Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/706D3EA4140211EB87D7320FC4F9AE02.roa
File:                     706D3EA4140211EB87D7320FC4F9AE02.roa (raw, json)
Hash identifier:          PUlbILDrA0CkgAjnlfjXmrs6S6DfL1lysnF6FndUbHk=
Subject key identifier:   79:57:23:BB:C8:D5:E4:F3:D2:5F:56:93:0D:B2:F0:5B:2C:D7:CF:A3
Certificate issuer:       /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial:       1000
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/706D3EA4140211EB87D7320FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:47:06 +0000
ROA not before:           Wed 14 Jan 2026 18:15:09 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     36224
IP address blocks:        210.57.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4096 (0x1000)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
        Validity
            Not Before: Jan 14 18:15:09 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a489aa-a8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:e4:0a:5a:f1:5c:5a:04:00:58:84:88:2f:
                    3b:b7:e4:ef:fb:e0:62:98:74:13:5c:e1:a2:15:28:
                    0d:cc:67:ea:44:14:31:3d:7b:44:9c:85:e8:07:a7:
                    71:0a:09:53:8b:96:cd:5b:d0:b0:4f:3a:29:ef:bd:
                    0a:84:3e:3b:4b:c5:00:1e:ee:7a:07:68:cb:27:f3:
                    1f:07:6c:ea:9e:63:ea:c9:b3:e5:a0:cd:38:9e:4d:
                    07:c7:ac:52:a9:38:82:7d:8e:34:9c:68:dc:d0:de:
                    7b:9e:ca:8d:b5:da:2b:4d:85:f1:02:49:ec:01:fa:
                    40:19:af:7b:c4:24:bf:86:9f:2a:e6:46:51:7b:a1:
                    52:77:db:be:76:23:78:a8:19:b9:d9:89:d4:cb:d0:
                    0e:6c:5d:c2:29:fa:f9:5a:cf:de:c7:68:b6:39:d6:
                    dc:a6:76:5a:17:3f:c1:af:f2:78:cb:61:28:72:69:
                    e4:34:8b:55:a8:6b:c1:a4:fa:e9:d2:51:c8:44:3d:
                    5a:d4:a1:c7:cc:48:d1:c4:7f:31:5e:f8:11:23:c0:
                    87:dc:54:c4:2c:6d:ca:18:66:90:8b:a0:fb:32:3e:
                    02:c7:e6:b5:d1:ad:d5:e4:d1:54:f2:96:18:72:f4:
                    a4:36:cd:d4:1f:3c:89:72:f5:8e:86:5c:b4:35:23:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:57:23:BB:C8:D5:E4:F3:D2:5F:56:93:0D:B2:F0:5B:2C:D7:CF:A3
            X509v3 Authority Key Identifier:
                keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/706D3EA4140211EB87D7320FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.57.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:d7:42:d5:d3:4b:4c:9e:be:c9:c6:de:0d:5d:87:1a:9c:91:
         08:fb:e6:88:8f:5f:d0:d4:e0:12:3a:09:f8:a4:ba:f3:df:b6:
         aa:bf:5a:d1:06:f8:d3:46:5a:f1:b5:17:c3:06:54:21:2a:ed:
         db:ae:8b:88:ed:a4:01:fb:af:c9:79:47:b8:fc:34:59:35:7f:
         e4:99:ec:f4:95:46:09:2b:63:99:7f:2f:51:f0:d0:f4:f1:8f:
         69:2e:fc:b3:8f:70:67:ee:e1:ee:a1:89:89:9c:77:e7:61:a6:
         bf:fe:ca:77:d3:4c:11:b0:e6:3f:65:d1:c3:2b:4f:b8:8c:2c:
         a2:8f:7a:80:3a:ca:d3:a4:66:55:63:77:8d:75:6d:26:c7:41:
         a7:2c:33:b4:cf:3b:09:2b:6c:ba:f1:a1:3e:c1:1f:32:7e:5f:
         d9:88:c9:6d:d7:f2:df:0d:b4:49:83:71:fb:20:95:d0:3b:73:
         53:45:74:50:4f:f7:af:fd:fd:17:99:0d:1f:38:8a:e2:cc:f7:
         40:5e:d3:9c:92:29:12:04:38:d5:52:a6:62:dc:c2:da:1c:d1:
         02:9d:3c:c9:ca:37:d8:25:24:cd:30:a7:29:4d:97:aa:4f:d1:
         41:f4:0d:2f:a7:d1:25:6d:75:23:42:3d:94:a0:53:2c:2f:a3:
         ec:2f:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:20 2026 by rpki-client