Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/6DBD2412C9EB11EC886A6D51C4F9AE02.roa
File:                     6DBD2412C9EB11EC886A6D51C4F9AE02.roa (raw, json)
Hash identifier:          X4W8KPzkD6jrY8LiA2LHjxX8s0fpYowcQUXXGe2/Dfo=
Subject key identifier:   C4:39:39:B4:BB:E2:A8:4F:DA:9D:DD:38:92:EB:2A:13:67:B7:B4:F3
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       2896
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/6DBD2412C9EB11EC886A6D51C4F9AE02.roa
Signing time:             Tue 31 Mar 2026 16:19:39 +0000
ROA not before:           Tue 31 Mar 2026 16:19:39 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     134154
IP address blocks:        203.213.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10390 (0x2896)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Mar 31 16:19:39 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cbf41b-657e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:fd:8f:35:54:ff:74:07:41:5e:00:fb:7b:
                    e5:78:eb:2a:d8:9f:3e:1f:bf:a1:f7:ee:71:3a:fe:
                    74:ad:47:2c:26:f1:8a:4d:fd:00:28:95:87:96:37:
                    c6:08:53:79:2a:cf:4b:35:9c:a9:22:cd:06:52:e4:
                    da:eb:5c:98:0c:0a:3c:45:6d:d5:52:af:0e:bc:0d:
                    c0:af:4a:be:d4:bb:77:ab:2f:f8:2b:6c:da:1b:30:
                    b6:d0:e7:72:ee:c7:4b:22:e9:6d:41:9a:cc:ed:20:
                    c1:3a:14:be:6f:41:9a:0e:d0:00:23:11:51:c1:81:
                    84:aa:9f:c6:13:c7:1d:c1:1c:b1:c1:a9:9a:27:0a:
                    0f:38:1d:22:64:be:5e:f2:97:e9:81:f1:fa:94:68:
                    ec:51:b6:e1:4f:8d:ca:23:53:22:b7:de:47:0e:5d:
                    83:14:3e:c9:02:f6:83:b2:8c:fd:b4:b8:7b:15:a3:
                    42:ad:6b:0b:79:bf:bf:aa:b0:f2:0a:cc:58:e0:d6:
                    a7:de:97:04:2a:b4:76:cd:33:fc:b6:ba:eb:94:2e:
                    f6:56:15:b6:15:d3:e0:9c:86:8c:17:81:49:5b:df:
                    cb:54:38:09:cd:9d:b6:b1:7c:fc:82:fe:33:92:af:
                    44:a5:1e:af:00:ef:03:72:5f:41:2e:8a:0e:75:77:
                    86:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:39:39:B4:BB:E2:A8:4F:DA:9D:DD:38:92:EB:2A:13:67:B7:B4:F3
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/6DBD2412C9EB11EC886A6D51C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.213.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:46:4f:1f:f3:0d:38:2c:a8:68:28:41:f2:f0:50:a2:c0:01:
         45:c2:c7:bf:26:18:a2:5f:c1:d7:3d:8a:81:47:93:46:47:1f:
         2a:b7:65:27:3f:dc:65:03:17:e7:bc:d6:1d:fd:96:0d:d3:91:
         c5:29:41:e3:b6:da:be:74:16:a9:74:cb:34:7f:3a:20:8d:3c:
         af:31:e1:40:35:ee:3b:ee:2d:84:a7:ef:1e:c5:ca:7c:c6:45:
         ad:17:7b:80:b9:33:fd:9b:61:8f:f9:a7:05:3d:d6:eb:9c:bf:
         d9:9b:86:5e:9b:9f:85:27:ee:35:55:3e:5a:38:e5:08:a9:1d:
         3d:af:03:72:77:71:9d:46:be:c1:1a:18:cd:7b:c4:a8:18:f9:
         fc:21:09:0d:93:9b:73:4c:d1:dc:fb:2c:14:c2:47:75:57:07:
         0d:08:92:8c:47:99:3b:c6:e1:ca:92:b2:f6:c5:24:1e:8f:02:
         00:af:4d:73:5c:9d:74:04:25:f4:30:66:a5:d1:39:85:40:72:
         80:17:9f:bd:18:42:e6:bf:8f:ac:dc:aa:44:86:e6:29:c9:1d:
         d4:98:5d:01:67:7b:ce:1b:11:b4:75:26:fe:9e:65:c8:79:6f:
         9f:b6:6e:94:62:20:c5:15:91:7b:40:33:79:76:8f:c2:a9:e5:
         23:f2:57:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:38:49 2026 by rpki-client