Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/011CBE6CDF8911ED942E2A67C4F9AE02.roa
File:                     011CBE6CDF8911ED942E2A67C4F9AE02.roa (raw, json)
Hash identifier:          30Ay1Zbq76x+Zxtcn+jqASaeqsesqa1rZ5wxXWBIbpA=
Subject key identifier:   1E:69:CD:A0:68:E0:7C:6A:A6:AB:21:E1:4E:C3:37:DC:1C:3E:C9:E5
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0B28
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/011CBE6CDF8911ED942E2A67C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:50:37 +0000
ROA not before:           Wed 26 Mar 2025 19:59:59 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     395266
IP address blocks:        203.78.194.160/28 maxlen: 28
                          203.78.195.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2856 (0xb28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: Mar 26 19:59:59 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a47c6d-8c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:2c:69:93:3b:b1:b6:fb:dc:b1:b2:1f:fb:
                    f9:ed:07:77:65:02:59:8f:29:6c:ff:ec:ee:0f:f6:
                    40:cf:e7:be:20:29:85:6a:11:1f:de:62:d6:e0:92:
                    f4:2e:0b:bc:87:bb:d6:4e:68:dc:91:c3:b2:29:c9:
                    94:cf:d1:a4:7b:82:6b:de:0c:55:b8:80:54:8e:44:
                    7d:f0:55:dd:bf:a7:67:f0:19:2f:c8:6f:a4:d7:bd:
                    37:98:2f:10:0c:f1:04:f5:01:38:82:88:ee:94:77:
                    23:62:45:c2:6d:a5:2d:d2:a4:74:c9:1e:aa:d6:54:
                    fe:ee:7f:3c:81:6d:12:af:59:31:c9:fa:85:d5:45:
                    ce:15:bf:c2:6f:d3:6c:76:7a:ca:ce:96:0d:eb:78:
                    bf:1c:66:70:1d:cb:33:ac:e4:f1:3a:d6:bd:42:13:
                    01:ae:33:e1:cb:0a:87:9c:d2:a5:e8:f6:5b:9c:54:
                    3c:9f:e4:f8:65:b0:04:b9:e3:4f:dd:fc:e5:c5:31:
                    4e:14:1f:01:27:81:00:46:e4:71:d7:33:7b:03:aa:
                    b9:e5:40:69:b0:02:3c:cf:13:06:7f:fc:d6:ff:14:
                    5a:3a:3c:fb:73:3d:1a:3c:60:b3:c8:d0:a7:ff:7d:
                    45:0b:c5:4b:83:79:1b:ea:d0:1f:64:f9:c0:68:9c:
                    58:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:69:CD:A0:68:E0:7C:6A:A6:AB:21:E1:4E:C3:37:DC:1C:3E:C9:E5
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/011CBE6CDF8911ED942E2A67C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.78.194.160/28
                  203.78.195.0/28

    Signature Algorithm: sha256WithRSAEncryption
         23:2e:41:e8:60:bb:20:41:a3:65:8b:9d:29:7a:90:88:68:25:
         df:c3:4f:34:d5:49:ef:ab:cb:b2:7f:0f:4e:61:b9:62:2c:a5:
         17:90:76:d8:99:cb:9b:bc:9a:34:af:fd:29:60:c6:7f:c6:14:
         0b:e9:e0:0e:28:b1:3b:48:92:a7:df:61:9b:de:5b:a5:5c:75:
         50:43:90:f5:89:28:3c:3f:9c:21:7d:0a:5d:42:f1:c1:ec:1e:
         d5:57:d3:f2:ec:68:78:3a:0a:3c:01:91:d5:a8:7f:2e:7d:e6:
         29:c9:61:05:10:cc:f3:c4:e5:87:1d:0f:50:35:f5:88:53:9a:
         46:ee:dc:78:e9:8c:67:bd:88:15:24:a8:fd:58:02:53:cb:48:
         cb:5a:3b:aa:f2:27:3f:8b:57:d1:8a:e7:e5:8b:3f:d2:32:f1:
         63:93:9a:48:d3:67:64:9e:ef:96:3c:bd:d3:c6:49:f0:d8:e0:
         32:73:5f:0d:89:a6:e9:18:2a:4e:c4:2b:ec:82:5d:59:f0:de:
         00:58:7f:bc:12:85:84:3e:87:6c:b0:9d:5b:43:ac:bc:af:0b:
         09:f2:b4:2e:29:26:0a:0d:30:de:a6:07:76:4d:e0:52:06:50:
         6c:7b:84:a1:f9:44:22:60:ba:9e:6a:8c:88:06:3c:25:a7:90:
         85:62:88:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:27 2026 by rpki-client