Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/9A1D8B2E867D11ED856A8E54C4F9AE02.roa
File:                     9A1D8B2E867D11ED856A8E54C4F9AE02.roa (raw, json)
Hash identifier:          fdYZt6jklY3bJQYs/J5vrVMo+1h7F5ICSVyf7ebtNOQ=
Subject key identifier:   B6:E0:20:CC:95:E3:DC:9B:B6:4A:BB:D1:8B:9F:F7:2C:B8:EB:C2:A3
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       070C
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/9A1D8B2E867D11ED856A8E54C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:19:12 +0000
ROA not before:           Mon 10 Nov 2025 22:45:39 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     65001
IP address blocks:        42.104.91.0/24 maxlen: 24
                          123.63.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
                          rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1804 (0x70c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Nov 10 22:45:39 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4912f-f219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:43:6d:a9:74:7e:9d:fe:43:3b:4e:6a:43:bc:
                    36:59:fa:cb:00:4a:c6:24:36:d7:d2:be:59:10:31:
                    4a:ba:79:91:ce:5d:1d:4b:76:69:49:d2:f4:27:7b:
                    73:ff:71:f3:3b:d0:3d:74:7f:14:f2:ab:8d:eb:36:
                    a3:8e:60:21:d9:29:5e:fa:9d:0c:6a:c5:59:c6:2b:
                    c5:6f:cc:5b:9e:88:62:19:6a:39:7f:40:78:0a:3a:
                    3e:53:4b:fe:d4:c7:ca:97:b6:09:d0:e4:4c:3e:7a:
                    d2:91:0b:57:54:83:dd:2e:77:39:14:03:eb:9c:c7:
                    1e:02:28:8c:8a:df:d7:3d:b3:30:99:e2:05:5a:63:
                    87:00:7f:4e:e5:1d:7d:7b:73:40:fb:a0:76:8e:50:
                    30:86:c3:e7:f5:15:5e:f2:92:6f:c1:6a:2a:5b:8c:
                    eb:3d:a4:41:4f:cc:16:be:cc:97:96:b6:13:6c:30:
                    0f:be:47:30:9e:dc:ea:6b:a6:e8:3e:59:0c:16:d8:
                    94:8e:65:9d:a9:6d:4a:39:2f:2d:82:64:5c:d7:66:
                    de:7b:c7:06:7f:bc:a4:20:57:c9:d1:3e:30:10:b1:
                    e0:0a:6d:cd:cc:8c:30:e0:1b:da:a5:1d:8d:7f:32:
                    72:6f:00:a3:d1:d4:7a:c2:33:ae:b0:7e:65:ca:46:
                    f2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E0:20:CC:95:E3:DC:9B:B6:4A:BB:D1:8B:9F:F7:2C:B8:EB:C2:A3
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/9A1D8B2E867D11ED856A8E54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.104.91.0/24
                  123.63.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:fb:fa:9a:09:f5:a7:35:69:fe:44:a4:99:80:41:41:73:3f:
         f9:43:f0:c5:06:c3:de:1e:ba:ea:43:22:da:40:37:1d:f1:b2:
         6a:d9:66:5c:5b:a3:45:f1:81:6a:57:1e:83:29:c2:cc:e2:9f:
         53:0b:89:e7:18:de:29:c2:53:f5:4d:2f:37:59:b3:29:5e:3b:
         2a:be:a0:6e:df:d1:13:cb:16:a8:97:27:4d:99:27:99:1e:d6:
         8a:6c:a0:82:04:93:3d:63:21:1f:7a:a7:51:ff:f2:a8:54:65:
         4f:1b:72:18:5e:cb:45:98:24:fc:32:56:ae:2e:c4:c3:8d:f1:
         be:b0:d5:5a:13:45:8e:5e:c2:48:e5:31:da:68:94:a4:a2:bd:
         64:3b:55:25:5b:5e:b9:d1:15:cd:a5:0b:79:2f:bb:01:ed:13:
         b1:1f:1a:72:de:09:b3:a3:e5:67:f3:9f:aa:21:85:f6:1f:3a:
         e0:4c:60:c0:65:0b:66:49:8a:da:77:6c:0a:57:6e:c3:22:3d:
         4a:d3:45:fb:b8:85:35:55:53:14:df:0a:9d:55:97:3b:43:69:
         92:ec:45:5a:26:20:9f:0a:50:97:d1:02:3e:0b:17:32:d6:43:
         eb:41:b4:b9:fb:bb:5b:23:b0:f1:49:d0:e6:7d:c5:49:a9:f8:
         ec:84:70:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:50 2026 by rpki-client