Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/DF277BF6108811F191FBC4DC323D8C67.roa
File:                     DF277BF6108811F191FBC4DC323D8C67.roa (raw, json)
Hash identifier:          GPLuAK09BcP86+XfhkRdZtyHxCzeDMGoAXmawAnzwCI=
Subject key identifier:   66:27:B7:2C:A5:0B:D0:B5:F7:7B:B4:45:F7:B9:B1:F0:A8:D2:26:F1
Certificate issuer:       /CN=A91D6C43/serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4
Certificate serial:       0A
Authority key identifier: D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/DF277BF6108811F191FBC4DC323D8C67.roa
Signing time:             Mon 02 Mar 2026 12:34:00 +0000
ROA not before:           Mon 23 Feb 2026 07:25:47 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     38578
IP address blocks:        203.153.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 12:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6C43, serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4
        Validity
            Not Before: Feb 23 07:25:47 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a583b7-691f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:52:a0:69:0a:c3:bb:89:c0:dd:2b:1f:98:
                    55:eb:c6:65:a2:5a:0d:2e:93:e1:15:ad:8d:90:ae:
                    65:74:f7:5b:da:8d:e1:50:a1:6d:53:a6:ec:a5:33:
                    87:f7:11:66:60:9d:a9:05:80:2c:a8:f4:ca:a6:c0:
                    74:66:41:4c:59:dd:c9:84:3b:00:03:fe:3d:07:7d:
                    e5:6b:54:86:de:76:93:9e:18:80:54:7d:5f:f0:c3:
                    9e:56:6e:f8:05:e3:66:ba:1f:53:45:6f:20:ca:a8:
                    fb:0b:fe:db:1e:63:6b:a3:53:0c:69:95:9f:c9:2b:
                    3a:ca:4e:71:05:13:99:98:79:ef:f2:04:11:8b:08:
                    39:4a:fe:da:86:2f:f5:78:98:24:8e:10:70:50:9a:
                    1e:7d:50:ca:ef:04:02:32:f1:34:39:65:5d:99:0d:
                    ce:78:db:d2:d7:a2:bb:9b:99:54:9c:9f:bf:11:69:
                    14:80:92:8f:24:dc:71:a0:a8:28:d3:7c:09:74:c4:
                    30:a2:34:27:15:d6:c1:4c:10:6e:be:e9:be:78:e0:
                    62:5b:a4:2e:e0:87:7a:3c:58:01:af:12:a8:28:23:
                    8c:99:61:6d:db:be:15:cb:52:80:4c:4b:94:50:ad:
                    8b:60:09:4d:54:8c:5a:0e:94:d3:a4:f9:73:5a:4f:
                    e4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:27:B7:2C:A5:0B:D0:B5:F7:7B:B4:45:F7:B9:B1:F0:A8:D2:26:F1
            X509v3 Authority Key Identifier:
                keyid:D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/DF277BF6108811F191FBC4DC323D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.153.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:c3:1f:ae:0a:41:fc:f9:66:a9:da:df:25:1c:85:c6:aa:6e:
         53:bd:80:f8:88:fd:1f:77:16:6d:46:c9:23:f6:cd:f1:85:01:
         0d:78:d9:98:22:29:d9:17:01:e5:33:36:bd:b9:8e:20:a0:04:
         3f:9f:4a:2f:90:9f:be:5c:8f:bd:14:23:17:03:1e:cc:8d:a4:
         69:fe:d1:d7:9a:a8:ba:6f:b2:fa:b1:f6:4a:f2:7b:b8:e8:62:
         62:65:fd:dc:8e:c6:c5:9c:22:df:3d:7f:be:d1:cf:dd:33:ae:
         a1:33:e2:b7:26:49:ad:c2:08:61:1f:27:5d:5f:88:74:8e:02:
         8c:29:e3:f4:e4:d9:93:42:7d:67:c4:7c:0e:4c:98:75:c6:b2:
         11:1b:86:51:a1:e9:0e:02:69:d0:98:33:ad:47:a7:8f:b2:7c:
         57:30:70:2f:c6:20:59:f6:d6:86:1d:f5:c6:41:cf:4b:61:a1:
         13:a5:00:c4:02:56:98:bd:61:fc:67:a8:90:30:20:ec:f6:c0:
         ad:06:ab:94:55:00:0e:5e:48:6d:a5:7c:90:9d:cf:3e:7c:23:
         41:ae:e3:0b:63:e8:c0:7b:6e:ca:f5:58:f4:2c:f6:6b:6c:b9:
         c9:24:1b:a2:d3:43:75:86:76:9a:e3:58:0d:d0:97:56:f1:37:
         0c:0e:33:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:05:26 2026 by rpki-client