Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/7155C8563E5E11EAB043A522C4F9AE02.roa
File:                     7155C8563E5E11EAB043A522C4F9AE02.roa (raw, json)
Hash identifier:          5SXsoRZviOsZAGmaYCG+zK9DFm8Eh25q9V/rNn5L4vs=
Subject key identifier:   9B:6C:16:FC:38:54:B8:3B:F1:7B:6C:33:85:BA:84:EE:E3:EB:0B:6E
Certificate issuer:       /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
Certificate serial:       0CDC
Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/7155C8563E5E11EAB043A522C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:52:49 +0000
ROA not before:           Thu 04 Dec 2025 17:58:59 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45638
IP address blocks:        198.244.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:05:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3292 (0xcdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
        Validity
            Not Before: Dec  4 17:58:59 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a444b1-91e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:fc:7c:95:6b:b5:c9:72:0d:24:e1:aa:cf:
                    e4:0c:20:f5:33:47:cf:04:7b:44:e9:6a:1c:35:66:
                    15:d1:1c:07:f9:42:eb:63:6f:cf:96:d6:b6:4d:39:
                    f6:3c:7c:36:e2:3a:8b:6c:90:57:08:e6:c2:28:b3:
                    93:22:4e:c8:80:72:84:02:a4:a0:73:47:28:d9:ad:
                    16:f6:24:c4:5c:f1:ce:d4:8f:7e:76:c3:a6:30:f3:
                    74:88:dc:d4:0a:6d:fc:76:5b:aa:cb:72:dc:fe:dd:
                    bc:34:d0:1a:25:5a:e0:a2:e3:3f:ea:18:c9:31:18:
                    fe:fe:9e:04:41:fc:d0:b0:bd:f9:1b:f2:95:1e:64:
                    e0:8f:37:91:34:48:0b:d7:46:d1:d3:ae:13:d7:5f:
                    8a:3d:1a:08:16:c5:f2:e9:d3:94:c5:15:38:bd:7a:
                    e5:d6:d6:70:b2:86:de:a5:5e:fd:1e:8c:1a:b7:74:
                    fb:7e:f1:a1:c0:df:1b:ba:58:d5:6e:96:cd:6e:b8:
                    db:fa:88:cb:1f:54:ed:7e:ec:4f:d3:7d:5b:a3:2b:
                    0c:65:03:49:2f:7c:71:e5:95:cf:20:a0:7e:78:58:
                    4c:00:b5:c8:f5:5a:bc:bc:89:50:30:f0:d2:b4:61:
                    36:51:dc:fe:0e:78:18:e9:de:8f:9e:00:e2:5a:04:
                    4e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6C:16:FC:38:54:B8:3B:F1:7B:6C:33:85:BA:84:EE:E3:EB:0B:6E
            X509v3 Authority Key Identifier:
                keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/7155C8563E5E11EAB043A522C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.244.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:b0:f4:bc:c3:d5:6e:4c:a7:74:62:10:2f:f6:24:b1:ac:d1:
         cf:97:22:cb:17:42:ee:fb:10:97:2f:d9:26:91:c6:82:60:a3:
         bc:4b:14:12:d5:6e:e1:9e:36:9d:55:03:64:51:bf:d5:c2:bc:
         76:67:dc:1e:61:ed:43:10:48:37:4f:df:16:46:d6:9f:62:87:
         26:24:aa:28:a4:d5:9b:fe:f2:40:27:4f:c8:36:3c:3e:2a:fd:
         f0:e6:29:04:a7:cc:6e:ec:d7:a8:b4:8f:42:77:3f:17:f5:82:
         8e:99:81:07:4d:69:59:ce:33:94:ab:b9:d4:eb:63:97:02:12:
         3e:6a:24:5c:71:c0:a0:38:35:73:c4:31:1b:c1:b3:8e:aa:31:
         f5:9b:7e:82:3b:0e:aa:88:7b:f5:f9:dc:8d:0a:15:65:26:6c:
         07:8b:09:86:9a:02:60:b1:fe:ee:fc:ea:af:8e:b8:82:b8:5b:
         74:31:c5:24:45:ec:cd:96:1b:a7:24:a3:77:35:fc:d3:95:67:
         ed:82:eb:4e:04:16:6f:9e:6c:18:3b:8b:00:61:53:3a:38:4c:
         65:ef:2f:88:48:db:01:1f:f5:aa:eb:51:c9:c1:ac:3a:56:8a:
         81:ad:c7:c4:ef:67:b3:42:5a:e4:9b:9a:70:20:2f:8c:68:5f:
         ea:01:3d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:54 2026 by rpki-client