Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1F8F98EEA2F811F0ACA39B18C4F9AE02.roa
File:                     1F8F98EEA2F811F0ACA39B18C4F9AE02.roa (raw, json)
Hash identifier:          BMNLweBvNGo4nTftDDqNO11qgfLfrNejRV8lljgcSn4=
Subject key identifier:   04:5B:DA:92:0E:00:3B:C7:79:FE:5E:94:E7:67:3C:D9:23:41:8B:CD
Certificate issuer:       /CN=A91CA294/serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
Certificate serial:       5B
Authority key identifier: 19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1F8F98EEA2F811F0ACA39B18C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:14:35 +0000
ROA not before:           Mon 06 Oct 2025 21:05:01 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     4648
IP address blocks:        156.69.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl
                          rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA294, serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
        Validity
            Not Before: Oct  6 21:05:01 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3e75a-c2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:78:7c:8f:f5:f1:29:6a:4c:77:d6:4a:20:
                    bb:db:e5:d9:ca:b0:47:9f:2e:f9:71:01:45:d4:c4:
                    3c:c1:18:2e:ea:18:8e:1f:46:8e:7c:8d:8b:c5:74:
                    ab:3b:bd:a0:d3:a7:6f:28:a8:18:3b:d4:cb:a1:26:
                    f6:c7:30:a8:17:01:6e:e0:bc:74:fa:fa:d0:84:17:
                    70:71:1d:ef:d3:96:56:4c:d6:c4:6e:cc:89:4c:8c:
                    a4:48:6c:d2:b6:b6:bc:f0:16:82:d9:18:58:22:5b:
                    a2:33:7f:be:0c:59:14:d1:dc:9c:28:83:4f:44:23:
                    f7:b6:be:d0:6e:dd:50:f7:48:d7:3e:1f:2e:55:67:
                    1e:db:ba:ae:4f:e3:a6:e0:92:93:e1:07:13:dc:95:
                    e9:c9:45:a4:59:06:7b:f7:fb:a1:a1:89:16:3b:e7:
                    1f:53:e6:a5:45:f4:f3:c7:af:56:71:16:77:8d:40:
                    8f:42:28:97:10:2a:ad:e8:5f:d8:b6:bf:d7:7f:8a:
                    b2:db:83:d6:fd:09:8c:8e:8a:c5:7f:65:7f:f4:7c:
                    73:03:57:ee:e2:e0:f7:f4:40:2f:27:fd:16:8c:1e:
                    66:9b:af:e5:85:ee:d7:f6:2f:17:4f:f2:57:f0:d9:
                    26:7d:48:f5:a6:6b:e8:32:af:3d:2f:75:7d:de:93:
                    8f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5B:DA:92:0E:00:3B:C7:79:FE:5E:94:E7:67:3C:D9:23:41:8B:CD
            X509v3 Authority Key Identifier:
                keyid:19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1F8F98EEA2F811F0ACA39B18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.69.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:68:c1:d2:88:9c:77:f1:44:bb:c3:5d:53:78:8f:8c:d5:e4:
         c7:a7:a0:44:fa:5a:21:b2:43:c5:e0:b6:01:ec:54:13:47:35:
         0c:54:0e:80:fe:86:fb:da:cc:e0:87:e2:36:f6:eb:5c:f9:98:
         80:d0:ae:e8:1d:d5:b6:e4:9a:ab:23:93:3b:6f:03:e7:ec:e5:
         c5:83:27:da:81:a2:6a:c4:a7:d2:e0:48:e6:25:e2:27:b1:f6:
         b5:2a:30:7d:b8:eb:98:26:cd:9d:ea:93:e2:c6:33:6a:f5:76:
         a1:58:90:d5:0b:32:64:a6:83:ec:1a:ef:a1:4e:00:d9:0c:53:
         f2:71:d9:d5:2c:48:70:6a:b0:f5:25:d0:5e:71:3a:b1:db:e9:
         e4:65:e9:08:0c:94:26:21:65:bb:4d:87:8f:79:90:76:46:d0:
         ef:ce:8d:9b:9f:de:ed:88:6d:73:62:9a:fe:41:2d:71:2e:99:
         89:b0:4d:c3:72:8f:fe:27:78:70:41:55:64:07:c5:5e:91:19:
         9b:84:c1:ce:16:67:54:c8:c0:8d:63:83:92:4e:dc:3d:a3:db:
         35:6a:fd:53:f8:99:47:1e:5c:40:9f:72:ab:1f:78:5a:90:05:
         62:3e:45:bf:f7:e2:17:b6:1a:82:0a:79:21:fe:25:55:51:a0:
         40:52:d5:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:31:06 2026 by rpki-client