Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/4BD423FE3AF911EC918C643AC4F9AE02.roa
File:                     4BD423FE3AF911EC918C643AC4F9AE02.roa (raw, json)
Hash identifier:          OWs47VxIEQ1QhlgbrlxvKW4VXn5SiZ0ruC9D8eNOYWY=
Subject key identifier:   F2:11:7A:9A:46:97:DD:0E:D4:7B:78:0E:74:F2:E7:18:47:96:F9:6C
Certificate issuer:       /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
Certificate serial:       0533
Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/4BD423FE3AF911EC918C643AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:57:51 +0000
ROA not before:           Thu 03 Apr 2025 00:25:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     2764
IP address blocks:        202.93.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl
                          rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1331 (0x533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BADCE, serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
        Validity
            Not Before: Apr  3 00:25:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a40d9f-ba5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:2b:eb:1d:02:fa:52:e4:c3:20:f6:95:a0:
                    98:47:9c:97:ec:fe:fd:ab:24:9c:82:01:88:dd:92:
                    1b:8b:17:3d:9d:76:bc:e1:b0:e1:cf:64:5d:cc:ac:
                    96:5b:10:3c:4c:2b:ea:80:3d:7e:5d:e8:08:69:0f:
                    16:72:18:f8:65:3a:e0:4d:5a:e7:b8:4c:d9:b4:44:
                    e0:73:82:33:4f:1d:4f:9b:e7:10:c8:9f:3a:83:1e:
                    f1:7a:b4:06:75:4b:3a:36:11:35:32:cf:34:9e:a3:
                    bb:7e:c6:e1:bd:0c:0a:af:85:ce:68:e9:11:a1:9c:
                    ad:43:b8:bd:10:72:50:d9:c4:00:f7:d4:49:0b:3f:
                    62:4a:41:3d:30:ae:2e:1d:b6:9f:d1:8b:43:67:7a:
                    ab:71:95:0c:e3:7a:fe:24:f7:06:7b:40:d6:eb:88:
                    ff:d4:55:6f:03:dd:bb:65:59:7a:3a:3f:cc:f2:19:
                    37:d9:23:20:91:44:5c:0a:6e:7d:9a:89:87:4d:ff:
                    eb:6d:18:6b:cd:f8:53:e5:bf:37:29:3d:5f:d5:4e:
                    34:e7:e9:de:d3:2b:2d:d7:d9:c5:7b:17:2b:9d:f3:
                    80:48:c5:8c:f9:8c:54:b7:e4:9a:09:24:6d:d7:bb:
                    0b:cf:56:d3:36:9b:2a:4e:8e:f6:2b:3b:66:52:10:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:11:7A:9A:46:97:DD:0E:D4:7B:78:0E:74:F2:E7:18:47:96:F9:6C
            X509v3 Authority Key Identifier:
                keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/4BD423FE3AF911EC918C643AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:59:b2:7d:1f:e9:65:72:ce:91:e1:5e:e7:a1:58:33:1e:61:
         1c:0b:7c:c7:34:b1:e4:e7:97:71:9c:0a:0e:8c:be:6c:ab:63:
         74:a1:a4:0d:ba:07:8a:c9:cb:0e:56:f1:c1:38:a8:31:1e:81:
         f4:36:2d:13:cb:4d:3f:57:32:22:8e:ca:59:2b:89:86:fa:1c:
         ab:97:b3:1d:1a:d6:1d:43:51:d1:a0:88:f1:3f:4a:78:5a:35:
         3b:46:5c:dc:43:f4:a6:6c:79:67:01:72:a9:38:9b:6d:99:0d:
         70:0e:5f:62:8e:8e:b7:e2:ab:d1:b8:86:11:1f:7e:f7:c1:59:
         91:d3:e7:d3:19:4a:a3:b4:aa:ea:04:f7:98:bc:9c:4c:ae:c6:
         93:dd:42:7b:c4:42:9c:ff:d6:52:27:39:ed:39:26:b6:dc:5f:
         6d:46:8b:87:1b:8f:e2:40:61:61:56:11:eb:bc:da:97:f0:2d:
         4a:0b:c7:02:cf:e0:a8:69:0d:63:47:83:2b:8e:9d:ac:bf:6d:
         51:c0:35:79:19:e6:51:59:fd:2d:21:5d:ef:05:3e:9a:6a:48:
         69:7a:7a:a1:0d:73:c7:54:f5:79:b4:2d:84:79:d3:28:4b:8f:
         04:ac:a1:fb:04:71:0b:8d:06:98:97:e1:d7:c4:70:7c:aa:cb:
         b0:7a:e4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:33:48 2026 by rpki-client