Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EABEFD16232E11EFA6F6B887C4F9AE02.roa
File:                     EABEFD16232E11EFA6F6B887C4F9AE02.roa (raw, json)
Hash identifier:          xDuveZIAeiF8spg4lBuxKsG1TTj+p+6drc7JLYP7O6w=
Subject key identifier:   EC:C5:06:0B:5E:DB:D9:6D:F8:AC:A3:39:B2:18:74:60:E2:89:63:9B
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       031C
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EABEFD16232E11EFA6F6B887C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:37:57 +0000
ROA not before:           Thu 05 Jun 2025 03:10:49 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     5065
IP address blocks:        202.134.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796 (0x31c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 03:10:49 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a48785-97e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:f4:f8:d6:a8:53:b8:d7:e8:b6:f2:3d:b3:
                    74:54:31:95:75:dd:9f:70:36:b2:f4:4e:2f:32:eb:
                    25:fe:03:4c:30:21:64:d7:95:3d:a1:e8:6f:99:d1:
                    d5:c7:bb:e9:8d:5f:1b:d8:e6:81:4c:16:8f:47:0a:
                    cd:3c:a1:76:bb:bd:10:82:c5:65:06:32:c1:9b:0a:
                    26:3a:98:e8:ce:40:58:26:56:5f:63:b4:78:cd:fa:
                    2d:be:37:51:6a:30:49:33:0e:6e:ef:14:b6:fb:49:
                    44:57:d5:97:70:01:99:e3:11:7a:d8:72:a3:8d:10:
                    3e:25:74:ce:ef:09:dd:bf:d7:8d:df:82:23:81:f1:
                    fa:6b:47:e4:96:e9:e8:66:4d:3b:19:b9:69:e4:94:
                    b3:68:7e:dd:63:54:09:97:36:12:5a:63:d4:97:80:
                    b1:fc:8f:b8:8a:1a:21:14:89:ae:00:9b:38:63:68:
                    42:0e:c6:94:70:98:20:6d:74:06:b9:03:b6:69:f0:
                    c5:72:d4:27:90:6f:a6:49:45:97:86:4b:62:04:28:
                    9b:d4:65:03:3b:81:c0:a9:26:1f:4f:26:34:85:a4:
                    fb:41:17:fc:1a:78:64:ca:86:c3:87:e2:bf:84:05:
                    03:f3:d1:a0:0a:52:95:cc:d6:d8:9b:94:51:c2:d4:
                    99:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C5:06:0B:5E:DB:D9:6D:F8:AC:A3:39:B2:18:74:60:E2:89:63:9B
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EABEFD16232E11EFA6F6B887C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:78:c3:a6:15:4c:61:a1:1e:16:28:e3:9d:5c:65:e7:d0:b9:
         bf:ab:69:36:f1:ed:70:35:72:6f:b2:e4:92:3f:6f:9e:e4:69:
         70:11:c5:01:c6:c4:96:e0:fa:b2:3e:da:5f:97:3c:c1:1d:a4:
         04:41:1c:90:b3:e9:18:da:60:0c:9c:16:b9:ca:e5:5a:da:14:
         ed:1f:02:f1:ac:e6:8d:d3:07:81:69:02:06:26:c8:26:0f:1c:
         5f:85:81:0d:c3:79:db:b7:a3:82:52:bc:35:9d:af:34:2d:d9:
         74:2d:ed:9c:c8:36:7d:69:81:0d:7a:29:8d:34:1c:72:2b:fe:
         fd:b5:f9:b1:14:eb:14:ca:80:62:2b:bc:21:e4:42:88:3e:7d:
         3e:35:72:a3:2f:4c:b4:10:09:d2:98:23:5b:67:78:e7:d9:3e:
         99:b5:89:82:39:c6:7e:48:e6:10:9f:11:f9:5a:bd:ce:bc:ad:
         2a:3e:2c:a0:ea:94:b9:12:93:76:9f:c5:be:8e:18:e0:00:67:
         fc:8f:0e:00:65:ac:39:cd:51:1e:ec:24:11:3b:3f:d8:70:fe:
         40:90:b4:28:b7:60:99:2d:91:19:eb:58:d0:c0:22:e0:3b:9f:
         45:72:ca:c8:54:25:63:31:5a:1d:27:dc:4d:73:f6:a9:e6:ea:
         8b:51:f0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:43 2026 by rpki-client