Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/AC80FFE2722F11EDA987AB75C4F9AE02.roa
File:                     AC80FFE2722F11EDA987AB75C4F9AE02.roa (raw, json)
Hash identifier:          Pu3HSh7UAJem3mpQag6OD//H7HzHFiNKKj+xFn4gXBM=
Subject key identifier:   C5:03:A1:0E:34:D2:8B:35:C7:B4:4A:3D:1B:41:17:9D:B6:62:2C:57
Certificate issuer:       /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
Certificate serial:       0275
Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/AC80FFE2722F11EDA987AB75C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:17:44 +0000
ROA not before:           Thu 23 Oct 2025 03:46:14 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     8360
IP address blocks:        203.23.96.0/24 maxlen: 24
                          203.23.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl
                          rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
        Validity
            Not Before: Oct 23 03:46:14 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a45898-9b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:d4:63:47:0a:ff:07:46:65:4d:91:04:b3:
                    2d:49:73:7e:13:6d:6c:26:1e:b3:af:5d:ca:84:a5:
                    72:96:20:13:4c:a7:42:ae:fa:7c:66:29:21:78:05:
                    85:57:ee:89:44:7c:a5:cc:ee:92:cb:5a:f9:d8:a4:
                    7b:c1:df:2e:1a:02:ed:ad:87:e3:33:15:97:49:a6:
                    68:27:6f:a4:4b:c0:d5:39:59:99:cc:ab:e5:d0:04:
                    8f:29:2c:ac:25:cb:49:8c:4f:99:59:01:d3:de:35:
                    be:e1:a0:23:de:c2:2b:08:2a:31:82:77:a1:56:2a:
                    c3:71:db:42:65:34:5c:87:89:d9:92:7a:ab:b8:f1:
                    c6:78:1d:8d:75:8f:7f:fd:3b:b3:a5:81:85:b5:85:
                    b8:49:ce:40:e4:a5:1d:5a:3d:97:83:5e:56:e7:84:
                    99:8f:39:17:64:55:e2:05:2b:d5:79:86:43:dd:d9:
                    a8:ae:26:c2:c5:3a:b6:e5:46:96:0a:07:98:19:91:
                    71:65:49:14:22:a7:5c:c1:0d:d5:90:c4:ea:31:51:
                    44:99:64:2e:fb:19:e9:c6:b9:ea:db:a7:e1:5e:cf:
                    d6:23:e7:1d:ad:50:53:fa:3c:82:e6:32:38:ba:3c:
                    cc:86:9a:02:df:19:8e:86:9d:5a:7b:90:11:ea:e4:
                    6c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:03:A1:0E:34:D2:8B:35:C7:B4:4A:3D:1B:41:17:9D:B6:62:2C:57
            X509v3 Authority Key Identifier:
                keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/AC80FFE2722F11EDA987AB75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.23.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:d3:11:65:69:44:f5:be:56:fa:5b:1c:43:44:07:82:89:58:
         b1:3c:88:06:85:bc:1f:db:34:ba:5e:dc:3d:81:cc:f6:55:55:
         7c:e8:96:02:7a:1a:b1:b9:fd:90:be:f2:2d:d2:6a:1a:0b:98:
         a2:98:ab:63:f5:27:06:5f:b0:78:a2:89:23:50:63:1d:96:58:
         7b:46:b5:92:3c:cb:a5:bc:f7:ff:a6:f3:7d:c2:d1:f4:ea:99:
         4e:75:62:86:54:b7:b6:c1:d5:60:a9:c3:f4:4a:cf:1e:2c:eb:
         15:16:c8:3c:88:5b:43:b9:76:c5:41:d2:cb:09:80:c8:a3:7a:
         52:e2:76:ac:6c:01:f2:8d:05:0b:f4:a8:c0:b9:20:b9:01:c7:
         b0:6b:d3:82:14:e5:92:af:7a:98:dc:bf:f4:a0:fa:44:73:55:
         7e:de:00:ca:b8:c6:27:5e:c9:c4:b9:11:c5:31:a9:32:4a:07:
         14:07:a1:db:47:6b:7b:63:55:13:29:c1:30:fa:c9:fd:e0:98:
         1c:cd:bc:13:83:ae:26:11:68:5c:ed:ba:98:21:79:c3:7d:e9:
         67:5f:31:9e:73:f3:07:91:f4:1b:9a:16:a2:02:59:58:1a:54:
         54:f0:09:c0:87:53:7d:bd:b7:23:96:9b:90:c7:92:57:6b:86:
         1b:df:82:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:00 2026 by rpki-client