Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7E87079C721B11EF81654E68C4F9AE02.roa
File:                     7E87079C721B11EF81654E68C4F9AE02.roa (raw, json)
Hash identifier:          Ofcv64QiRuJ8e1Cn8cx7vEXXUxb7GlJHfjbCgc8i+PA=
Subject key identifier:   34:B3:B4:B8:90:1F:C0:8D:0F:61:4C:1B:E0:29:4A:D6:8D:74:B8:DB
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       0259
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7E87079C721B11EF81654E68C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:17:00 +0000
ROA not before:           Wed 31 Dec 2025 04:24:27 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     140618
IP address blocks:        202.28.72.0/24 maxlen: 24
                          202.28.73.0/24 maxlen: 24
                          202.28.74.0/24 maxlen: 24
                          202.28.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Dec 31 04:24:27 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a490ac-525b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:60:c9:0f:c8:37:24:a1:e8:16:15:f1:70:
                    87:03:48:9b:15:50:46:49:74:e1:c5:16:17:f6:b3:
                    36:d5:93:97:81:1b:41:43:13:e6:74:85:38:f7:66:
                    55:38:5d:fb:f2:ad:8b:a0:9d:93:ff:b1:15:ae:15:
                    8b:60:77:e8:b1:59:b0:1e:c1:ce:3b:08:6b:c7:65:
                    53:80:28:d2:17:da:af:d1:90:09:19:0f:31:36:59:
                    97:d7:7d:39:db:50:ec:18:14:f8:59:ef:e7:04:be:
                    3a:bf:fa:e4:42:83:d5:89:13:cf:51:45:30:14:09:
                    9e:19:1d:02:f4:8d:66:e2:b9:35:d3:7b:63:e1:d4:
                    90:8c:2d:49:08:b5:5d:48:23:c8:9a:17:ed:7b:71:
                    81:01:3e:55:7a:aa:59:38:75:39:16:10:8c:30:63:
                    f8:66:e2:02:0d:9e:64:8d:f5:27:0b:0e:5a:04:08:
                    f1:7e:76:dd:05:db:be:97:8d:55:ca:89:68:a9:3e:
                    c9:6b:5c:6a:95:20:1d:bb:26:33:78:50:d7:76:81:
                    e8:6e:0f:48:0c:4b:74:84:b5:d4:5d:37:01:5b:c0:
                    2a:31:bb:3a:be:15:fb:af:f1:0a:b0:7c:d8:f9:0d:
                    5e:b5:97:04:de:12:ac:e3:94:96:dc:b7:3b:df:ff:
                    4c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B3:B4:B8:90:1F:C0:8D:0F:61:4C:1B:E0:29:4A:D6:8D:74:B8:DB
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7E87079C721B11EF81654E68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.28.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:d2:d7:89:c3:82:bf:49:52:35:d6:a9:8c:18:9d:ed:15:ad:
         c9:c9:69:94:84:ea:b0:4e:f5:be:4e:a3:ee:22:d7:c1:e2:94:
         3b:d8:00:3a:40:9f:9d:42:c9:1e:53:3d:29:58:2e:d2:78:6d:
         60:d0:2f:60:a7:94:50:a9:cb:1c:7f:c4:35:ba:90:dc:44:b1:
         0b:3b:81:02:ef:21:95:e7:f8:90:89:c4:1e:c5:9e:71:37:3f:
         41:35:5f:53:bb:ad:b9:0a:75:23:30:7d:1c:40:95:3d:01:2f:
         cb:8f:5d:3a:ef:1c:a0:85:cd:52:66:d9:69:0d:b3:be:95:2b:
         ff:18:a5:18:f5:25:5a:7e:90:3f:95:19:b2:69:d9:da:cc:46:
         ff:e3:6c:24:53:00:0b:0a:65:4c:ba:9a:92:4b:c9:95:64:2f:
         27:97:42:ce:84:04:5d:88:be:a4:6a:ce:46:3a:47:aa:74:1a:
         dc:c4:14:ae:e8:21:1e:97:fa:2b:79:d0:35:9e:00:3b:e4:17:
         33:ba:c6:c4:86:3c:b7:7f:c4:ae:dd:c3:7b:90:63:61:14:8c:
         c2:0c:45:7c:11:cf:2c:6e:8e:0a:88:7f:8e:a0:0e:73:e4:bb:
         86:af:74:79:1d:19:ee:61:8b:c3:c7:36:f4:3e:4f:3b:e3:19:
         e4:0b:90:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:44:55 2026 by rpki-client