Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/6D6DED2830BE11EC9401610CC4F9AE02.roa
File:                     6D6DED2830BE11EC9401610CC4F9AE02.roa (raw, json)
Hash identifier:          4bbcXUAySLXOzdFL1tioIfucTJOOmIVK2SW9Cfab4LY=
Subject key identifier:   23:16:19:AC:45:42:05:C0:B6:78:EA:BD:57:BD:BE:15:90:BC:A2:5C
Certificate issuer:       /CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
Certificate serial:       0EEA
Authority key identifier: 10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/6D6DED2830BE11EC9401610CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:49:11 +0000
ROA not before:           Thu 20 Nov 2025 17:37:09 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     38235
IP address blocks:        202.178.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl
                          rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3818 (0xeea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E87B4, serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
        Validity
            Not Before: Nov 20 17:37:09 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a443d7-6995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:c3:f3:49:bb:87:15:86:ac:e9:aa:ce:85:
                    17:50:0a:4d:5f:58:3f:48:2f:6e:54:1e:09:23:d6:
                    b5:a9:29:88:07:b3:13:41:2e:d4:5a:6e:9e:b6:81:
                    55:4f:f2:2b:43:d3:4b:c8:75:01:71:a4:2d:64:2f:
                    6f:2d:3a:26:58:29:16:c1:22:0a:1a:5c:6a:33:4c:
                    51:ec:0d:a1:f1:5b:ae:d3:4f:a4:0b:de:68:2f:b2:
                    77:ef:d4:13:22:ab:d3:7b:23:5d:9b:fd:e6:3d:17:
                    2e:3f:7f:a0:98:b4:c0:01:da:33:16:16:00:0b:41:
                    d8:1e:02:49:42:1d:28:dd:16:8d:3b:b4:69:5d:1f:
                    c0:fb:eb:e0:36:0f:ae:bb:aa:60:ff:b4:1d:f4:f8:
                    f9:e9:84:95:40:6f:13:87:7f:7c:83:3b:9e:15:f3:
                    17:c9:5f:25:fe:f7:11:b1:d4:3e:d7:05:0a:4c:61:
                    6f:9a:cd:2b:f0:aa:9c:67:14:81:a6:70:07:a5:29:
                    19:36:5b:bb:f2:05:fd:2f:b3:24:b2:60:f1:61:de:
                    2f:72:b5:6d:58:1a:2d:ec:f0:55:64:cb:7b:3e:b1:
                    a5:58:27:6f:1b:0d:bc:ef:0c:95:06:12:a8:7f:b3:
                    95:52:e9:0d:cd:17:65:e0:5e:c6:4b:e7:31:52:ef:
                    86:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:16:19:AC:45:42:05:C0:B6:78:EA:BD:57:BD:BE:15:90:BC:A2:5C
            X509v3 Authority Key Identifier:
                keyid:10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/6D6DED2830BE11EC9401610CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.178.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:d5:bb:12:dc:fa:29:96:13:82:af:3c:cd:61:f6:2a:d9:5b:
         c8:c0:dc:72:ce:8b:66:f8:a4:8c:10:c5:41:b0:64:a4:57:f4:
         27:4c:be:bf:1f:21:6d:e2:25:f6:ca:a0:c1:65:1d:38:9a:1e:
         81:ec:f6:05:e0:9c:ba:94:8a:51:39:a9:86:2c:a5:37:77:70:
         61:e9:2f:3e:9f:ce:27:5e:c0:6c:c6:6a:43:c4:91:0d:13:2f:
         d3:49:66:5c:db:d9:17:1c:e0:56:a4:9b:f4:49:fc:e9:a0:bc:
         a7:ad:12:32:83:25:98:35:20:23:88:c2:b6:82:9b:88:69:38:
         03:a7:79:0c:fb:a6:e6:56:5a:e3:97:2b:e3:89:8f:f4:d3:b4:
         90:76:9e:df:34:49:53:9b:04:58:30:14:31:c6:92:b5:11:40:
         8d:27:44:dc:24:0c:da:49:72:22:ce:06:ad:40:28:b9:3a:3c:
         64:50:75:8e:91:ed:10:21:d0:15:71:4e:ac:86:bb:3c:e4:7a:
         65:02:60:c9:71:25:5a:bf:b0:ab:c8:ba:82:73:49:a1:41:de:
         bd:17:9c:0a:78:84:73:1d:e8:3e:90:c7:88:28:7c:d5:b7:7e:
         18:b6:79:50:21:9c:65:83:29:82:c0:c9:6e:3a:72:01:27:3f:
         83:b7:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:22 2026 by rpki-client