Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/EF706AC45C7311EF9CC47281C4F9AE02.roa
File:                     EF706AC45C7311EF9CC47281C4F9AE02.roa (raw, json)
Hash identifier:          5t2Yq05hPwtXuLtqs8kweaIaku2qocKgZs9gLGmRXRc=
Subject key identifier:   63:AE:C7:21:7A:88:36:1E:C5:2C:57:06:FD:25:10:A9:B7:FE:50:F5
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       36BB
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/EF706AC45C7311EF9CC47281C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:45:33 +0000
ROA not before:           Tue 02 Sep 2025 15:01:20 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141158
IP address blocks:        117.121.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14011 (0x36bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Sep  2 15:01:20 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4894d-da23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4f:c8:8f:01:24:6f:c6:f5:9b:30:c7:be:c1:
                    3c:13:1d:b3:14:c0:dc:10:c2:ec:2d:b2:9d:df:01:
                    c2:ce:45:7c:25:ca:62:99:4f:c6:7f:45:82:30:be:
                    25:93:30:ce:e8:33:3e:96:a9:72:1f:33:4d:00:86:
                    40:bf:0f:e6:99:61:58:2c:ae:df:3f:5e:7a:85:4e:
                    17:f7:67:00:fb:91:e0:f5:cc:e0:46:9b:af:c5:05:
                    98:04:2c:79:73:f1:c8:a5:13:a0:ae:c7:2f:ec:c1:
                    fd:77:53:e3:00:f9:a7:db:80:f7:94:58:73:d3:ca:
                    2c:a5:9c:c9:f5:cb:f0:35:5c:fb:3d:15:c6:71:1c:
                    86:31:e8:64:8e:17:36:f1:79:11:e5:90:b6:9f:91:
                    81:a1:10:69:41:98:14:cc:82:47:48:5f:a9:34:9d:
                    a1:a6:d3:b0:19:9b:a6:bd:80:3f:1d:5b:3b:1a:6d:
                    a8:8d:7c:63:02:74:b1:a4:bf:c7:d6:bc:74:f4:bd:
                    a7:99:44:60:24:ea:16:52:dd:80:18:79:1c:52:42:
                    71:74:64:1f:09:54:58:54:87:d3:b0:8e:b3:ba:64:
                    cf:2e:7d:7b:f4:01:51:cc:67:bd:9f:63:aa:10:01:
                    a1:fb:87:b3:04:a0:a7:68:11:12:37:50:43:6e:45:
                    ec:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AE:C7:21:7A:88:36:1E:C5:2C:57:06:FD:25:10:A9:B7:FE:50:F5
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/EF706AC45C7311EF9CC47281C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.121.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:00:ff:be:54:46:39:3d:6d:8a:57:fe:df:17:48:7d:d5:2b:
         92:cb:17:e5:9f:7d:c6:83:dc:5a:d9:1f:05:d0:96:c0:fe:87:
         0e:4f:5d:50:08:ac:32:65:c3:01:84:5a:69:f1:7f:ca:17:f6:
         84:99:6d:12:99:f4:a6:c8:51:bd:9a:44:29:78:a0:58:8f:55:
         34:69:53:63:41:5c:3e:b7:05:30:e0:03:f4:64:98:62:d5:d4:
         79:92:7c:07:a2:6c:14:03:c6:37:e7:93:dc:e6:5f:36:26:de:
         00:7e:44:c2:c2:43:1d:d7:94:84:2f:c4:19:8c:c2:87:3c:d0:
         ac:de:91:a9:bf:9a:b3:d8:4c:af:bd:26:84:c2:ee:90:f6:74:
         72:14:e6:99:7a:a7:3a:a7:56:71:92:26:e0:3a:c6:7d:37:87:
         ca:df:a5:86:69:a7:bf:0c:7c:4d:56:17:57:d0:20:ea:48:14:
         4e:42:15:c2:8f:dd:64:ce:d4:10:ee:bd:7d:6a:3c:19:7e:0b:
         12:d1:a6:56:40:b8:71:1b:19:26:cd:30:a4:10:29:24:5b:ba:
         75:86:b9:fc:fe:06:2c:f8:e5:03:22:0e:c6:33:fd:c0:f5:b5:
         24:a8:70:65:08:74:66:2b:f2:0b:24:ab:e1:b1:cf:c7:29:fe:
         09:9e:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:10 2026 by rpki-client