Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/7C836BA46C8E11EEA38B9554C4F9AE02.roa
File:                     7C836BA46C8E11EEA38B9554C4F9AE02.roa (raw, json)
Hash identifier:          13OCzHbeP84SVts3fLFM8ezvX9wYG+xk9oztS8IQ/oo=
Subject key identifier:   7B:30:61:7F:C8:A0:40:07:61:32:A0:0B:64:51:8D:23:05:41:41:97
Certificate issuer:       /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Certificate serial:       3610
Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/7C836BA46C8E11EEA38B9554C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:18:15 +0000
ROA not before:           Thu 26 Oct 2023 05:03:27 +0000
ROA not after:            Mon 31 Mar 2031 00:00:00 +0000
asID:                     18367
IP address blocks:        203.119.42.0/24 maxlen: 24
                          2001:dd8:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl
                          rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13840 (0x3610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC5BE, serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
        Validity
            Not Before: Oct 26 05:03:27 2023 GMT
            Not After : Mar 31 00:00:00 2031 GMT
        Subject: CN=69a474d7-f784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3e:84:b9:00:a9:83:6d:ce:30:69:f4:69:d0:
                    2a:84:ca:b2:4d:9c:71:e7:96:1f:ae:0f:68:4e:a0:
                    91:f8:b3:08:a5:3d:95:4e:65:ad:c9:b0:bb:02:c5:
                    b1:f7:7a:f4:c0:95:a0:a0:2f:b2:0c:90:16:67:f1:
                    7e:66:59:84:2c:33:18:4f:4a:8f:cf:fb:03:ef:db:
                    1d:3e:f9:53:17:8e:d5:9b:1f:da:1d:ab:ec:f1:4d:
                    35:6e:ce:91:96:4e:d5:2f:76:71:72:fb:1a:fb:61:
                    1a:6a:32:b8:5a:cf:e0:86:d6:2b:8f:f5:a9:03:d1:
                    0f:ea:14:85:dd:22:3d:64:b8:37:b8:7a:17:0d:1c:
                    83:dc:60:59:d4:c7:72:9f:0c:1d:7d:a7:65:d9:7e:
                    36:51:36:c1:b7:dd:d0:b0:c4:46:18:01:fe:ce:cb:
                    99:27:1f:eb:08:f7:fd:83:8e:09:4d:19:0b:65:f8:
                    f8:52:8a:6a:f7:ee:25:79:a5:56:55:d9:c5:66:6f:
                    c8:bb:af:39:6b:4e:2f:49:e9:0d:8e:8a:e6:05:c8:
                    cb:10:d6:76:29:3f:ab:5d:63:c4:98:3c:44:34:f7:
                    22:68:b9:26:88:b4:97:10:31:3f:d2:6a:12:7c:1f:
                    77:83:9d:02:d4:ad:be:24:ad:9e:92:59:f4:f3:91:
                    0b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:30:61:7F:C8:A0:40:07:61:32:A0:0B:64:51:8D:23:05:41:41:97
            X509v3 Authority Key Identifier:
                keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/7C836BA46C8E11EEA38B9554C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.42.0/24
                IPv6:
                  2001:dd8:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:46:9c:6d:c0:31:82:9c:44:db:41:06:6d:19:7a:a2:ca:79:
         dd:b7:b3:85:d3:c1:25:b6:c7:f9:28:b5:f3:04:1c:be:7f:07:
         73:41:3e:86:2c:22:41:33:cd:b3:29:f9:94:dd:62:db:aa:91:
         a2:5c:96:fb:85:e1:30:b0:08:c2:fc:4b:64:20:09:6d:1e:73:
         1d:e5:5a:68:aa:46:b8:d7:b2:2f:87:b3:28:76:4d:0a:5b:3c:
         ee:71:36:e9:5d:36:7b:99:c1:83:4d:2d:1e:c0:3d:08:37:1e:
         a5:70:ad:e4:f2:ef:c8:06:77:fb:93:00:1e:8a:d0:18:e6:4d:
         fe:24:d4:db:77:35:83:bd:01:ee:2c:20:78:69:a7:99:02:74:
         20:41:53:95:a0:03:f8:e6:02:c3:08:41:fb:5e:d6:e3:65:a5:
         a1:4e:be:8d:04:4f:bd:77:c0:7b:04:4b:fb:ee:4a:fc:bb:2d:
         9e:54:80:da:d0:44:00:fd:9f:db:b3:c1:21:68:61:b5:2e:4b:
         c2:ec:3d:a3:77:6c:ec:55:9f:24:ac:46:f4:c8:51:fb:16:e4:
         55:2d:2a:70:51:33:98:1f:c8:2e:36:c1:df:4a:b3:b5:e8:b1:
         e3:c8:26:5d:94:99:ee:15:8b:7b:76:7b:dd:fa:d1:90:98:19:
         ef:e2:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:52 2026 by rpki-client