Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/A7470BFC33A711EBA4313B36C4F9AE02.roa
File:                     A7470BFC33A711EBA4313B36C4F9AE02.roa (raw, json)
Hash identifier:          ZCVyWhNkXCNm36AW8HvL8obBGE1kXtO5k/l1MbGslew=
Subject key identifier:   B0:A7:D8:67:41:23:E3:1C:06:1C:50:67:09:2F:B6:D8:7E:7B:31:82
Certificate issuer:       /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Certificate serial:       0BFC
Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/A7470BFC33A711EBA4313B36C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:35:04 +0000
ROA not before:           Sat 12 Jul 2025 19:59:28 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139006
IP address blocks:        101.97.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
                          rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3068 (0xbfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF
        Validity
            Not Before: Jul 12 19:59:28 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a478c7-27d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:db:a2:5f:b9:20:02:0b:59:45:9b:e9:3c:94:
                    d9:7e:fa:af:0c:09:81:04:43:f1:28:4c:f4:5a:fa:
                    e2:d2:b4:48:db:43:07:46:7e:da:5d:7d:31:9e:12:
                    61:bc:73:05:8e:80:bd:78:6a:b0:d6:e0:84:7f:58:
                    3f:dd:d3:58:5a:f0:ab:1f:01:ee:fd:39:18:b6:93:
                    d0:7e:04:9a:15:33:7e:d5:73:ef:63:5a:5f:f3:f2:
                    ad:90:3e:8e:ed:46:05:af:67:1f:8b:9c:49:91:8f:
                    0f:25:a7:dc:9a:fc:9b:32:32:50:ab:16:47:78:3c:
                    62:09:eb:32:b7:19:98:90:39:d1:f6:aa:1c:6e:1c:
                    50:b7:87:e5:0d:bc:40:9c:fd:56:ae:86:28:05:4b:
                    3f:a4:e6:c1:8e:e3:e8:a1:df:10:61:72:a1:ef:94:
                    c0:fc:dc:b3:81:39:13:22:59:f0:26:09:20:72:30:
                    69:9f:49:93:dc:8e:9a:67:7c:68:44:03:c8:f6:f9:
                    54:e6:f1:0a:29:f0:3f:12:b1:a4:e6:23:8e:83:1e:
                    d2:82:2d:e4:91:be:2a:6b:50:c8:1c:5a:ba:4c:1c:
                    b1:e6:3c:7d:08:27:5c:72:59:62:57:cb:63:bd:79:
                    c8:da:0a:42:84:98:75:45:c3:45:e8:44:82:44:66:
                    cd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A7:D8:67:41:23:E3:1C:06:1C:50:67:09:2F:B6:D8:7E:7B:31:82
            X509v3 Authority Key Identifier:
                keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/A7470BFC33A711EBA4313B36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.97.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:d5:db:c2:3c:2c:1f:98:9e:3f:34:70:83:06:9e:0e:4e:29:
         df:04:de:3c:f2:2b:38:38:f5:ce:20:4b:13:7e:b2:ca:cf:a3:
         9c:51:33:9f:5d:06:aa:0d:69:de:14:c3:45:9a:72:ec:4c:88:
         89:73:8f:dd:ae:45:1b:3e:19:0a:72:66:d7:ca:10:bb:18:c9:
         43:43:d9:2d:f7:12:25:a7:fa:ff:8a:9f:be:cb:7d:87:bb:a1:
         24:8c:bf:c3:7d:50:8c:6b:36:f4:75:3f:53:3d:9c:f2:d6:46:
         92:82:14:de:54:bf:79:af:f5:fe:2c:16:e4:a2:76:8e:ac:b7:
         26:95:87:95:95:75:57:ee:01:a4:b9:fa:c2:3e:7d:5b:d0:4c:
         75:c6:66:07:4b:d9:f0:eb:5f:5c:4a:e6:1f:33:05:c9:ea:93:
         03:4d:4d:1b:e9:ab:87:56:c6:3f:bd:41:44:89:15:79:4e:15:
         d9:6c:c5:15:d2:d4:99:58:47:22:ff:6b:e6:d4:eb:fa:d4:57:
         72:cc:cf:5a:0f:10:68:8d:7d:2a:0a:7f:85:52:f0:06:ce:ba:
         48:26:3a:6a:b0:c2:30:95:ca:82:01:06:08:86:69:4e:a0:11:
         50:4d:f9:ab:91:4b:52:1a:b3:ef:a7:7d:ae:83:53:44:6b:d5:
         9d:c2:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:38 2026 by rpki-client