Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/D0D94718CB8111E89EDE697DC4F9AE02.roa
File:                     D0D94718CB8111E89EDE697DC4F9AE02.roa (raw, json)
Hash identifier:          cIxtJWgcXzpekN854h+Gn0iT4S0YYTFuZrY9rIh4a6M=
Subject key identifier:   17:CF:3C:0A:3F:2E:0D:D9:17:87:FE:B4:B0:34:6B:4E:C5:B0:9F:50
Certificate issuer:       /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Certificate serial:       1521
Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/D0D94718CB8111E89EDE697DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:45:14 +0000
ROA not before:           Tue 08 Jul 2025 17:25:31 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     23779
IP address blocks:        138.243.0.0/16 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5409 (0x1521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
        Validity
            Not Before: Jul  8 17:25:31 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a442e9-9f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:77:97:a0:70:86:1e:c4:15:0b:0f:9a:47:1c:
                    b9:b0:6b:93:f5:50:cf:f8:3c:ec:52:b8:de:63:52:
                    27:d8:e0:0f:cb:40:5a:e4:4c:84:2b:6a:6f:b9:40:
                    cd:47:98:c2:cd:27:63:c9:80:77:5f:21:7e:67:98:
                    bb:c7:b5:b8:bc:8c:81:7a:02:b0:51:f9:14:78:b8:
                    73:36:ab:7d:e6:c4:65:b1:fc:72:bb:b5:ea:3e:2b:
                    05:bc:4c:3c:56:91:c4:e5:4a:e9:ef:c8:89:30:c4:
                    a0:d5:c7:bc:08:8d:fd:fb:49:e3:0a:f4:3f:85:e9:
                    44:13:99:fa:e4:4e:ad:a2:ae:c2:24:59:aa:69:07:
                    99:5a:b5:7f:42:eb:47:88:76:b6:4f:a6:df:fe:c3:
                    d5:84:ff:77:0a:11:6d:65:27:3b:e0:be:7a:2d:1d:
                    d9:20:d4:fd:37:7f:a3:b2:d4:0a:63:2f:15:54:35:
                    2f:5e:13:51:2a:45:6d:50:ea:14:78:9b:c5:15:26:
                    35:6e:bd:50:87:1c:07:44:a0:7b:34:aa:20:3f:84:
                    49:12:c7:6d:ad:c5:c4:2a:74:99:a7:7d:30:aa:92:
                    46:74:18:f8:1d:ff:d6:48:de:64:72:19:26:f2:4f:
                    04:18:d9:13:a2:02:56:c6:3f:fb:0a:7b:8f:2e:96:
                    62:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CF:3C:0A:3F:2E:0D:D9:17:87:FE:B4:B0:34:6B:4E:C5:B0:9F:50
            X509v3 Authority Key Identifier:
                keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/D0D94718CB8111E89EDE697DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b7:71:b5:c2:10:e7:0f:d4:dc:a6:ec:58:58:b3:81:dc:7b:2b:
         a3:42:16:3d:fc:0d:4f:b7:e7:ed:61:be:9f:38:19:3a:7c:05:
         81:19:01:f1:73:37:89:18:e2:30:d8:f8:f9:e1:b2:6f:26:61:
         bb:26:67:eb:64:65:35:a9:7c:fe:0d:fa:cb:86:7d:20:aa:c4:
         8f:7a:84:93:14:37:92:9b:a8:8a:c4:1c:66:21:f6:e0:cc:91:
         bf:12:1d:0e:32:a0:78:ba:4a:2b:db:58:2e:36:e6:63:dc:c1:
         e6:0e:ef:17:31:8d:ca:2f:86:76:a1:74:5a:1f:21:b1:d6:7a:
         fb:44:17:c2:93:e2:bb:73:20:f0:82:3b:ee:0d:98:ed:57:f8:
         65:b1:59:0e:47:0a:89:f2:1f:af:59:60:bf:12:e6:86:85:e4:
         b8:23:84:59:70:f6:c1:e6:b1:ec:47:25:54:41:83:e4:db:53:
         b4:40:e6:db:ba:b1:89:a0:20:2a:66:70:3c:0c:bc:92:cf:66:
         4f:69:11:36:34:b9:a2:db:f4:c2:2d:5c:dd:3f:d9:a6:f5:d4:
         4c:c7:c7:0e:49:31:54:86:35:c2:46:c8:06:88:cb:ea:a9:34:
         95:08:17:4f:26:65:5d:30:73:6c:65:ea:f5:fb:0a:6f:06:2e:
         e6:c9:93:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:21 2026 by rpki-client