Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/E21E9FE0347F11F19DF6F99AA9833773.roa
File:                     E21E9FE0347F11F19DF6F99AA9833773.roa (raw, json)
Hash identifier:          D7+bSA2LIBJFLG6B18pSyvGelNlmr8zMF7Fhiy0Ow1c=
Subject key identifier:   CF:A5:BF:31:77:D0:CC:F7:1F:29:AD:C5:74:64:73:03:EC:C0:F8:6B
Certificate issuer:       /CN=A91B2D85/serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
Certificate serial:       04
Authority key identifier: 3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/E21E9FE0347F11F19DF6F99AA9833773.roa
Signing time:             Fri 10 Apr 2026 01:52:08 +0000
ROA not before:           Fri 10 Apr 2026 01:52:08 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     9268
IP address blocks:        203.23.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D85, serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
        Validity
            Not Before: Apr 10 01:52:08 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d857c8-aa55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:20:f3:40:5e:17:f0:b8:0d:f6:ad:f8:ec:7e:
                    18:7c:d0:c1:6b:04:94:b4:45:1a:86:6b:1a:06:bf:
                    72:58:fd:dc:b7:9e:ea:40:7d:58:53:ba:79:10:f0:
                    66:64:f8:f7:3c:7b:db:a8:84:fb:f3:05:6d:ec:eb:
                    15:35:34:5d:e6:41:da:d0:c9:34:39:10:ec:0a:a1:
                    06:7c:9a:03:7a:ac:32:4a:8f:51:78:d3:49:79:5b:
                    21:35:de:00:9e:93:38:a7:39:8f:85:e4:a1:3b:77:
                    90:84:83:ff:bf:df:54:ce:81:99:af:f9:a1:2d:d5:
                    85:02:31:d8:3d:41:af:d3:6d:5b:19:96:cc:00:d6:
                    44:17:9d:bb:43:15:2c:72:e4:ea:4b:48:5d:33:47:
                    3f:c8:1e:79:17:b0:29:5b:06:3e:b1:69:47:f9:fb:
                    f4:c0:d6:5a:de:e4:2d:39:e7:ec:12:d1:4c:64:10:
                    f6:c6:03:fb:e1:e3:05:7e:0c:7f:27:c8:ae:5c:e6:
                    fc:8f:f9:44:59:b8:f7:59:0f:6a:b6:03:2a:f9:8f:
                    03:e7:5c:22:81:72:88:70:55:ab:d5:49:39:af:e6:
                    16:09:58:87:bf:f9:71:57:56:52:00:3a:9a:4a:a9:
                    8c:a5:88:f2:f0:b4:3c:86:46:81:79:a9:c7:4a:76:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A5:BF:31:77:D0:CC:F7:1F:29:AD:C5:74:64:73:03:EC:C0:F8:6B
            X509v3 Authority Key Identifier:
                keyid:3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/E21E9FE0347F11F19DF6F99AA9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.23.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:ee:87:8e:98:db:d8:7b:3c:fe:92:6a:e2:8e:46:59:01:af:
         e0:1a:6d:8a:a2:c1:f8:ea:fc:f8:06:1f:77:6b:e9:65:1d:d0:
         96:6f:d3:78:db:5b:b3:42:84:5a:42:1c:6e:66:19:a3:6e:a4:
         7f:75:27:ad:66:e5:17:fc:d6:49:e5:ad:d7:ae:95:49:dc:c4:
         cc:e2:1d:7c:e9:dd:8c:ff:6e:b2:c2:be:0c:e7:e9:82:6e:2f:
         88:ce:13:05:1c:2c:6f:1f:85:c8:7f:68:ff:39:1e:c0:a6:01:
         dc:b9:f7:43:87:90:52:ac:f6:ae:d9:28:dc:27:65:bf:df:d4:
         85:29:d9:f8:6f:ba:c0:94:92:5b:64:49:1d:6a:ef:cc:37:ec:
         20:4d:b1:fd:d2:13:c4:7f:70:ad:02:6b:4a:f1:3f:94:f5:9a:
         1e:8c:6d:e0:1c:6b:0a:75:98:26:22:c6:68:f9:51:f0:0d:06:
         d1:6a:35:57:1a:18:56:15:6f:21:b9:a9:0d:cb:7d:af:b8:03:
         ef:ee:bb:50:8f:a2:e4:e4:33:92:43:0e:93:17:fc:c4:94:e6:
         89:90:55:5e:8e:b8:bb:32:a2:cf:7e:d3:83:43:37:a1:b4:ca:
         41:35:33:47:6c:92:0a:6c:6c:1b:31:d9:be:10:55:18:e0:09:
         23:fd:a1:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:24 2026 by rpki-client