Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/0E1AD8C2982011F0A7A0894CC4F9AE02.roa
File:                     0E1AD8C2982011F0A7A0894CC4F9AE02.roa (raw, json)
Hash identifier:          wKUa5/luq9B8kVj6p/G8xPQ0IZcLYJQWqnLpb5Jwx4c=
Subject key identifier:   53:65:00:4E:28:C6:75:EE:0F:E7:4F:A4:70:85:EA:D4:4C:C0:93:FC
Certificate issuer:       /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial:       19E1
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/0E1AD8C2982011F0A7A0894CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:50:59 +0000
ROA not before:           Fri 20 Feb 2026 17:15:07 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     9912
IP address blocks:        203.55.11.0/24 maxlen: 24
                          2001:de8:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6625 (0x19e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
        Validity
            Not Before: Feb 20 17:15:07 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48a93-4480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:df:65:a0:8b:73:a6:3a:06:14:a9:27:ae:f3:
                    17:6a:94:2b:f2:2b:d1:46:75:b0:96:12:9b:c3:d9:
                    75:98:09:18:47:7e:31:87:c0:79:42:04:ed:ec:9a:
                    e2:43:6c:34:e8:51:2c:06:e8:26:50:1b:55:ea:20:
                    23:d1:da:d0:08:96:af:79:6c:6f:14:2f:44:c2:00:
                    10:66:2a:7a:7d:a2:ea:36:b8:47:11:66:5d:ca:ff:
                    f9:59:25:23:03:14:f1:6b:42:0a:1c:dd:06:5b:30:
                    e8:7c:7b:2d:e1:7e:1a:c7:ef:1a:20:a0:24:1b:58:
                    56:27:c3:15:ca:81:bc:fd:08:f8:a6:52:b4:c6:11:
                    b5:b3:7d:52:6e:34:5c:78:ce:01:40:b8:a9:ab:d6:
                    17:a8:f1:ac:2d:9e:3d:15:8d:67:59:83:31:9e:5f:
                    ac:4d:10:2d:01:73:4b:85:22:a1:89:d0:d8:5d:7b:
                    ca:67:16:02:f6:b5:a4:86:62:82:93:06:27:19:e3:
                    21:0c:29:85:60:29:7a:f7:0d:1b:07:88:82:63:81:
                    20:dc:d9:5c:b6:4f:6d:2c:0d:d9:f6:a8:bf:28:0c:
                    04:ed:0f:d4:27:d7:01:ba:61:ea:a2:a4:21:f4:0b:
                    60:16:82:f0:0a:d6:13:f9:71:46:66:6b:a4:c0:f3:
                    58:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:65:00:4E:28:C6:75:EE:0F:E7:4F:A4:70:85:EA:D4:4C:C0:93:FC
            X509v3 Authority Key Identifier:
                keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/0E1AD8C2982011F0A7A0894CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.55.11.0/24
                IPv6:
                  2001:de8:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:72:32:7b:47:46:b2:f8:82:87:97:66:04:29:1e:8c:a7:e7:
         8c:0a:01:78:bf:b9:b4:28:7d:0b:e0:5e:40:97:ed:7d:ee:ae:
         31:62:dd:8e:13:4a:28:b7:0d:d2:3c:c6:a9:39:77:b2:d4:d3:
         03:ec:bc:3e:3b:41:4c:1f:c7:68:76:9e:65:ca:ac:c1:6c:e8:
         b2:d4:8b:16:39:c5:ba:3f:0b:3e:ef:80:48:a0:17:ae:f5:ba:
         f0:f3:b2:80:fd:00:e5:a1:a4:ca:e4:48:00:1a:de:a6:2e:79:
         0c:01:a6:53:ac:ee:44:21:fc:6b:e8:ff:b1:6e:a6:de:80:2e:
         18:a7:37:b4:23:4d:44:fb:5e:21:8f:10:58:c9:a7:4f:8f:85:
         39:29:e2:66:a3:f3:e2:c8:ac:b2:0b:f8:e8:70:01:07:13:92:
         9f:04:c0:3d:17:72:2a:8a:83:54:50:34:d8:71:16:a6:f0:a4:
         62:5f:e2:36:08:9b:b2:48:e6:d3:fd:5f:31:5c:f4:39:e6:15:
         27:2a:1b:52:95:45:98:24:5d:51:f3:4f:96:ab:e5:4c:3a:3b:
         90:92:78:04:0f:74:b5:ef:79:86:07:81:b7:da:b6:90:ef:22:
         8a:96:b6:ee:63:44:14:90:dc:22:30:a7:92:78:e6:e0:bf:70:
         ff:55:d3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:59 2026 by rpki-client