Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/0F56E156828C11EDA6BCA176C4F9AE02.roa
File:                     0F56E156828C11EDA6BCA176C4F9AE02.roa (raw, json)
Hash identifier:          euR0nP+kaFd6kQu0agN5nMyxfPmJbVXruQJYUEGKZTU=
Subject key identifier:   F2:57:AD:8B:75:9C:E6:BF:3C:EB:FB:F1:5B:26:5F:E3:F4:9D:58:D2
Certificate issuer:       /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Certificate serial:       0E93
Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/0F56E156828C11EDA6BCA176C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:58:04 +0000
ROA not before:           Thu 12 Feb 2026 18:15:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56179
IP address blocks:        122.144.32.0/19 maxlen: 24
                          202.154.192.0/19 maxlen: 24
                          203.135.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3731 (0xe93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A39, serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
        Validity
            Not Before: Feb 12 18:15:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69a4620c-3c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:dc:ab:02:f3:db:d7:86:99:db:76:27:f5:
                    1e:b2:b4:7c:75:83:ed:f2:ca:8e:f7:f6:39:28:95:
                    4f:06:23:47:9a:15:ec:a9:7e:4f:3b:d5:90:88:c2:
                    0a:88:fc:3e:58:9a:e4:06:c7:1d:21:74:83:df:cf:
                    d0:43:7f:d7:49:81:f4:89:b6:44:87:45:2d:05:04:
                    f3:68:f9:6d:86:9c:8f:5f:23:e7:1d:7e:d2:9c:70:
                    36:b3:8a:a6:22:88:28:0f:68:53:83:72:21:ec:72:
                    96:2e:d6:d8:c6:f8:3a:c7:38:e1:b9:79:95:cf:bf:
                    1c:ec:51:d9:da:6f:de:b2:5a:9d:81:e8:34:c7:ce:
                    ef:96:7a:52:a8:00:e0:f6:b9:a9:cd:08:65:55:41:
                    07:11:32:4a:a8:0e:1b:8e:de:12:1b:91:d6:4e:3c:
                    26:67:e4:c5:a4:e5:ae:80:4e:37:79:f5:3c:7e:e9:
                    be:cf:29:a5:be:bb:13:bb:ef:33:1e:5b:4f:23:e1:
                    15:a5:3d:15:d0:cf:96:87:c5:e8:41:4f:22:fc:fd:
                    df:96:58:17:65:59:40:56:7a:6b:1f:d4:15:d7:2a:
                    91:3b:a8:55:ef:59:fd:45:98:46:47:a8:2d:ef:5c:
                    44:fc:3f:9e:37:33:ce:4f:c5:80:a0:35:6b:2f:c1:
                    27:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:57:AD:8B:75:9C:E6:BF:3C:EB:FB:F1:5B:26:5F:E3:F4:9D:58:D2
            X509v3 Authority Key Identifier:
                keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/0F56E156828C11EDA6BCA176C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.144.32.0/19
                  202.154.192.0/19
                  203.135.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d1:67:70:ca:28:f4:f4:91:34:8f:2f:26:8b:d5:13:83:fa:5a:
         23:10:66:b9:73:ac:8e:9c:8c:ba:7f:ae:ec:47:37:27:ef:37:
         14:b0:f9:c4:a4:a8:55:92:3b:3e:93:29:d3:1b:c6:69:85:cc:
         61:de:2f:ca:ef:bc:b1:52:d4:39:fa:5a:d3:a6:92:19:d0:32:
         73:c0:35:eb:50:10:aa:d0:46:4b:58:f1:86:01:23:3d:fd:10:
         1d:7a:1c:d3:f2:04:74:87:68:60:e1:70:18:4d:6e:a8:05:95:
         1e:4e:2e:2b:e7:1e:5e:6f:2f:7d:a0:68:3f:5b:c9:7b:e6:04:
         30:c8:de:61:0b:73:ed:20:be:ef:30:67:a5:b6:b5:9c:1a:73:
         a0:f8:2f:19:0b:ef:7d:d6:99:27:30:b9:69:a6:03:9a:bd:52:
         ee:b6:59:e8:23:21:4a:57:00:48:e8:8f:97:e7:db:9d:88:9c:
         68:e3:71:23:8d:09:6f:aa:44:79:ad:42:00:93:ce:fd:db:ce:
         72:2e:5c:9d:05:60:d9:e8:85:2f:4f:23:3d:10:45:e7:86:b0:
         a6:b1:95:b6:b2:f6:ed:c5:28:98:d6:2c:30:f9:5f:24:ec:0d:
         56:fc:88:16:bc:25:d6:e4:90:49:29:2c:e3:bc:e4:d1:0e:1b:
         67:61:2f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:29 2026 by rpki-client