Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/041803705DEE11F0B3FA764DC4F9AE02.roa
File:                     041803705DEE11F0B3FA764DC4F9AE02.roa (raw, json)
Hash identifier:          xuTjK+fWz73yqU/m4ZT9uQGoIAPUGqWFOmnzfiePcSo=
Subject key identifier:   20:71:2F:6E:E9:BE:D0:C2:FB:78:FF:B2:25:A1:9B:50:F6:BD:EA:26
Certificate issuer:       /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
Certificate serial:       98
Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/041803705DEE11F0B3FA764DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:25:03 +0000
ROA not before:           Tue 03 Feb 2026 07:25:49 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        203.17.165.0/24 maxlen: 24
                          203.176.120.0/24 maxlen: 24
                          203.176.121.0/24 maxlen: 24
                          2001:df0:219::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
        Validity
            Not Before: Feb  3 07:25:49 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a45a4f-4763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:1a:fa:a2:3f:3e:ee:3b:f1:06:5f:a5:0e:
                    55:86:ad:9d:a6:e1:64:c1:1f:34:04:a4:bb:0f:bd:
                    f0:0a:16:f4:bb:c3:d0:c9:d0:93:ad:bf:37:e3:56:
                    0f:d5:52:f9:58:a4:5e:cf:a3:87:af:53:21:2c:24:
                    7c:8d:86:ad:fd:bb:34:85:0d:cb:ea:bc:bf:f7:48:
                    a3:9c:82:76:fa:28:33:e2:0a:67:72:47:2e:21:4d:
                    29:0b:e7:d3:5e:b1:30:3d:54:96:e8:25:8c:71:e4:
                    2e:5a:f8:15:96:a0:22:8b:60:d0:99:3b:58:c9:f2:
                    70:b2:af:11:66:55:d4:2f:50:63:fb:71:1c:87:5c:
                    99:14:43:f1:d7:b4:df:2a:2a:3e:a3:9d:25:eb:09:
                    4d:7f:b6:a2:38:ca:50:f9:f2:ec:ba:91:73:a4:54:
                    da:f2:26:e3:09:02:c3:12:0a:87:2d:f0:41:f8:a6:
                    ab:26:e5:28:7c:61:9d:c9:45:cc:9a:00:fb:8e:34:
                    a7:82:0d:8b:59:31:db:12:ea:01:50:83:c3:b6:76:
                    73:0e:38:32:45:9a:b3:bb:0f:5f:a1:f8:fa:c3:89:
                    f2:81:e4:7a:9a:4e:3e:4f:9b:b8:2e:90:5e:2b:86:
                    ba:a1:ea:1b:4f:d0:8b:86:1a:b0:52:20:4f:0e:46:
                    35:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:71:2F:6E:E9:BE:D0:C2:FB:78:FF:B2:25:A1:9B:50:F6:BD:EA:26
            X509v3 Authority Key Identifier:
                keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/041803705DEE11F0B3FA764DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.17.165.0/24
                  203.176.120.0/23
                IPv6:
                  2001:df0:219::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:3b:df:4f:62:34:2e:61:da:fc:eb:e8:b6:3e:4c:ec:7c:77:
         1d:40:31:83:25:15:70:26:8d:c8:42:10:d9:6c:4f:5a:a4:a3:
         da:0f:c6:e6:fe:d9:c9:3b:0e:08:5a:33:d8:d0:6c:fb:70:da:
         06:76:aa:cd:90:ee:d2:12:60:97:68:35:62:39:1f:77:ef:65:
         6b:a4:89:a1:0b:ef:6c:1a:3d:b7:24:ed:3f:0f:af:20:86:47:
         d0:e9:7a:33:6e:ff:72:b9:02:7c:6e:be:6e:3b:74:69:70:7e:
         e8:ba:13:40:fc:64:41:b3:cf:1f:5e:aa:55:47:be:6c:3e:34:
         31:99:cc:ec:a5:86:54:d4:d6:b0:e0:47:90:ac:df:6b:15:85:
         06:99:e9:5f:b2:d1:71:bd:35:21:fb:9c:4d:ed:bb:76:70:4c:
         29:8a:5a:f8:a2:e0:f8:dc:22:85:4d:11:55:cf:1f:6e:03:0d:
         82:93:d4:c0:21:28:34:e1:35:dd:f5:fb:6d:22:49:28:7b:06:
         34:1c:89:c6:59:43:c4:a0:48:2b:f3:58:ed:bd:5d:45:3f:6d:
         54:d9:63:a1:cf:eb:f1:41:cc:ce:47:97:c8:36:b8:39:eb:21:
         42:dd:7a:6a:0e:34:73:03:49:e1:8e:7f:ed:e4:5e:94:a1:b0:
         50:9e:dc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:54 2026 by rpki-client