Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/391E6EDE679B11E886728650C4F9AE02.roa
File:                     391E6EDE679B11E886728650C4F9AE02.roa (raw, json)
Hash identifier:          0s446asxUq4TUjj3iz0ZGInEQ2S3Qugk+pBUyrJhQAI=
Subject key identifier:   1C:21:3E:10:0B:14:04:D7:39:38:31:90:A4:D9:FF:0D:2C:9E:DF:B0
Certificate issuer:       /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Certificate serial:       1522
Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/391E6EDE679B11E886728650C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:45:14 +0000
ROA not before:           Tue 08 Jul 2025 17:25:32 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38629
IP address blocks:        138.243.248.0/23 maxlen: 24
                          138.243.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5410 (0x1522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
        Validity
            Not Before: Jul  8 17:25:32 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a442ea-02e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:40:d4:1d:1d:f8:e5:1b:19:a5:35:ef:f0:
                    02:f9:19:cb:48:f8:70:3d:7c:67:11:8e:60:23:b1:
                    13:d3:b4:87:d0:c6:5f:b0:ed:e2:9b:83:d9:b6:b2:
                    d8:5b:69:be:b0:ce:13:3e:60:72:3d:36:93:40:fa:
                    c5:17:ca:2d:3e:e6:6c:a6:3e:8f:d2:2f:61:b6:b3:
                    16:a9:12:62:fd:07:04:70:d9:70:e7:2d:f2:27:f0:
                    fc:41:d0:89:5b:e8:c7:0a:32:a4:65:68:20:bb:f0:
                    73:23:9b:94:64:74:d3:18:7d:d2:11:c9:e0:1e:9e:
                    1a:5c:55:0d:8e:cc:20:a7:1b:c6:a4:60:01:e7:e7:
                    21:3f:20:97:c7:29:a6:f9:95:f1:64:a6:6f:5a:f5:
                    b5:b0:f9:e2:41:81:9d:74:5c:fb:70:52:94:21:e2:
                    37:47:cc:8c:aa:72:8a:f1:5c:0f:8e:db:95:52:2d:
                    3b:d8:00:99:ab:1c:fb:be:e6:08:4c:4f:97:b3:2d:
                    f0:85:d2:27:5e:17:32:6f:e2:76:be:0c:a2:5e:13:
                    aa:c6:54:15:06:51:5e:37:00:53:d8:6a:40:9a:24:
                    8f:bf:a8:68:71:c8:cf:00:04:fd:8e:28:00:6a:c7:
                    e6:da:e1:ae:b0:7d:68:61:0b:f2:aa:34:b7:24:66:
                    98:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:21:3E:10:0B:14:04:D7:39:38:31:90:A4:D9:FF:0D:2C:9E:DF:B0
            X509v3 Authority Key Identifier:
                keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/391E6EDE679B11E886728650C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.243.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:42:16:c9:79:2c:3a:49:01:71:73:ed:fe:a8:fd:d8:9c:30:
         57:b2:92:e6:17:91:89:d5:b2:67:76:ed:c4:30:2f:0f:18:c8:
         ed:da:59:e7:b2:a1:21:ff:2e:13:ce:79:bb:68:37:25:01:c3:
         5b:75:cc:0c:fb:a3:12:bf:d1:14:27:d4:c4:10:d6:bb:5d:08:
         11:5d:9b:31:7c:b4:60:f8:f6:4b:2e:b1:96:14:63:76:15:85:
         cb:49:63:88:2d:2c:65:22:3d:3d:9c:45:92:95:3c:87:86:f7:
         a7:9a:21:a8:5c:06:00:70:6b:c2:46:4f:12:fe:23:e3:c7:fc:
         0b:cd:f8:80:70:fa:f9:7f:61:a4:f9:a5:16:dc:74:49:28:e8:
         9d:35:84:7c:63:20:aa:0c:65:e8:62:a3:af:af:9c:e8:26:87:
         8d:d7:72:51:00:5c:59:55:53:b5:87:18:71:58:ac:68:15:1e:
         10:44:70:9b:b9:0e:78:2d:ee:01:a5:4d:22:29:93:7f:02:83:
         e7:5c:54:d6:08:a6:f0:fc:16:1c:c9:67:36:88:e6:a9:03:0c:
         f9:a7:a7:f7:d0:73:be:68:14:c1:1c:41:33:04:cf:c7:10:b5:
         20:cb:6d:03:35:55:fe:13:d2:0d:58:aa:c5:ca:c2:a6:d7:bf:
         0e:ba:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:28 2026 by rpki-client