Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EEBDFBB88C5611E792848B4AC4F9AE02.roa
File:                     EEBDFBB88C5611E792848B4AC4F9AE02.roa (raw, json)
Hash identifier:          38VxGKNTIqjI7WmYVTAs2Vk4XEsvNHdC+sfnVA/u1Zk=
Subject key identifier:   8E:DE:A5:37:DB:28:4F:54:B9:FB:11:92:4A:09:00:91:B6:47:00:26
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       288E
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EEBDFBB88C5611E792848B4AC4F9AE02.roa
Signing time:             Tue 31 Mar 2026 16:19:24 +0000
ROA not before:           Tue 31 Mar 2026 16:19:24 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     10139
IP address blocks:        210.213.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10382 (0x288e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Mar 31 16:19:24 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cbf40c-8320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:df:95:8f:3e:f5:e6:16:54:bb:98:9e:48:c3:
                    8e:d4:99:60:2d:82:43:8e:77:53:26:71:4e:3d:82:
                    fd:c2:3b:f7:6f:80:31:96:bb:12:ad:7f:08:6e:25:
                    13:b8:c4:cf:a4:f7:e9:03:ce:51:ff:16:2f:b5:30:
                    7a:ea:b7:04:27:d5:3b:8e:47:22:54:55:dc:8f:f8:
                    14:13:26:fc:fb:5c:4b:ee:42:c4:3b:d8:76:65:68:
                    e0:9e:69:a8:f9:52:56:6a:31:49:01:49:3c:c8:02:
                    e0:fe:1f:a0:37:95:14:e7:6c:7e:9e:97:53:91:bb:
                    d4:0a:b8:a6:a3:9d:6e:48:d1:ce:93:d9:0e:6b:66:
                    e1:14:90:fb:39:71:e1:e1:48:60:fb:cf:c3:9e:7d:
                    54:9d:72:b6:d3:39:d5:1e:e9:8d:b3:03:c9:4c:19:
                    e6:48:ef:97:43:7d:ea:a6:a0:60:56:28:d1:45:4d:
                    e1:2a:77:33:7b:60:18:f3:3e:09:e3:55:da:1b:d5:
                    2e:1c:44:46:d8:6c:ef:29:aa:02:62:d0:c2:34:bb:
                    92:89:6e:fa:97:3c:4f:a4:7b:dc:e8:36:2e:bb:a1:
                    ef:5f:0f:c5:c7:24:8d:05:6d:f0:7f:90:f0:6e:d8:
                    e2:fe:7c:db:8e:8a:21:83:f8:fb:6f:d3:e0:26:c3:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DE:A5:37:DB:28:4F:54:B9:FB:11:92:4A:09:00:91:B6:47:00:26
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EEBDFBB88C5611E792848B4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.213.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:82:78:c2:bc:0b:58:2c:1f:29:80:72:9c:33:e2:40:ad:3a:
         f0:a3:2d:23:72:59:cd:67:ea:3c:50:6e:2a:13:f6:6c:24:d2:
         7d:a5:05:c2:47:39:3b:56:d2:d6:a5:92:fa:f0:73:a5:7a:f0:
         ce:1b:8f:7f:2a:b7:8a:36:47:31:2e:f5:84:9a:be:ca:35:84:
         1d:40:03:e5:d3:29:da:ca:5a:14:a4:94:e5:39:2a:0a:52:b9:
         19:77:83:a9:87:81:60:4a:f7:88:d8:dc:ee:7c:7f:e2:5a:04:
         e4:28:9c:3a:9d:c3:68:37:0b:c1:d3:49:fa:87:3f:0d:f5:45:
         74:97:18:26:7b:c6:36:d9:3c:1c:0a:c3:ac:a0:e6:b4:21:bd:
         a2:2d:f8:98:be:48:95:df:cb:98:06:86:db:4b:01:01:7d:20:
         fe:6f:e3:28:ad:27:b8:e6:3a:ff:6b:85:05:ea:4c:12:22:04:
         aa:44:73:23:f0:33:14:a5:f2:24:a2:71:93:1c:a2:e2:02:56:
         5f:49:bc:91:67:ab:1c:3f:89:d9:3f:68:d2:4d:81:ba:fa:a6:
         b2:bb:fc:49:7b:6b:8a:7a:9f:19:ad:50:08:cc:6f:6f:23:1e:
         74:48:0e:b2:6f:60:21:d6:92:b9:29:69:2b:fd:28:f4:53:cd:
         78:ca:4e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:05:43 2026 by rpki-client