Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/67D535ACA32311F0A8D9D520C4F9AE02.roa
File:                     67D535ACA32311F0A8D9D520C4F9AE02.roa (raw, json)
Hash identifier:          BSzgTNzVd1eSvTFBsG3dgq89V/tbKxGI5pw6hlS/4GY=
Subject key identifier:   3F:21:BD:FA:5B:3A:30:59:58:26:3E:95:FD:0B:E6:02:F0:8A:6D:89
Certificate issuer:       /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Certificate serial:       58
Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/67D535ACA32311F0A8D9D520C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:18:58 +0000
ROA not before:           Wed 17 Dec 2025 07:25:05 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     55547
IP address blocks:        165.84.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
                          rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
        Validity
            Not Before: Dec 17 07:25:05 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a3da52-0b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:43:7d:66:82:23:4c:dd:b7:7e:73:09:1a:54:
                    be:2c:d7:fc:cd:da:50:b6:41:6e:78:92:40:f0:0d:
                    3d:e6:c6:f6:27:f2:c0:ad:e2:17:0d:e2:02:45:0c:
                    50:6b:9f:5e:0c:bf:6b:0b:99:55:41:39:8a:35:2c:
                    ac:0d:ae:5c:d6:a3:3d:3f:c1:09:a2:59:4f:ff:27:
                    32:cc:61:e1:95:d9:30:9f:1c:f5:2a:49:71:72:39:
                    56:a6:23:55:ee:5a:a0:56:35:2d:ac:b1:97:5a:10:
                    ca:31:bd:ab:d5:ba:0f:99:f0:7d:cd:3c:73:9d:15:
                    3b:a0:44:43:c4:6c:2a:f7:61:9d:cd:92:4a:3d:e9:
                    83:01:61:3f:d8:9c:7b:10:97:0c:e6:13:c9:6a:d0:
                    5e:9a:89:dd:80:ba:db:ba:a1:91:41:75:8d:ab:9d:
                    83:ae:11:ab:cd:d2:5f:1e:78:1d:02:c8:e3:29:f1:
                    69:41:91:fb:27:04:40:f0:ff:00:96:9c:f9:08:36:
                    63:4b:b2:e6:5c:69:07:50:28:fc:0f:17:a9:88:b7:
                    b7:89:33:19:9b:b8:ca:f7:82:4b:de:0d:d4:9b:9b:
                    d2:09:0a:ac:5e:0a:d8:f1:0b:8a:e9:3c:12:29:97:
                    22:4e:b5:91:57:3e:26:00:57:97:e2:b4:99:89:09:
                    6b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:21:BD:FA:5B:3A:30:59:58:26:3E:95:FD:0B:E6:02:F0:8A:6D:89
            X509v3 Authority Key Identifier:
                keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/67D535ACA32311F0A8D9D520C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.84.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:8e:e4:bc:ba:68:ef:69:40:6d:6c:18:3f:35:ba:7e:eb:fc:
         af:fc:30:a3:a5:e5:cd:0a:77:71:90:e7:88:84:04:fd:76:f4:
         31:5c:c5:af:21:a4:db:2c:ce:fb:de:d6:a6:0f:3a:82:10:91:
         58:6e:d9:ef:b2:a0:33:4a:75:1c:c8:2f:ac:83:35:de:aa:aa:
         b5:83:6f:f3:61:d3:dd:4b:df:ed:09:04:2a:65:b6:1a:7e:c4:
         64:65:37:0e:2e:da:a3:82:ca:c5:62:0d:18:66:50:d3:a7:8f:
         ec:7e:9c:d0:3a:d1:f3:17:1f:f6:3e:8e:da:74:82:18:c6:dd:
         c1:a2:9f:71:f5:54:0a:15:57:6e:ae:05:f5:b1:69:e2:b9:0f:
         8d:fa:ee:a4:93:97:ba:a6:28:3d:78:fe:b5:a7:6d:78:d5:d6:
         6b:13:9b:4c:45:a8:c8:ac:78:f5:92:50:8d:f1:1a:be:b1:12:
         19:11:5e:1b:b5:c3:db:05:d0:1d:3b:d9:3b:73:9d:c5:b7:cd:
         6a:44:a6:a2:9b:98:83:a8:a3:5a:83:2b:e0:48:20:0f:96:3f:
         17:bf:9d:4c:c8:12:0b:1c:74:8a:5b:64:af:2b:4b:96:90:77:
         b1:23:e8:11:f5:0c:43:18:97:e7:ed:0e:06:69:74:a2:33:5e:
         9e:d2:e7:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:41:47 2026 by rpki-client