Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/2DED8B66D02011ECB021972BC4F9AE02.roa
File:                     2DED8B66D02011ECB021972BC4F9AE02.roa (raw, json)
Hash identifier:          RaUaevCK3cMcEjvMblM5lIqP1A3Tgc9wesL2YFGw8EE=
Subject key identifier:   6B:7E:52:33:CD:28:D7:8C:5E:DD:33:2A:5F:50:E8:1C:17:A4:C9:A9
Certificate issuer:       /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial:       03B8
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/2DED8B66D02011ECB021972BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:50:58 +0000
ROA not before:           Fri 21 Nov 2025 05:34:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     58606
IP address blocks:        203.175.178.0/24 maxlen: 24
                          203.175.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952 (0x3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
        Validity
            Not Before: Nov 21 05:34:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a46e72-cb3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c5:8b:60:f2:d1:1f:8a:5c:d3:3a:b1:d0:18:
                    42:64:53:08:04:d7:de:e2:9c:c8:21:0c:fb:7d:db:
                    91:b4:ed:ae:83:e5:3a:17:6e:e5:32:15:4e:82:9f:
                    db:ac:12:4c:92:e6:fe:bd:f2:ab:27:6a:71:8f:51:
                    b6:40:bf:07:d7:9a:15:a0:bc:77:28:4e:44:ae:72:
                    df:39:97:37:57:27:36:22:e6:2d:8d:02:9e:00:cd:
                    63:d0:4a:05:09:9a:78:71:ba:ae:37:75:3f:d2:0b:
                    5e:9f:6f:e7:ac:c1:5d:db:a2:74:ff:45:4a:ee:71:
                    1c:15:3c:46:5f:a9:78:ae:c9:68:f2:a2:03:f2:62:
                    87:45:83:ae:e2:c0:30:77:47:51:0e:1c:98:af:d7:
                    bd:ee:84:a7:36:a5:fe:2a:53:9e:05:c0:ff:40:75:
                    5f:b0:2e:88:c1:dd:c8:89:23:b0:7a:eb:f3:54:f2:
                    13:62:b1:3c:27:90:59:30:ff:72:37:01:bb:97:3b:
                    07:d0:ca:20:ac:3f:1b:17:00:75:2e:34:95:49:7d:
                    f2:ef:e6:ab:ab:14:18:64:36:69:21:f9:d6:dc:be:
                    f4:4e:63:30:74:42:4d:2d:c5:09:09:f8:df:cd:f6:
                    dd:1d:ca:c8:49:9c:6b:d8:c7:90:72:c5:b0:0c:aa:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7E:52:33:CD:28:D7:8C:5E:DD:33:2A:5F:50:E8:1C:17:A4:C9:A9
            X509v3 Authority Key Identifier:
                keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/2DED8B66D02011ECB021972BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:b4:f7:6b:c7:18:c5:0a:4f:27:4d:6e:d0:fd:9d:cd:df:4d:
         81:ea:c1:b8:4a:92:76:ee:de:26:97:de:c6:f1:bd:d1:07:b5:
         d6:4c:22:bd:a8:20:de:f5:a1:de:b1:04:38:01:e6:67:b0:dd:
         f1:5d:0c:6e:08:00:34:fd:98:39:49:f7:e6:15:6b:05:00:02:
         19:42:7e:5d:36:3f:44:c4:e5:e0:b1:af:60:a3:71:47:d6:89:
         8e:81:d2:36:42:1d:d2:29:c6:6e:d7:a0:bc:51:a5:9d:56:9a:
         9d:be:61:45:3f:ef:d9:8d:a2:59:89:ae:92:97:b3:d5:7d:c9:
         44:96:86:04:23:3c:68:89:02:38:b6:c6:ef:27:79:90:35:15:
         83:31:d7:22:65:ae:09:ed:56:8b:52:15:c6:91:2e:b2:e1:88:
         b5:4d:ac:c0:3f:11:23:72:34:45:0b:87:86:5b:b5:83:ce:2e:
         c1:e7:cb:88:d5:1c:c7:af:ea:c6:b7:9f:3c:c5:6f:d5:96:d8:
         ef:70:53:8b:7c:f5:d1:a7:69:65:c7:f5:92:f6:78:cc:1d:44:
         f9:7a:27:c5:0a:a5:1c:e6:0b:d3:54:98:49:ad:c3:b3:cc:b9:
         dd:48:55:39:12:3d:8b:e1:81:c4:27:98:d0:de:d4:2f:3e:f3:
         f5:8f:56:fb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUUxMDgxMTAvBgNVBAUTKDAyQkI5N0ZEOEIxRjYyMEUwMkExRTJDQURCNTlENjU2
RjAxQURBNDUwHhcNMjUxMTIxMDUzNDAwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmU3Mi1jYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxsWLYPLRH4pc0zqx0BhCZFMIBNfe4pzIIQz7fduRtO2ug+U6F27lMhVOgp/b
rBJMkub+vfKrJ2pxj1G2QL8H15oVoLx3KE5ErnLfOZc3Vyc2IuYtjQKeAM1j0EoF
CZp4cbquN3U/0gten2/nrMFd26J0/0VK7nEcFTxGX6l4rslo8qID8mKHRYOu4sAw
d0dRDhyYr9e97oSnNqX+KlOeBcD/QHVfsC6Iwd3IiSOweuvzVPITYrE8J5BZMP9y
NwG7lzsH0MogrD8bFwB1LjSVSX3y7+arqxQYZDZpIfnW3L70TmMwdEJNLcUJCfjf
zfbdHcrISZxr2MeQcsWwDKqSdQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGt+UjPN
KNeMXt0zKl9Q6BwXpMmpMB8GA1UdIwQYMBaAFAK7l/2LH2IOAqHiyttZ1lbwGtpF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTEwOC9FM0IwNDZDQ0Qw
MUMxMUVDQjM1NEFGMjRDNEY5QUUwMi9BcnVYX1lzZllnNENvZUxLMjFuV1Z2QWEy
a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FydVhfWXNmWWc0Q29lTEsyMW5XVnZBYTJrVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUUxMDgvRTNCMDQ2Q0NEMDFDMTFFQ0IzNTRBRjI0QzRGOUFFMDIvMkRFRDhCNjZE
MDIwMTFFQ0IwMjE5NzJCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBy6+yMA0GCSqGSIb3DQEBCwUAA4IBAQCDtPdrxxjFCk8nTW7Q/Z3N
302B6sG4SpJ27t4ml97G8b3RB7XWTCK9qCDe9aHesQQ4AeZnsN3xXQxuCAA0/Zg5
SffmFWsFAAIZQn5dNj9ExOXgsa9go3FH1omOgdI2Qh3SKcZu16C8UaWdVpqdvmFF
P+/ZjaJZia6Sl7PVfclEloYEIzxoiQI4tsbvJ3mQNRWDMdciZa4J7VaLUhXGkS6y
4Yi1TazAPxEjcjRFC4eGW7WDzi7B58uI1RzHr+rGt588xW/VltjvcFOLfPXRp2ll
x/WS9njMHUT5eifFCqUc5gvTVJhJrcOzzLndSFU5Ej2L4YHEJ5jQ3tQvPvP1j1b7
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:13 2026 by rpki-client