Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/7A6DC1B2ED5011F0BF908D85516F56BC.roa
File:                     7A6DC1B2ED5011F0BF908D85516F56BC.roa (raw, json)
Hash identifier:          Pf2Xcfz159pyHDj2hXgdqjwAgXXP/RYEqTKSIfi/V/I=
Subject key identifier:   E9:DA:C4:17:57:8E:2E:C7:BB:32:96:56:50:CA:A1:96:29:B5:0A:4A
Certificate issuer:       /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
Certificate serial:       1446
Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/7A6DC1B2ED5011F0BF908D85516F56BC.roa
Signing time:             Sun 01 Mar 2026 18:15:10 +0000
ROA not before:           Tue 10 Feb 2026 17:14:42 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     134069
IP address blocks:        203.115.192.0/21 maxlen: 21
                          203.115.212.0/22 maxlen: 22
                          203.115.216.0/24 maxlen: 24
                          203.115.217.0/24 maxlen: 24
                          203.115.229.0/24 maxlen: 24
                          203.115.234.0/24 maxlen: 24
                          203.115.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5190 (0x1446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
        Validity
            Not Before: Feb 10 17:14:42 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4822e-5d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fc:46:bf:3c:8b:69:b7:87:e0:10:49:be:f2:
                    e6:de:7e:3d:f1:2a:d3:aa:f0:54:4a:3e:3e:c7:2a:
                    c0:5d:7a:40:8b:aa:f4:a3:8b:18:f7:c5:67:40:e0:
                    16:46:d1:13:de:96:0d:b1:3d:9d:3d:da:b6:87:4e:
                    39:5a:6a:98:25:b5:d7:86:88:ab:ac:8a:c9:1a:44:
                    b8:25:61:69:bb:87:0d:21:c0:6d:a1:bb:f7:b4:82:
                    51:9d:f2:05:26:de:3e:4c:c0:62:92:1e:49:c2:61:
                    51:46:a1:9d:ed:f6:ff:e8:d9:e8:d1:d2:c2:cf:97:
                    98:4c:97:29:41:c1:89:0f:91:8f:9f:ab:9e:f1:b0:
                    17:c7:6a:42:6b:5f:af:84:d8:7a:98:b5:da:64:0d:
                    8d:e4:95:8f:d7:cd:b8:63:7a:0d:4e:64:a2:73:17:
                    8f:d0:5a:1c:18:fc:22:55:37:6d:c2:c4:a3:46:4b:
                    27:51:e7:56:57:6a:a2:11:ab:a6:93:de:02:c2:ae:
                    71:f0:91:11:1c:54:b3:5c:eb:db:80:2c:12:d2:b0:
                    8c:2b:66:cc:6a:96:b9:4a:2c:92:8e:75:3c:e0:e7:
                    69:a4:62:14:fc:96:c1:65:38:ae:f2:b3:ce:8f:36:
                    7d:ea:6a:33:99:9a:d5:37:97:5d:70:16:98:bf:0b:
                    4a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DA:C4:17:57:8E:2E:C7:BB:32:96:56:50:CA:A1:96:29:B5:0A:4A
            X509v3 Authority Key Identifier:
                keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/7A6DC1B2ED5011F0BF908D85516F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.115.192.0/21
                  203.115.212.0-203.115.217.255
                  203.115.229.0/24
                  203.115.234.0/24
                  203.115.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:bb:fb:7c:49:b5:b7:0a:08:c0:9a:43:82:b4:df:43:8d:be:
         05:d6:86:df:78:9d:26:9d:a9:11:f7:b5:c1:37:cb:ff:8c:2a:
         6a:79:2a:e5:d0:0f:08:ac:de:b6:69:59:29:b2:cf:63:07:bb:
         b7:f3:71:36:25:ff:af:04:a6:ce:d4:40:e4:d8:e9:38:5d:0a:
         39:2a:54:25:80:3a:28:3c:9b:fe:09:2e:b0:cc:a7:8a:36:e8:
         f4:02:e0:6c:3e:76:fe:25:af:05:8b:16:e4:da:9e:d2:b8:83:
         56:87:1b:82:00:9d:53:01:b4:8a:15:12:be:59:69:80:4a:dc:
         2e:4e:e8:88:06:c8:27:fd:33:15:73:72:01:1c:36:d1:9b:64:
         66:e5:5c:b8:78:15:35:a2:b4:42:9c:1a:6c:5e:62:c3:ca:71:
         68:ba:60:20:79:09:78:0d:d9:69:27:3c:6f:f2:c2:87:1d:96:
         dd:af:6b:70:04:94:8a:e1:18:72:1d:89:b9:d1:8d:b1:b9:11:
         11:93:02:ab:5a:84:11:84:d6:0e:d0:4a:2d:91:4b:6d:0f:36:
         1a:de:d4:da:29:e8:16:87:1d:32:be:b8:6a:24:d4:39:da:3f:
         84:55:96:7e:10:6d:ac:bb:b7:09:96:30:f1:17:25:d6:81:d4:
         2f:ee:9c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:11:05 2026 by rpki-client