Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/584BBFB03B7811F099AF3F55C4F9AE02.roa
File:                     584BBFB03B7811F099AF3F55C4F9AE02.roa (raw, json)
Hash identifier:          l0BN+69IATjBs2e8rsvGVdnATqQxFWaTj1Qx5PP2+w8=
Subject key identifier:   7D:B9:D6:B4:0B:FE:4F:4F:D6:54:2C:80:84:CC:93:6F:B1:FD:83:BE
Certificate issuer:       /CN=A91BBA4F/serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
Certificate serial:       8F
Authority key identifier: E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/584BBFB03B7811F099AF3F55C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:06:54 +0000
ROA not before:           Wed 28 May 2025 04:00:51 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     152583
IP address blocks:        157.20.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl
                          rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBA4F, serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
        Validity
            Not Before: May 28 04:00:51 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3e58d-d622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:de:a5:b4:3a:9c:32:34:0f:c1:e5:7b:39:
                    8b:4c:ee:b9:c6:63:1b:7d:35:9e:95:68:e3:1c:74:
                    b3:3b:08:8a:a7:d1:ea:e8:3d:22:33:b3:a9:a1:8b:
                    e9:9c:d2:57:18:70:07:df:5b:a0:9f:c2:14:70:82:
                    eb:57:d3:16:02:65:7f:12:7b:f3:6f:9e:88:bc:fa:
                    d3:73:ac:d9:a9:47:d1:8c:25:1d:30:6b:ee:e3:1f:
                    70:14:d3:cd:52:22:39:91:26:60:ab:be:f2:37:f8:
                    71:d6:c1:ef:09:12:54:89:f6:cf:8f:25:a1:21:3f:
                    92:4a:3b:48:e3:80:9b:3b:91:0b:ca:a3:97:96:af:
                    dc:ce:60:91:c3:99:00:15:31:b1:3e:bf:89:e5:d3:
                    d4:f2:cf:81:c3:eb:17:8f:37:a0:d0:d7:61:dc:61:
                    1f:51:6b:ac:79:34:d9:e6:be:6f:f9:23:cd:df:19:
                    69:25:0c:be:5b:dc:12:3f:ec:4f:35:48:0f:91:64:
                    20:16:a4:e7:5b:f1:14:86:d1:0e:af:3f:4e:75:10:
                    9f:67:3e:30:e1:f1:88:f3:2a:de:97:04:7d:76:84:
                    ff:90:9e:c6:20:e7:6b:20:f7:08:d0:54:39:b8:90:
                    fd:88:9b:29:de:91:7b:a9:24:a7:1d:dc:a8:b7:f7:
                    5e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B9:D6:B4:0B:FE:4F:4F:D6:54:2C:80:84:CC:93:6F:B1:FD:83:BE
            X509v3 Authority Key Identifier:
                keyid:E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/584BBFB03B7811F099AF3F55C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:03:e9:16:0b:4a:2e:d1:04:dc:db:df:3d:cc:63:eb:9f:b3:
         48:a8:cf:ae:e1:a6:ca:a9:c8:84:84:e9:cb:49:d8:e8:84:6c:
         4d:7c:fd:71:fd:ae:e9:94:de:e7:a1:33:7c:23:b2:c1:b4:93:
         1b:63:fd:f8:e6:42:c5:d3:b7:95:81:0b:7e:ae:3b:80:3e:ed:
         92:f3:21:b2:18:51:5c:9e:03:12:af:66:e2:05:f8:69:08:83:
         d7:7d:e5:b7:30:2d:11:a5:7a:a3:0d:4c:8e:d6:3b:70:c9:cb:
         22:f3:77:01:40:a0:4f:b3:00:da:4d:e5:69:50:fb:2e:ff:ca:
         3e:9b:79:6f:a0:87:5a:af:51:de:c6:7d:1a:15:61:06:84:91:
         36:1c:31:08:8d:b8:b5:4f:b4:52:c5:cb:08:b4:b6:fb:61:c0:
         ec:08:07:80:fe:e2:02:c2:01:30:7f:69:75:4d:c8:b0:1f:b7:
         5b:32:e7:26:e0:b8:86:8a:6a:45:d3:0f:16:d8:d5:aa:8e:8c:
         66:0d:84:f4:47:e5:8d:04:ab:9a:74:87:3b:f8:6e:2d:4e:d0:
         ca:2d:2a:41:f6:cb:f1:c0:4b:16:fe:85:09:7c:c7:1b:df:1c:
         16:bf:58:89:9e:40:b5:39:4f:87:a0:6d:a9:90:74:8d:24:04:
         60:1c:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:05 2026 by rpki-client