Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/BF6CF7EE1D1811E89AF8344EC4F9AE02.roa
File:                     BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (raw, json)
Hash identifier:          ZaZYPfA17ML/f/J4P82QVyDEPcDzxxZaNFjB0O9tVyE=
Subject key identifier:   7F:FD:C7:1B:CD:47:2E:59:FD:2B:C0:32:DF:05:7E:8C:38:C5:D1:61
Certificate issuer:       /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial:       1BC1
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/BF6CF7EE1D1811E89AF8344EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:08:31 +0000
ROA not before:           Tue 10 Feb 2026 16:13:53 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137483
IP address blocks:        202.144.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
                          rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7105 (0x1bc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
        Validity
            Not Before: Feb 10 16:13:53 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4728e-e949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:21:58:2e:31:9c:39:b0:4f:cd:3e:99:d2:18:
                    ab:28:bf:2c:ce:0b:a9:45:cb:dc:06:d2:ce:0f:3e:
                    7e:30:cd:78:cc:63:9a:09:fe:4d:3f:a3:fa:1b:e7:
                    e7:7b:f3:e0:26:c1:de:82:95:94:1b:cc:fb:38:8e:
                    a3:2a:18:1d:4e:b5:c1:8a:83:9d:a0:f2:4d:24:4c:
                    3d:83:e0:4f:e2:1b:ca:1e:27:3b:ac:ab:4d:b3:7a:
                    9c:92:b3:09:d4:d7:59:1c:d3:eb:8b:30:f5:fd:e5:
                    16:18:45:fd:af:86:ec:39:69:ee:2a:ec:68:e6:45:
                    58:fc:0d:2f:4f:c0:35:f1:0c:8c:58:b0:12:6f:0f:
                    23:fa:8c:74:90:5e:b9:f1:3d:5a:1c:fb:c6:f1:48:
                    bb:05:9e:47:9e:34:1c:51:b7:ac:e5:cc:13:bc:30:
                    1f:c6:15:a8:a3:43:2e:d2:61:de:73:bd:4b:71:ec:
                    91:dc:88:e4:67:94:68:25:16:30:53:db:fe:5c:a4:
                    e8:a1:09:d4:f8:25:10:d9:2e:66:17:34:71:4e:94:
                    9c:6f:c8:11:63:09:34:1c:f7:46:4c:b8:7e:de:6c:
                    da:88:a8:a5:29:e1:06:e0:0b:e6:0c:94:8e:63:ae:
                    fc:1d:04:6e:68:2c:01:23:a1:fa:2b:9b:41:4f:c1:
                    8e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FD:C7:1B:CD:47:2E:59:FD:2B:C0:32:DF:05:7E:8C:38:C5:D1:61
            X509v3 Authority Key Identifier:
                keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/BF6CF7EE1D1811E89AF8344EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.144.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:67:db:aa:64:4f:76:d5:bf:25:b7:44:d7:b0:73:42:0f:83:
         42:f6:28:f4:5f:be:94:c5:4a:3d:03:8f:1c:79:ec:74:41:df:
         15:62:a1:09:bf:f8:1e:63:02:e7:34:71:bb:8b:9f:2e:32:73:
         ae:fd:10:2b:02:05:ba:6d:52:58:6f:b3:21:da:3f:13:d1:73:
         d7:39:83:d1:34:c6:fa:d6:ed:50:a7:77:27:d5:2b:8c:3b:2f:
         06:7b:c7:63:d8:59:55:97:a7:b5:37:e9:24:13:93:d8:eb:fc:
         01:52:42:56:fe:94:e2:c7:cc:bd:1c:e4:74:07:c7:49:00:46:
         9a:52:6b:da:05:a2:07:d8:cc:ae:ba:66:f0:38:ed:37:ff:4b:
         96:f0:9a:99:f2:54:77:25:8c:4b:1f:6f:89:a7:cf:40:64:5b:
         31:b6:88:bc:46:a4:85:17:83:9d:16:15:38:79:27:3f:72:79:
         62:c4:53:91:d4:ef:64:51:92:82:a6:a0:0d:31:3e:52:1d:99:
         94:ee:88:a6:1c:36:2b:ca:b8:de:d0:0c:34:5e:3c:16:ec:3c:
         d9:6a:e3:d1:41:c2:07:b2:87:43:88:b1:95:72:0b:62:b5:7a:
         55:67:ae:10:6e:0d:89:50:3b:03:66:5d:03:d0:b3:b0:b9:d4:
         7e:19:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:37 2026 by rpki-client