Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/E5675F48336E11EA94623E18C4F9AE02.roa
File:                     E5675F48336E11EA94623E18C4F9AE02.roa (raw, json)
Hash identifier:          2xiNwjYW2pyIkz7eTV4qaxFN/iMW7ShcypRgqsGtO2A=
Subject key identifier:   22:20:FD:95:24:9C:63:C9:F2:20:C0:2F:8F:D3:AD:32:98:01:00:8F
Certificate issuer:       /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8
Certificate serial:       0C0B
Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/E5675F48336E11EA94623E18C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:37:04 +0000
ROA not before:           Thu 10 Jul 2025 19:28:56 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        202.52.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl
                          rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3083 (0xc0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6B27, serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8
        Validity
            Not Before: Jul 10 19:28:56 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a45d20-26d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:bf:b2:06:7a:43:c3:77:f0:73:8e:ff:ea:
                    46:ad:14:c0:ad:91:54:e4:b4:34:9d:a0:08:53:69:
                    68:53:0d:e2:6e:eb:98:ab:c3:38:4a:68:41:76:fb:
                    5f:8e:4c:48:ec:ec:ea:de:62:7c:36:1c:9a:9d:5a:
                    ba:88:35:94:76:00:22:6b:07:b0:37:92:45:1a:5d:
                    e4:5c:a2:0d:16:7c:67:56:9e:f5:52:9c:10:33:af:
                    34:df:d0:e8:6f:c8:03:2f:c3:ef:b1:5d:97:36:6b:
                    86:b0:eb:a5:c5:b9:ef:87:86:b5:1e:2f:59:e0:30:
                    64:ba:65:04:2a:1c:ff:ac:da:2b:11:04:bb:ea:55:
                    1b:c3:80:c1:d3:23:03:55:e0:a9:91:3e:08:d5:cc:
                    d8:27:63:99:31:02:c4:39:53:de:6b:15:1a:bf:d8:
                    3c:b4:91:4b:97:95:08:1e:e4:df:37:c4:c1:39:e9:
                    49:6b:a9:ad:47:ec:3e:1e:0a:a6:07:f9:27:27:51:
                    db:b7:3c:1d:29:76:08:8c:0d:f6:81:6b:9e:3d:9a:
                    f2:f7:bc:b0:7c:6d:43:1d:fe:b6:69:3f:52:8d:49:
                    d3:f0:58:88:b4:8d:e6:2b:cb:9d:ed:7b:83:8d:d8:
                    d7:97:d9:08:84:b1:db:b6:ef:f3:85:cb:15:81:6e:
                    da:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:20:FD:95:24:9C:63:C9:F2:20:C0:2F:8F:D3:AD:32:98:01:00:8F
            X509v3 Authority Key Identifier:
                keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/E5675F48336E11EA94623E18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:1e:2f:2c:35:ab:50:e2:91:ec:bd:34:93:2c:62:21:65:57:
         34:e3:d6:be:1a:ad:c7:7e:ed:fa:07:6d:6d:92:03:94:7b:04:
         8d:ed:da:97:43:44:7a:27:f8:09:d2:26:71:6b:fc:5c:2b:99:
         04:99:99:3c:15:a8:19:5a:31:71:b0:13:92:f8:aa:1e:64:95:
         70:48:a8:10:9e:59:b9:d4:c6:f0:b8:ed:b7:39:de:76:1d:56:
         79:2f:46:eb:c5:e4:bc:3d:52:66:a0:24:fc:56:41:1a:80:ca:
         fc:09:b0:88:b4:4e:b3:cb:2c:23:4c:38:37:c2:13:16:ea:d1:
         9a:0e:1c:33:bf:6c:01:24:28:59:05:48:69:50:e1:a8:73:53:
         85:53:78:30:c6:c4:73:e4:09:ed:71:1d:23:d3:b2:80:90:9f:
         98:8b:90:40:80:cf:e6:24:57:79:f0:09:83:fd:33:9c:b7:34:
         01:9e:95:17:2f:93:f2:eb:f3:bf:f8:12:9b:9f:da:6e:d7:a0:
         bf:5d:ed:0a:0b:a7:35:c4:9e:f2:cf:d2:f0:a4:43:46:c7:5b:
         be:15:68:d6:49:ed:93:6b:da:57:a5:25:86:43:89:d4:1f:52:
         1b:32:d8:de:c0:20:f1:80:c3:e1:7f:8a:ad:71:43:6e:08:a6:
         42:e1:a4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:56:01 2026 by rpki-client