Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1E0F8E02A2F811F0ACA39B18C4F9AE02.roa
File:                     1E0F8E02A2F811F0ACA39B18C4F9AE02.roa (raw, json)
Hash identifier:          zF+00T4LJNEoaIcxR+4BeM/u4mU5LjPjC/WvXlruU1M=
Subject key identifier:   B0:6A:28:78:8E:B9:1D:B8:31:AA:77:9A:95:BC:46:68:91:CC:DC:3E
Certificate issuer:       /CN=A91CA294/serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
Certificate serial:       59
Authority key identifier: 19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1E0F8E02A2F811F0ACA39B18C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:14:33 +0000
ROA not before:           Mon 06 Oct 2025 21:04:59 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139744
IP address blocks:        156.69.0.0/23 maxlen: 24
                          156.69.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl
                          rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA294, serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
        Validity
            Not Before: Oct  6 21:04:59 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3e759-ca9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:30:49:d7:56:d4:cd:8e:2e:98:42:a6:2a:
                    e5:5f:5f:7b:35:d8:e7:4b:19:3c:87:a9:58:80:30:
                    41:0f:16:b2:55:ba:8e:1e:c4:b1:80:3c:20:60:07:
                    08:61:8a:36:06:55:ec:d3:bf:84:42:55:d0:50:59:
                    ef:e2:22:b0:9b:9b:46:e5:91:2b:ca:8d:90:d9:b3:
                    6a:4b:b1:9a:eb:e6:52:76:a3:4a:e3:82:44:42:8b:
                    1a:be:71:8b:0f:ea:22:00:3e:2f:60:e5:ca:d9:d6:
                    5d:9b:54:e6:1e:4a:25:06:10:55:5f:6f:b7:34:0b:
                    c0:be:7c:bd:b9:df:cd:db:0f:8a:36:c2:64:4f:d0:
                    fe:6d:21:f1:bc:1a:54:a7:59:4b:a9:aa:d0:3a:02:
                    37:cb:ad:03:87:e5:61:4d:20:d2:c5:7e:42:86:aa:
                    53:6e:04:6a:a1:5c:08:65:98:66:60:31:10:c5:93:
                    01:6f:8e:0a:5b:ae:7b:92:da:a3:be:c4:14:62:19:
                    eb:85:24:15:34:21:73:45:36:8d:6d:2f:b1:40:1a:
                    31:55:c9:85:0d:a3:c0:32:01:c4:3a:51:44:b7:a1:
                    ae:7b:00:c5:df:08:d9:ba:40:b3:6f:48:03:eb:68:
                    27:cf:83:aa:9f:14:d3:83:f0:b6:ab:a6:2a:bd:5e:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6A:28:78:8E:B9:1D:B8:31:AA:77:9A:95:BC:46:68:91:CC:DC:3E
            X509v3 Authority Key Identifier:
                keyid:19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1E0F8E02A2F811F0ACA39B18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.69.0.0/23
                  156.69.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:c2:19:85:c7:e1:9f:83:61:56:3b:04:d4:91:9e:40:48:40:
         28:7a:d2:c4:ef:3e:27:62:e5:ba:07:aa:c6:b0:a7:ed:14:a6:
         e0:e0:93:81:dd:64:1d:14:8e:90:03:ac:d1:28:ae:ea:9c:fd:
         63:ca:01:60:2d:c0:dc:21:21:03:69:33:22:e2:1c:0f:fd:d8:
         61:5a:34:3f:a2:31:0b:e4:7b:95:08:93:fa:c0:18:4d:c4:c7:
         34:75:1a:c7:ac:ce:93:76:e6:a0:ac:ba:1d:e4:82:6b:5c:3c:
         79:81:aa:52:05:84:f3:dd:2e:3a:a5:5c:57:e4:aa:e2:9c:f6:
         59:f5:a1:4a:4f:6c:15:02:0a:d3:b3:a8:f8:a7:f0:55:6c:6c:
         f2:7c:a6:b7:bc:a5:5b:4b:43:23:84:38:9b:75:de:a7:b4:41:
         7d:eb:af:77:2f:2a:db:c8:24:fb:15:6d:e6:49:7f:4d:aa:20:
         52:50:1f:80:42:9c:0d:07:bd:21:fe:1b:78:9f:fe:6f:99:8d:
         30:fa:d0:03:37:48:d6:ee:ee:63:3d:04:9a:b8:c8:d0:74:65:
         4c:92:4f:0e:2a:df:ac:66:29:65:73:7d:a7:54:d5:c1:70:23:
         68:be:af:43:ca:7e:ed:ba:0e:c4:ec:bb:f0:a6:ac:97:6b:20:
         c4:c3:5d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:20 2026 by rpki-client