Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/DB120D6EC34A11EB9559E184C4F9AE02.roa
File:                     DB120D6EC34A11EB9559E184C4F9AE02.roa (raw, json)
Hash identifier:          FZxNGPEDm98WyIYelmT7Ny6KqOSVp9Hnu1QHhzseL+U=
Subject key identifier:   63:9E:0E:18:43:D5:D3:E2:E8:D3:DD:55:FE:01:46:43:88:6D:B1:71
Certificate issuer:       /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial:       091C
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/DB120D6EC34A11EB9559E184C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:12:01 +0000
ROA not before:           Tue 02 Dec 2025 21:25:41 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     142143
IP address blocks:        202.83.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
                          rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2332 (0x91c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
        Validity
            Not Before: Dec  2 21:25:41 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a47360-3bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:00:44:15:1a:a3:c0:cd:aa:53:51:ad:27:
                    a9:0f:1b:ee:33:12:24:ba:d9:ef:ec:fc:3b:1a:cc:
                    56:21:f8:5c:53:ef:c4:4a:34:b9:5a:22:66:f0:cb:
                    e7:3a:8d:84:0b:07:3d:26:95:23:b3:d3:a6:b2:d0:
                    7e:82:07:fe:d8:88:7e:f7:a2:dc:ed:1d:10:cd:80:
                    87:45:15:1b:22:0e:9b:49:4a:f2:c3:d8:ce:9a:7a:
                    e4:2a:e4:fe:3e:94:34:73:f7:69:91:8d:b3:1b:cc:
                    0b:21:cc:76:08:7c:dd:f6:2e:04:5c:43:19:19:dd:
                    00:16:a3:10:a3:5e:e8:ec:8f:5e:d2:46:70:86:45:
                    d7:e4:82:84:2c:81:23:23:48:9f:f5:7b:fc:88:9a:
                    ba:75:a3:d6:4d:51:87:a4:96:6a:72:4b:f3:83:ff:
                    f2:69:a9:42:96:b8:61:5f:5c:04:5d:23:c1:63:14:
                    36:12:e0:bd:4f:b1:79:e2:f0:5b:f7:0c:b1:e4:52:
                    d0:ed:a5:b5:70:df:32:7b:e9:5d:73:0d:74:e7:0c:
                    17:69:8d:6c:c9:bd:40:5e:df:23:c3:57:32:37:9e:
                    90:9f:4b:68:0c:f3:ee:1f:32:27:08:55:7a:c2:96:
                    8f:c4:95:ae:23:7b:65:d8:fc:11:7d:ad:0a:b1:af:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9E:0E:18:43:D5:D3:E2:E8:D3:DD:55:FE:01:46:43:88:6D:B1:71
            X509v3 Authority Key Identifier:
                keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/DB120D6EC34A11EB9559E184C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.83.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:91:50:2f:2a:23:bc:8a:0a:a7:be:96:9f:7c:bc:88:f0:04:
         bd:38:f6:4f:df:49:e5:70:b4:38:2a:77:42:c2:79:66:2a:57:
         f3:6e:b7:e3:89:53:d5:8b:0f:1e:cf:b1:a0:58:62:a1:60:f4:
         ff:6f:55:37:b1:47:8b:56:75:8a:ab:72:54:62:41:9f:e6:4d:
         8f:7a:9b:4b:7f:46:10:ef:f8:70:09:35:cc:f6:d3:10:d5:82:
         71:2f:7f:2f:0c:93:c2:0b:4c:76:f8:2c:26:f4:3e:90:de:9c:
         e8:8b:c3:72:0a:d8:83:38:2c:3c:cd:d5:4b:49:f7:09:4b:b4:
         d3:7f:74:25:fc:14:b2:9d:a7:e1:f8:71:c8:09:26:ec:76:85:
         2c:64:0f:3d:74:de:78:bf:a1:f2:c4:01:40:97:cb:e2:cb:94:
         bd:1e:6e:5e:13:b8:d8:5c:d8:45:30:8d:f3:46:c3:9f:22:e4:
         d3:04:59:03:8d:df:84:5f:96:ce:27:c8:02:4e:07:c7:cf:29:
         ad:ad:c7:18:d6:4b:b5:1b:dd:a8:45:37:58:07:3c:60:bd:9e:
         63:ea:74:6c:99:92:2f:90:90:82:5b:9c:7b:db:8c:fc:3e:e2:
         fd:44:04:a2:5a:f3:a6:b2:e9:6c:f2:6b:1f:19:13:5d:94:c0:
         4f:75:f5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:01 2026 by rpki-client