Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/6201F1DEC46F11F08682F936C4F9AE02.roa
File:                     6201F1DEC46F11F08682F936C4F9AE02.roa (raw, json)
Hash identifier:          efx8+5xrcECmjvvHmgG7O7h52QnxQQAcGyhoXJoZs2g=
Subject key identifier:   FE:F4:E8:AF:B6:66:BC:83:86:DD:2E:96:EB:90:B4:24:55:29:79:15
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       36CE
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/6201F1DEC46F11F08682F936C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:45:50 +0000
ROA not before:           Tue 18 Nov 2025 11:11:51 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        182.54.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14030 (0x36ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Nov 18 11:11:51 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4895e-49a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:05:5d:af:60:05:a9:dd:e2:3f:57:a0:f6:
                    10:57:62:02:93:85:e4:aa:44:d0:f5:c5:77:2c:d7:
                    68:34:aa:0a:5a:9a:27:c0:b4:35:90:32:4f:83:69:
                    97:e4:75:ff:52:4e:44:a1:6b:df:c9:a1:a4:d2:d5:
                    7d:2f:b5:40:90:1b:d8:48:6c:e3:55:08:55:f7:18:
                    d8:f1:d5:0b:c5:18:42:a5:c0:c5:c1:01:44:89:c4:
                    d8:6e:76:44:e5:10:23:39:89:0e:26:9a:fb:3d:3c:
                    da:1c:23:2f:da:14:b8:71:b5:b2:3d:f7:22:db:ad:
                    92:26:22:21:59:46:12:a1:bf:ef:a8:88:50:e3:47:
                    f8:ae:41:6f:f4:c1:cb:b5:53:18:cf:6c:31:18:67:
                    92:57:de:bf:d7:2e:5e:9b:4a:71:3c:ac:af:3e:04:
                    e7:76:9f:5b:e6:5f:6b:2c:c9:d9:b3:b7:ed:34:ba:
                    b1:e7:5d:c8:a5:08:d7:e9:f5:f3:d3:e0:82:25:64:
                    8b:ed:10:a0:bf:17:ab:a8:27:a1:fc:27:2c:16:1b:
                    80:8c:72:69:d1:6a:6b:09:04:7a:a4:18:96:07:da:
                    35:a3:22:47:ce:53:75:60:65:cb:3a:de:c7:f4:31:
                    0c:db:d7:29:90:4f:15:05:c6:74:ea:b0:7b:fd:e2:
                    5c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F4:E8:AF:B6:66:BC:83:86:DD:2E:96:EB:90:B4:24:55:29:79:15
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/6201F1DEC46F11F08682F936C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:e6:77:0d:4d:f5:65:8b:2a:ea:f6:86:e1:8b:ce:fe:30:ad:
         45:fd:2b:90:f1:d3:7b:1c:e0:28:28:ae:8a:75:41:20:1b:09:
         70:41:c8:74:fb:50:5f:60:15:35:a8:66:76:00:a9:5f:42:9c:
         e6:e8:58:ec:10:a4:31:b8:ec:0b:9f:fd:7a:5f:36:c0:71:d8:
         65:b7:b6:b9:eb:d1:d7:f7:4c:9e:d3:54:c3:f4:1f:ec:6b:27:
         7a:7a:94:15:b7:13:2b:38:55:9a:7e:11:4e:fb:fe:c5:0d:55:
         57:89:69:6c:e6:fe:4e:c0:f4:0e:33:0c:b9:2c:a1:33:44:2d:
         41:f3:28:90:3d:66:6a:b8:14:07:69:13:2d:23:e1:f5:40:e2:
         26:8c:2f:4f:7e:92:8f:ba:a5:34:6c:28:ad:1c:64:5b:24:b9:
         bb:e0:e9:81:71:0e:e4:09:0d:6e:e1:a0:b3:30:ce:96:78:de:
         b8:67:42:fa:ff:df:da:b3:d4:b5:c0:dc:f4:d3:6f:77:7d:3b:
         47:ad:85:43:60:f2:f8:e8:ae:63:fa:16:8f:31:98:b0:97:a8:
         f2:30:b0:b8:9f:dc:8b:73:46:48:4a:f2:e2:60:a0:a2:8d:5e:
         ca:8c:d0:4c:ac:71:c3:2d:a2:d0:ed:5d:4c:9d:a1:95:50:82:
         c7:4d:a2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:21 2026 by rpki-client