Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/964EB3D49A5F11EC9124627BC4F9AE02.roa
File:                     964EB3D49A5F11EC9124627BC4F9AE02.roa (raw, json)
Hash identifier:          7IlaGTjLJWbx6PnU7BddxHIB93LX+4J3qLIjVMAHpm4=
Subject key identifier:   46:7C:9E:FC:AD:DD:AB:33:78:F4:41:B6:A0:77:3D:BA:60:4C:9F:D8
Certificate issuer:       /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
Certificate serial:       0437
Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/964EB3D49A5F11EC9124627BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:01:41 +0000
ROA not before:           Sat 23 Aug 2025 01:05:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     4049
IP address blocks:        202.37.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl
                          rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079 (0x437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
        Validity
            Not Before: Aug 23 01:05:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a40e85-4057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:15:cd:a1:b6:05:53:26:6b:56:9a:e5:5a:cd:
                    b3:c8:e1:c3:0d:a1:f6:29:9c:8d:9a:ea:2d:3f:6a:
                    28:42:f1:60:ea:2c:5b:fe:a0:d8:39:fd:4d:13:f4:
                    1e:90:e7:2d:3d:ad:db:4a:37:85:9d:09:3d:86:93:
                    c0:2a:17:7d:df:86:82:56:8a:d3:9b:69:f9:ee:65:
                    d0:d5:4c:74:5e:ad:76:70:d8:8f:0b:6c:05:2b:2d:
                    88:e9:e5:6f:4d:9b:79:47:5b:25:50:f9:28:6c:c4:
                    a6:c3:55:25:ff:56:de:cc:e5:dd:69:34:8d:1a:84:
                    90:cf:58:71:dc:1f:54:f7:91:8b:9f:e5:83:49:0b:
                    fa:92:98:7a:16:70:90:7a:37:93:5a:93:e3:c5:b1:
                    af:71:6d:f0:7b:0f:b8:a1:01:95:c1:96:9a:1d:9b:
                    b1:4e:26:fd:dd:2c:24:43:e1:b8:f2:32:30:b2:4a:
                    0b:5f:8a:ac:7b:eb:a2:6b:95:be:48:c4:7d:8f:32:
                    0b:e9:ad:60:24:cf:db:9e:d4:24:86:7e:4c:2c:67:
                    a3:15:82:68:e5:3b:36:60:bb:a9:0f:e8:20:23:fd:
                    c6:f0:49:25:4a:28:76:a1:e0:26:58:1c:2f:eb:29:
                    99:b5:d8:0d:ec:4c:68:6c:a4:85:cd:82:c9:9a:8c:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7C:9E:FC:AD:DD:AB:33:78:F4:41:B6:A0:77:3D:BA:60:4C:9F:D8
            X509v3 Authority Key Identifier:
                keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/964EB3D49A5F11EC9124627BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:30:f4:3a:5c:e4:28:d4:89:ac:64:fa:51:cd:39:0e:db:6f:
         88:02:1d:92:46:5c:a7:c2:80:bc:a5:88:74:67:f0:2e:ee:9f:
         2e:ad:1a:cc:6c:93:b4:58:e6:0d:92:76:79:fb:44:be:53:15:
         c7:c3:e6:ce:ad:2c:05:35:9d:a2:c0:45:f4:74:05:82:ad:b8:
         5a:05:85:4c:d6:06:67:cc:fe:9a:35:70:56:6b:2c:ba:41:57:
         e5:4b:96:60:30:15:13:fb:8f:a9:83:06:e7:b8:cb:75:a8:17:
         49:66:f6:46:7e:1b:44:43:6c:34:25:8b:da:d9:06:af:fd:15:
         45:ab:c8:6d:e0:a5:47:af:bd:ed:a1:6c:95:d3:05:1e:9c:fc:
         ed:e5:2d:e4:00:3f:c9:dd:88:23:87:08:2d:0f:79:04:10:68:
         18:36:c4:a5:df:3e:2b:13:b3:05:ec:f5:49:ad:e9:de:c0:25:
         b6:91:22:e7:78:3e:cd:92:b1:93:c9:1e:7e:eb:4c:7f:76:f1:
         6a:41:75:ea:eb:0d:d8:1f:97:73:e9:ce:7d:64:2d:0e:d3:a6:
         eb:84:c4:b3:17:f1:62:ee:13:60:0e:bf:62:44:29:fd:b5:89:
         1f:1b:6c:09:82:23:1f:e6:e6:20:09:91:57:99:27:fb:af:8e:
         4a:95:81:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:43 2026 by rpki-client