Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/AC32D0A0AD8311F0AE971C51C4F9AE02.roa
File:                     AC32D0A0AD8311F0AE971C51C4F9AE02.roa (raw, json)
Hash identifier:          iTay77sT0HsUaA9+vJ8V6EkP9qWXeG1pu9pjwt+MeZA=
Subject key identifier:   87:3A:0D:BC:7B:11:BD:A1:03:42:20:09:39:5F:20:24:6D:E4:5D:D5
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       614F
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/AC32D0A0AD8311F0AE971C51C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:39:31 +0000
ROA not before:           Mon 20 Oct 2025 07:09:09 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     17540
IP address blocks:        203.184.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24911 (0x614f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
        Validity
            Not Before: Oct 20 07:09:09 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a487e3-9379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:11:be:d7:49:a2:80:91:05:50:a9:8a:3a:0b:
                    f5:b9:77:0d:1d:f2:75:15:c6:7d:3a:33:4f:46:a2:
                    b1:b0:42:23:32:0e:41:8d:22:3a:27:bf:df:a8:34:
                    5f:c8:3c:4e:9e:0d:74:51:56:0d:39:f0:30:65:5c:
                    7a:43:a6:9d:60:2a:e5:c4:23:c8:40:c9:b8:54:96:
                    f8:ec:34:1b:74:b1:42:23:bd:51:9f:0f:78:4f:f9:
                    35:18:9e:28:cf:0d:41:e4:c2:62:f8:a9:5d:70:cd:
                    98:a2:b3:b9:fd:c5:9d:79:3a:ed:34:0b:61:01:db:
                    53:9d:e2:9f:41:58:04:f7:eb:8c:c6:84:31:53:61:
                    26:ea:18:8e:c7:cc:6b:05:a6:78:ac:ae:69:64:fe:
                    e0:e3:fd:1c:f0:83:af:d8:ad:fc:67:54:f1:d6:5a:
                    d4:c2:f6:ed:2c:b5:04:3c:38:17:c5:1e:cc:93:9c:
                    ba:f3:cf:3b:01:fe:c4:ad:35:d8:88:49:f8:42:29:
                    19:be:6a:0e:64:58:d4:52:51:b6:e1:28:ba:d1:81:
                    0e:6b:41:0e:b3:38:4a:9d:77:1e:32:59:e4:bc:09:
                    15:6f:27:98:c8:0d:f3:6e:83:8d:81:aa:ef:d0:ab:
                    35:02:5f:b9:db:9d:6b:15:4c:fd:61:35:d9:af:37:
                    0e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3A:0D:BC:7B:11:BD:A1:03:42:20:09:39:5F:20:24:6D:E4:5D:D5
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/AC32D0A0AD8311F0AE971C51C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.184.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:7f:4e:ec:9a:67:11:bf:57:aa:a0:be:c0:67:d7:5c:ab:f4:
         07:f2:1d:ff:ec:cd:8e:14:bc:7a:c1:bb:0c:04:f5:82:c2:3a:
         27:a3:99:72:1e:77:8f:1c:7d:a8:30:47:fe:af:3f:61:ae:06:
         76:ae:1c:33:df:a2:63:ff:d9:db:83:16:fa:42:85:c2:ec:93:
         47:33:04:a0:62:fc:13:76:d9:0e:a4:82:c1:c8:1f:dc:7a:b5:
         91:7c:5d:e6:72:9d:8f:60:03:02:ec:f1:1e:41:70:a5:d0:1a:
         c5:31:44:73:35:1f:5b:47:75:c6:32:bc:10:98:6a:d1:e2:aa:
         fe:55:3e:76:3c:c2:a7:9b:3d:dc:69:58:49:bd:f0:1e:41:21:
         94:15:d4:8a:e3:11:2c:2b:aa:22:e2:1f:a6:63:d7:60:21:79:
         82:af:7b:a5:1f:bb:82:4a:41:a9:64:57:e2:e0:90:99:5b:4e:
         34:bf:3e:d6:2a:e3:e4:4a:89:85:b3:ab:0f:91:9f:1a:8d:04:
         0a:5e:70:79:6f:66:23:4a:18:8a:02:e3:b9:38:f5:66:62:4e:
         3a:56:63:f1:c5:d8:63:df:de:d0:bb:57:75:3c:ca:4a:91:ea:
         67:23:6d:0a:7c:f3:7f:5d:9a:52:26:fc:8c:0e:77:9c:e7:a0:
         ca:93:23:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:47 2026 by rpki-client