Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/436F1AE2ECF411EA822E8D28C4F9AE02.roa
File:                     436F1AE2ECF411EA822E8D28C4F9AE02.roa (raw, json)
Hash identifier:          427mvzJFSdYUKAL3X0UPysO+w/VRSMcKPmDmCw4wPXE=
Subject key identifier:   0C:66:D3:CA:2E:4F:49:FD:B9:74:2B:3B:51:32:B1:33:86:53:D6:B9
Certificate issuer:       /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Certificate serial:       0C26
Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/436F1AE2ECF411EA822E8D28C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:25:04 +0000
ROA not before:           Tue 10 Jun 2025 19:23:43 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     10081
IP address blocks:        116.197.0.0/17 maxlen: 17
                          203.92.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
                          rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3110 (0xc26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
        Validity
            Not Before: Jun 10 19:23:43 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a48480-13cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:02:a0:01:11:6b:7c:c6:e8:58:9e:46:d9:76:
                    5a:ef:89:11:e3:3e:ae:62:5a:6f:c9:f4:53:00:13:
                    df:7f:fa:8e:a6:04:f5:1c:3b:12:6c:92:f6:c3:ce:
                    c7:ea:ab:13:ca:47:f1:30:4c:9e:6c:1e:ca:81:94:
                    10:b0:9d:40:28:3a:04:63:be:55:f9:92:9f:a7:86:
                    88:9b:cf:f0:1c:54:6c:7d:5c:60:fb:85:9e:4f:5f:
                    74:49:a5:36:f5:28:66:9e:df:dc:22:30:75:22:28:
                    20:89:a9:ce:66:b6:34:e9:7d:eb:54:11:96:e3:32:
                    8e:42:d2:4f:e0:ea:9a:ac:c0:af:d0:d9:cf:b9:7e:
                    61:6b:45:69:4d:23:bc:e5:4c:7d:25:06:b7:d6:e7:
                    63:1c:b1:cd:0c:77:31:d8:5b:2b:e7:8d:68:e7:a2:
                    3e:a3:12:62:4d:c7:6e:28:d0:de:cb:32:cf:f3:83:
                    19:39:fe:ea:2e:07:c7:80:80:02:fe:fa:f8:4e:af:
                    70:8c:f5:2c:d0:67:45:9b:b1:ef:92:ee:5d:99:92:
                    03:a1:6c:10:44:7e:3d:46:9c:4e:7d:0c:67:14:ca:
                    8a:83:f6:38:fb:71:19:02:41:9b:95:ec:cf:17:b3:
                    88:a7:4c:9e:30:93:00:92:dc:0f:dd:a6:3a:12:d0:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:66:D3:CA:2E:4F:49:FD:B9:74:2B:3B:51:32:B1:33:86:53:D6:B9
            X509v3 Authority Key Identifier:
                keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/436F1AE2ECF411EA822E8D28C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.0.0/17
                  203.92.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:4e:3f:53:a9:f3:25:2b:c3:41:22:1e:57:58:0f:84:8f:af:
         3b:c6:1c:e1:04:8a:a3:a7:96:88:7f:3a:60:82:54:26:91:6a:
         9e:cd:4c:d8:e4:c2:31:0e:6f:88:c9:97:53:62:88:fa:5a:3e:
         83:e2:81:b8:de:41:fa:9a:ff:fe:77:91:02:90:74:99:40:07:
         10:84:a9:e1:08:49:92:97:47:ca:b8:3d:7e:0c:56:91:5c:32:
         1e:78:9a:75:e0:fb:a1:40:6b:1b:36:f4:16:36:8b:11:c5:3f:
         5b:84:5e:3b:ed:b7:b4:0e:59:b8:0e:49:4c:e5:a1:34:65:2b:
         81:34:2e:34:a6:65:66:70:1f:76:b6:a4:be:f2:92:cb:44:e6:
         d2:d4:d9:dc:98:a1:75:d4:a7:8d:43:aa:0c:27:e1:04:04:db:
         ac:a6:83:bd:1f:4d:8d:6b:9c:65:35:54:d9:96:25:e1:e7:4c:
         50:b7:e1:5e:6f:4a:00:db:0b:6b:f6:c3:f8:fa:2b:82:4f:a8:
         65:16:44:b2:4d:1b:6e:56:ad:81:83:f4:2f:79:07:a4:10:6f:
         12:6b:9e:3e:b0:bd:7a:a0:06:fc:10:95:8c:0e:71:f5:6b:1e:
         5e:40:3c:dd:a3:11:3b:e1:59:48:0f:13:32:24:73:00:cb:50:
         6f:03:5d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:53 2026 by rpki-client