Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/EEECC55A8C3611EFA07E612DC4F9AE02.roa
File:                     EEECC55A8C3611EFA07E612DC4F9AE02.roa (raw, json)
Hash identifier:          D21a7LlMu8RnxWZ8YgRZ6sV/m0f2ZXrJTQlAZBy166E=
Subject key identifier:   55:AB:33:D9:E4:69:F8:56:4F:0A:56:FC:A3:5F:91:B1:C5:01:13:B6
Certificate issuer:       /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial:       0503
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/EEECC55A8C3611EFA07E612DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:32:34 +0000
ROA not before:           Tue 30 Dec 2025 23:19:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     214785
IP address blocks:        204.52.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1283 (0x503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
        Validity
            Not Before: Dec 30 23:19:55 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48642-b0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e1:98:7a:16:fc:e1:14:b7:d8:c3:29:4f:d9:
                    de:e5:64:14:8f:c4:cb:5a:ca:8f:36:5e:05:05:9a:
                    52:cb:2f:bf:ff:5e:d8:6f:ab:68:4b:65:22:2b:fd:
                    45:d6:a9:50:c4:bc:40:d6:29:22:f1:9b:30:ee:c9:
                    c8:de:57:7e:93:8d:bb:bf:c3:fc:eb:17:a2:76:24:
                    2b:55:ad:c5:06:90:06:7f:f4:93:a6:0c:ef:58:af:
                    63:ac:0e:dd:24:d4:f2:3d:50:e0:16:d1:80:a9:cb:
                    9b:01:57:7b:1d:c6:1d:b2:c1:7b:af:0c:5a:44:38:
                    7d:cf:f8:db:ab:fe:5f:43:5e:28:c3:ab:b0:f7:51:
                    10:a7:47:e8:83:fd:49:1e:41:67:1f:79:b3:72:4e:
                    14:1f:8e:67:3d:05:9a:4f:08:51:53:69:24:29:7d:
                    6c:6e:9b:bd:6f:87:15:aa:2a:73:13:5c:11:95:92:
                    35:3b:31:36:bd:a0:bb:55:d6:5c:54:20:75:22:d3:
                    63:3d:db:02:f9:b3:bb:e7:87:38:b8:70:c4:93:92:
                    2b:15:7d:c1:21:03:e1:7f:7e:62:6a:24:e8:d8:21:
                    0e:74:74:be:d6:d2:e7:2c:0e:6d:6d:1c:5f:3d:3f:
                    97:94:60:f9:94:91:34:b5:a1:15:15:b1:bb:3f:7a:
                    a6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AB:33:D9:E4:69:F8:56:4F:0A:56:FC:A3:5F:91:B1:C5:01:13:B6
            X509v3 Authority Key Identifier:
                keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/EEECC55A8C3611EFA07E612DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.52.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:8e:ed:77:31:91:3c:df:87:9c:7f:ce:03:fb:f1:16:a9:22:
         28:9f:87:2b:ea:80:6e:79:79:8c:a4:1d:a1:64:b6:10:cf:00:
         09:c7:0b:47:f7:bc:6f:46:e3:aa:99:df:80:52:29:23:09:2e:
         f9:2e:ef:69:1a:9b:bd:49:f2:ef:23:90:bd:f1:02:2c:35:99:
         29:87:2c:60:4d:12:84:3b:ae:44:e9:5e:23:71:00:48:1c:ca:
         88:63:35:e5:f0:5f:5e:bb:63:a5:49:3b:bb:3e:41:60:c2:54:
         7b:b5:4a:3c:a7:db:6b:e3:9e:87:1f:0b:fb:dc:13:50:98:f1:
         d5:13:f2:15:d4:27:2c:e0:6f:0b:bd:b9:92:c7:a3:cf:55:61:
         81:b0:81:a6:6e:cd:8e:11:5e:cb:9f:70:dd:83:05:38:ae:24:
         74:36:6a:e5:d9:ea:0f:69:dd:61:44:dc:b7:85:3c:55:0a:f1:
         eb:82:a7:aa:44:c1:f9:c5:f0:62:2a:d0:17:72:6d:6c:03:f3:
         fe:2a:bd:a3:3b:7f:e7:cf:51:d5:8e:a8:47:bf:8b:24:4b:7b:
         7a:3a:91:cf:cd:a8:30:53:56:6d:51:36:8a:ed:84:3e:06:78:
         7e:08:6d:07:0e:8a:9e:87:22:e8:82:bd:f8:07:7d:3b:9a:51:
         6e:d9:e2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:06 2026 by rpki-client