Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F55175EA8C5611E792848B4AC4F9AE02.roa
File:                     F55175EA8C5611E792848B4AC4F9AE02.roa (raw, json)
Hash identifier:          kFQioVNwia+/qizEhlyCPhiOpzPpIkRHCfZvLOC7QmI=
Subject key identifier:   A7:3B:6E:7A:43:48:D3:7B:F5:9F:F5:76:46:4B:BE:EF:D7:FB:F7:2F
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       28A9
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F55175EA8C5611E792848B4AC4F9AE02.roa
Signing time:             Tue 31 Mar 2026 16:20:14 +0000
ROA not before:           Tue 31 Mar 2026 16:20:14 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     36776
IP address blocks:        58.69.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10409 (0x28a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Mar 31 16:20:14 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cbf43e-f3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:4c:f0:49:d1:9a:bc:10:38:2b:ff:64:70:
                    9d:4d:68:22:de:b1:ae:79:c4:32:b3:f0:6a:6f:c5:
                    71:c5:86:59:40:54:d4:16:50:20:0c:b8:ca:88:45:
                    ba:1e:28:72:35:e0:6a:cb:b1:bd:2a:81:98:71:f8:
                    e1:a7:5a:a1:87:27:4f:04:f7:89:bc:cd:e5:ac:4c:
                    6d:95:04:14:b0:97:3b:68:32:a5:9a:fa:84:ac:0f:
                    f5:0f:e6:d6:92:20:30:ad:55:28:6a:cf:8e:2a:23:
                    94:d7:93:73:f7:b7:75:07:66:7f:da:7f:bd:a6:9a:
                    f7:4f:87:8e:78:7f:07:d8:5c:36:59:16:1b:e7:83:
                    25:65:61:c7:6b:b5:fb:81:c0:87:5e:f2:60:47:16:
                    52:ae:a2:a0:68:ca:50:dc:56:27:fc:a2:04:03:51:
                    01:ab:68:27:9e:bc:a4:21:75:9e:fd:0f:eb:da:f7:
                    ad:98:b2:71:7e:1c:41:13:e4:2c:80:15:27:ea:73:
                    ba:3e:a2:1c:62:cb:5f:fb:40:db:9c:63:c9:d2:ea:
                    36:11:a6:26:9d:49:50:83:e5:87:97:bd:46:3e:7f:
                    24:50:1f:da:08:3e:3c:c7:a8:40:27:56:d1:ba:1b:
                    c7:93:61:af:97:e6:55:7e:e6:f8:77:da:7e:c7:69:
                    e5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3B:6E:7A:43:48:D3:7B:F5:9F:F5:76:46:4B:BE:EF:D7:FB:F7:2F
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F55175EA8C5611E792848B4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.69.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:70:63:e1:ef:92:17:be:0f:89:9c:d2:29:24:29:0f:0d:5b:
         d4:f0:d8:63:a7:36:98:8f:4a:55:fe:89:b3:bb:a1:7e:a7:e0:
         65:d2:e4:83:0e:47:17:2b:09:94:9f:29:ab:25:74:f7:ce:dc:
         17:6a:00:76:1f:e6:6d:e5:eb:3d:b1:c1:53:3d:2d:09:fe:e7:
         b7:1a:b7:b7:f2:19:b3:cc:9f:95:76:e1:3f:a4:c5:cd:a6:c7:
         5c:49:15:a2:d9:3e:78:8e:e2:d9:a0:43:9c:fc:01:40:33:b9:
         11:30:11:4a:4e:04:36:95:3a:7b:4a:1e:cd:e4:d7:7b:35:e0:
         39:13:ed:ef:7b:e4:5e:7a:89:79:ae:24:22:c6:ee:76:00:44:
         4f:34:74:51:b9:4d:98:a8:fb:4d:1a:58:65:90:89:55:d1:26:
         e4:f5:47:cd:14:bb:f0:82:38:47:6b:3e:8d:48:26:62:1a:49:
         fc:99:5a:3c:3f:f3:0d:0c:9b:d7:5c:dd:2e:e5:42:14:17:71:
         04:34:d0:03:3a:d7:81:b7:b9:09:35:64:0e:48:d9:c8:d3:b3:
         63:60:f6:1c:12:28:2a:eb:dd:4b:15:bf:fa:00:0e:95:54:e6:
         bf:3c:43:a6:87:ed:63:17:bb:b4:61:3f:d8:e6:ff:d8:2b:3e:
         1f:4e:a1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:56 2026 by rpki-client