28E6B84BB0011F0BF1A9179C4F9AE02.roa
File:                     E28E6B84BB0011F0BF1A9179C4F9AE02.roa (raw, json)
Hash identifier:          smbkx45zByj9Rn6fJhQgzAKRd1qZspDivWChDPD3Xgc=
Subject key identifier:   27:95:F0:58:60:2C:8B:67:E9:35:31:B9:07:31:22:CB:FB:FF:4D:2B
Certificate issuer:       /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial:       3665
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/E28E6B84BB0011F0BF1A9179C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:18:42 +0000
ROA not before:           Thu 06 Nov 2025 11:08:12 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139616
IP address blocks:        114.130.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
                          rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13925 (0x3665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Validity
            Not Before: Nov  6 11:08:12 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a474f2-d009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:28:e5:b2:58:b8:d8:5a:d4:a5:78:78:e9:
                    c8:b1:5c:a8:22:32:c0:42:08:93:bc:bd:55:ef:0b:
                    ce:9e:3b:14:cf:74:64:36:3a:cb:1c:d5:b0:e7:6f:
                    c2:ea:23:b7:44:30:af:f0:2a:62:2f:a0:3d:a2:5c:
                    9d:15:2c:f3:c1:51:d5:f9:ff:8f:92:18:73:97:5d:
                    81:a3:57:17:f8:80:54:81:b2:5e:63:94:00:5a:cf:
                    8b:3c:74:d1:4d:e0:cd:70:a8:a4:05:8c:31:42:01:
                    5e:ef:f4:91:84:af:1c:76:31:1a:db:ab:50:8e:17:
                    01:fb:aa:07:3d:b8:08:8a:3d:dc:9d:c6:ff:cb:7e:
                    1e:88:f4:f3:23:1d:e0:7d:ad:77:aa:65:43:fc:1b:
                    a5:f7:cd:94:15:11:59:40:98:80:3a:44:90:bc:10:
                    4e:6d:8d:3c:5d:fe:0c:a2:44:ae:3d:c5:5d:5b:9b:
                    ee:a7:aa:c6:c9:14:98:57:71:1b:4b:01:9f:44:95:
                    73:58:51:55:c4:47:24:62:d5:17:ed:2a:16:d8:94:
                    35:d8:50:ac:e8:48:b9:80:8a:78:32:e3:5f:bf:16:
                    55:31:44:2f:9e:61:f2:37:d8:57:65:26:58:d4:c4:
                    0c:4e:48:50:7c:4c:c2:c2:47:74:4d:2c:51:9f:ca:
                    4a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:95:F0:58:60:2C:8B:67:E9:35:31:B9:07:31:22:CB:FB:FF:4D:2B
            X509v3 Authority Key Identifier:
                keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/E28E6B84BB0011F0BF1A9179C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.130.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:20:7b:73:99:ce:15:47:9d:ee:31:90:b4:42:a4:6a:20:7f:
         1f:f1:91:eb:76:1d:72:35:9b:7e:62:e9:2d:a0:0f:e4:6e:92:
         25:00:7d:19:13:2f:95:3d:57:67:9b:35:b1:70:29:11:cf:e4:
         8c:25:b2:55:4b:f6:18:6c:31:8c:11:00:e9:27:80:c7:26:a8:
         f0:39:91:9f:c3:b0:3d:47:69:70:2d:3c:59:56:ad:34:fe:59:
         1d:1a:5a:64:eb:0d:55:51:6f:c1:17:20:f6:64:e1:e0:10:24:
         c2:c0:2f:a6:36:39:09:ea:ab:dc:81:9c:52:ab:f6:b4:50:0b:
         af:30:27:d8:7d:c5:0f:5a:57:0b:cd:14:5f:7e:08:69:0d:26:
         57:9c:2a:a7:34:11:d8:0b:ed:0a:83:22:5d:4f:72:69:9e:33:
         b4:7d:0d:a8:6d:4c:0d:3f:91:a5:1c:ae:64:95:33:a9:e8:d8:
         83:42:24:de:ac:ab:72:e7:62:17:c9:d1:35:c3:18:60:74:3c:
         64:f1:e5:4c:ab:b6:ba:f5:d6:f7:42:8a:ec:e1:e2:39:fa:72:
         f9:62:8c:70:39:81:b5:a3:6b:b8:33:77:13:df:16:44:95:1d:
         d1:11:09:75:ae:67:26:ed:93:c1:2e:16:7d:42:49:e0:dd:62:
         a5:65:fa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:46:19 2026 by rpki-client