Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/E404430CB0F811E595E0F761C4F9AE02.roa
File:                     E404430CB0F811E595E0F761C4F9AE02.roa (raw, json)
Hash identifier:          owZAiKzsMVZHcu5y/uvghCfcRo2W0WEoElBFnrF91Ts=
Subject key identifier:   E5:A8:A2:FA:C7:C1:15:05:2B:36:5E:B9:D4:39:FD:9F:23:52:14:1D
Certificate issuer:       /CN=A91E9D1A/serialNumber=0976FC3D23186D48C671773740891CF54E31B80E
Certificate serial:       3557
Authority key identifier: 09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/E404430CB0F811E595E0F761C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:10:28 +0000
ROA not before:           Fri 30 May 2025 14:30:10 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     132696
IP address blocks:        202.3.78.0/24 maxlen: 24
                          2001:df0:214::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl
                          rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:43:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13655 (0x3557)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9D1A, serialNumber=0976FC3D23186D48C671773740891CF54E31B80E
        Validity
            Not Before: May 30 14:30:10 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42cb4-f1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a0:99:cd:17:7b:11:f4:87:1b:a0:95:cb:bf:
                    dc:0d:1a:93:3f:d8:4d:f6:7f:f3:53:53:b3:cc:78:
                    04:0e:31:26:90:ac:a6:28:84:ce:05:b8:51:cb:40:
                    cf:2a:35:81:ec:63:d9:76:60:14:87:de:0d:f6:1a:
                    e9:e8:d5:40:bc:b2:63:d6:ef:57:88:9d:67:a4:cd:
                    de:6c:a6:b2:d2:5b:c2:15:34:f4:52:e9:00:f8:dc:
                    04:ba:5a:2d:70:29:d3:41:7b:46:6c:10:ad:8b:9d:
                    10:fb:00:fa:3c:4a:b5:3b:75:bb:c6:b2:01:40:1d:
                    56:ec:a2:f0:90:96:00:06:58:d0:cc:89:d6:18:e0:
                    7d:d5:65:0d:86:83:3b:e7:05:2b:61:92:65:0c:a4:
                    4d:f8:1f:67:6a:ea:b6:1a:d9:75:b9:24:25:ae:2d:
                    fb:19:c1:d8:94:2c:ef:71:22:29:33:f6:74:92:c8:
                    c0:0f:51:f1:8b:7c:d1:c7:ae:91:95:cf:2d:01:5a:
                    73:69:29:c7:79:f2:6d:79:66:71:4c:80:a1:fb:ba:
                    06:11:0d:a8:01:61:5b:45:66:c7:ff:88:9b:8a:25:
                    69:69:5e:72:e9:f5:e7:4d:0d:c1:d0:e0:9d:5c:2a:
                    b4:91:a0:82:da:7f:42:1b:fa:85:37:bc:09:f1:e4:
                    c4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A8:A2:FA:C7:C1:15:05:2B:36:5E:B9:D4:39:FD:9F:23:52:14:1D
            X509v3 Authority Key Identifier:
                keyid:09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/E404430CB0F811E595E0F761C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.3.78.0/24
                IPv6:
                  2001:df0:214::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:02:b8:4d:c9:2c:61:96:9a:4b:e9:8d:ed:9f:f7:39:ce:66:
         54:62:a5:10:9f:64:4d:cc:58:2b:83:94:c9:9f:a4:63:b6:31:
         4d:c0:b6:14:39:52:7a:43:28:ea:b9:e8:25:95:20:31:a0:48:
         4c:6d:ee:ae:f7:7f:d5:3e:67:06:34:f2:20:6f:09:5d:f0:12:
         e5:93:68:e7:fc:19:37:91:21:24:e0:ad:ba:b8:eb:3a:ab:a8:
         c1:78:94:21:39:dd:cc:14:ed:c0:c2:1c:49:8e:89:32:c6:b5:
         50:7b:aa:1f:99:53:af:e1:a3:04:0f:20:3e:d7:64:20:f9:1c:
         b2:6d:b7:56:16:f5:fb:a3:74:83:cc:50:28:35:60:be:4b:6d:
         7e:09:3d:9c:15:e7:23:58:d8:33:20:67:bf:f7:2c:d1:2d:61:
         02:2f:7c:0a:cb:f7:94:a0:71:65:51:65:7b:19:ed:81:40:7f:
         fc:83:df:9b:5f:10:3d:59:52:d3:8b:b7:6f:67:a3:19:37:54:
         3b:58:78:81:44:4f:73:84:c0:8f:24:08:62:02:73:c2:0a:41:
         f0:a9:0a:be:d9:fb:1c:f7:c2:a4:61:b6:eb:00:55:ed:cb:1a:
         f9:0a:5d:9e:10:80:ab:7a:25:53:8c:3b:a8:ea:c1:cf:06:be:
         9e:d6:c5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:37 2026 by rpki-client