Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/200677EEE20D11F0A1D1F931636F56BC.roa
File:                     200677EEE20D11F0A1D1F931636F56BC.roa (raw, json)
Hash identifier:          3sjpkQoULi6jgs04VOFyO9NCT/+6DDWL9RPDhqQ2UbA=
Subject key identifier:   3F:18:FD:30:36:3A:3E:3D:4C:92:CF:29:80:58:3C:79:F8:42:32:D4
Certificate issuer:       /CN=A91DB53B/serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
Certificate serial:       30
Authority key identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/200677EEE20D11F0A1D1F931636F56BC.roa
Signing time:             Sun 01 Mar 2026 05:56:10 +0000
ROA not before:           Fri 26 Dec 2025 03:58:38 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154402
IP address blocks:        144.79.70.0/24 maxlen: 24
                          144.79.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB53B, serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
        Validity
            Not Before: Dec 26 03:58:38 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d4f9-cca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:66:46:1f:03:7e:85:ad:2f:e6:52:0e:c9:
                    4e:34:15:53:30:51:7f:9d:9a:17:09:5b:f9:44:91:
                    fb:7e:36:b6:41:2a:05:6e:5a:9d:e1:5c:8e:6f:44:
                    9d:71:e4:eb:53:6c:09:8f:9b:29:75:04:2f:15:c6:
                    45:23:f7:53:48:75:55:52:b1:9b:c2:2b:13:3b:6e:
                    c4:39:1c:70:8b:9c:88:d0:5c:d3:cd:c7:8e:45:41:
                    53:fb:fc:21:e6:e4:6c:d0:1f:b4:ca:7c:dc:d9:8e:
                    f7:58:75:e1:7d:e3:b8:d3:01:01:c6:bd:7e:9a:fe:
                    18:5d:3c:e5:64:ad:9e:f8:a6:7b:cd:a1:fb:2f:19:
                    be:ce:3b:56:63:38:79:86:4e:42:93:4f:c8:4d:b6:
                    17:11:dc:37:0e:f3:28:54:39:62:64:d7:3c:04:42:
                    7d:d1:b7:b8:4b:b6:f8:74:9e:8f:33:b0:ab:e7:15:
                    0a:a1:dc:b7:fa:d4:09:2e:f7:75:63:2f:08:b5:d2:
                    be:6b:e6:22:d7:95:e8:62:87:25:fa:6f:ae:24:91:
                    f6:47:14:5f:28:83:66:24:7a:ef:56:73:2e:71:68:
                    d5:14:95:52:10:3c:ef:d7:d0:f3:31:b9:35:6f:8b:
                    34:81:73:cf:45:f3:7b:05:6a:93:f6:43:a9:90:a9:
                    8f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:18:FD:30:36:3A:3E:3D:4C:92:CF:29:80:58:3C:79:F8:42:32:D4
            X509v3 Authority Key Identifier:
                keyid:44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/200677EEE20D11F0A1D1F931636F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:8c:b3:63:ad:bc:ff:13:a5:aa:1a:fc:7c:3a:ad:4b:99:57:
         ea:83:2f:e0:20:f1:cd:40:a4:b4:1e:64:da:1e:41:24:d5:76:
         ad:22:c3:c6:88:db:36:0b:e7:9a:f2:9e:04:93:eb:22:3e:a4:
         8f:57:d0:ad:e9:47:43:05:2d:04:20:b0:07:ac:2a:f2:e6:a3:
         6d:dd:72:2c:6a:e3:f6:31:05:5b:36:8f:06:d6:41:2f:25:d7:
         b8:9e:89:05:eb:8b:be:2f:4e:78:7e:2f:9e:71:b5:f7:c2:20:
         98:16:fb:30:b9:2b:e7:ec:29:3a:87:b7:af:2f:3c:a8:7a:e0:
         1d:cf:f4:fd:6a:cc:66:f4:97:16:b6:3f:e7:69:74:f8:55:97:
         e9:ec:4d:b0:59:18:7c:37:7f:1e:34:80:37:66:05:e4:c5:97:
         a7:f9:aa:e4:a0:4d:4b:e2:13:dc:b9:75:11:55:87:03:c1:a7:
         82:46:4d:1e:c4:37:20:1f:25:27:66:9c:8f:b1:38:d0:a1:79:
         d4:da:4e:5a:e6:56:59:e5:b2:10:ab:d5:b3:ce:aa:43:1e:e5:
         3f:3a:af:de:ac:11:bb:78:65:07:f1:65:59:c3:d9:f5:03:c5:
         fb:13:cf:43:fd:12:40:3a:10:bc:67:a6:94:c7:8f:fb:fc:f7:
         3e:1b:66:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:23:52 2026 by rpki-client