Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/7D0B1750124C11F1948F10C8293D8C67.roa
File:                     7D0B1750124C11F1948F10C8293D8C67.roa (raw, json)
Hash identifier:          GzMsXq/aTj9FzAzYn7KgNFAIOqbcmYFPlYWTUb/eH5I=
Subject key identifier:   30:83:B9:0B:EB:62:E9:95:F2:C0:AD:8C:81:0A:58:15:1A:09:9E:E4
Certificate issuer:       /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Certificate serial:       0A45
Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/7D0B1750124C11F1948F10C8293D8C67.roa
Signing time:             Sun 01 Mar 2026 18:00:42 +0000
ROA not before:           Wed 25 Feb 2026 13:18:35 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     198949
IP address blocks:        43.225.96.0/24 maxlen: 24
                          43.225.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
                          rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2629 (0xa45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
        Validity
            Not Before: Feb 25 13:18:35 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47ec9-1f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:fe:71:19:4d:5a:4b:30:07:9c:4e:1a:a9:
                    d6:ea:2f:60:24:fa:05:31:c3:7f:c0:ed:89:b6:78:
                    87:3c:2b:44:b0:24:fb:bc:15:82:09:96:2b:8b:80:
                    4b:08:f5:29:bf:16:f7:b4:09:8f:6e:8d:99:d4:70:
                    88:52:c7:ee:0b:51:de:7c:b3:7a:05:72:17:a7:f0:
                    ba:a4:a9:0d:51:09:39:6f:03:ae:65:11:0a:6a:07:
                    f3:d9:79:82:cb:17:d2:6f:08:76:5e:30:df:1b:5b:
                    3e:d5:9f:2d:a8:9e:6f:63:8c:8f:84:ff:56:a3:f9:
                    db:0d:dc:7f:32:8c:e3:a2:6b:fc:f9:4a:2a:99:3a:
                    08:9d:c6:82:a6:3f:00:0f:f5:85:7f:b2:6d:e7:31:
                    1a:7a:d9:9c:c9:48:1b:35:1a:d4:f9:32:bd:fa:9a:
                    f1:0c:09:15:37:67:38:9c:83:17:0c:a5:31:f2:ed:
                    8f:a4:f1:08:d3:4d:dd:71:fd:b2:08:e2:ff:91:93:
                    3f:20:fd:23:d4:49:19:73:21:30:0b:25:a3:a1:a1:
                    d5:c5:85:73:03:53:43:3d:07:56:16:df:36:d5:80:
                    8b:2b:b3:b4:ee:43:12:a7:8a:e4:93:47:77:e1:3f:
                    b0:d2:9a:65:72:76:a8:60:f6:da:a8:ce:0d:7e:66:
                    c9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:83:B9:0B:EB:62:E9:95:F2:C0:AD:8C:81:0A:58:15:1A:09:9E:E4
            X509v3 Authority Key Identifier:
                keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/7D0B1750124C11F1948F10C8293D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:4b:7b:3e:2c:bc:e9:7b:ad:75:a2:be:83:00:1a:be:eb:f6:
         0e:20:e1:45:3f:0a:3c:e0:62:81:df:fe:ee:3b:11:96:a9:00:
         9c:37:32:55:5b:3d:63:73:25:c8:13:b0:65:76:7f:4c:54:e9:
         24:73:87:a5:da:8d:9c:f1:92:1e:52:c4:f5:b6:da:14:4d:2e:
         2e:f0:b5:22:a9:f9:c7:64:df:eb:99:be:a2:1a:5d:a9:71:8f:
         3b:02:4a:1d:0f:f2:94:c8:83:f9:3a:3a:e6:76:4c:51:5a:a0:
         0c:dd:03:3b:ae:8c:6a:5c:0e:b2:09:ce:a1:18:fc:81:9b:0f:
         2c:7b:1d:8e:b6:e3:9e:95:e6:2b:a9:66:c5:73:db:50:2e:cd:
         20:c7:7b:80:05:c6:88:06:00:fb:5b:fc:5b:f5:f7:3e:90:9a:
         64:7d:1f:6b:59:64:31:21:43:a6:5e:37:fa:d3:b0:6b:95:e4:
         ab:63:b7:b3:71:6e:d5:cb:57:b9:7d:86:f5:82:bd:a6:25:dc:
         dd:20:44:27:7e:71:c5:a7:45:fa:7b:52:52:40:34:c5:13:70:
         39:3c:65:c6:07:ce:62:46:1d:97:c6:ac:00:87:a7:08:f6:30:
         bc:d5:25:2b:ac:5c:5f:68:28:62:3b:7f:04:9e:6d:f0:b5:4b:
         0b:0e:8c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:35:15 2026 by rpki-client