Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/54C069B0523211EBAD962F7AC4F9AE02.roa
File:                     54C069B0523211EBAD962F7AC4F9AE02.roa (raw, json)
Hash identifier:          nT4IqSSGqtky3oV2UAtgSCBzreFM8SwkDqRJ1RnCCsQ=
Subject key identifier:   01:27:21:89:6F:8E:56:DC:81:B0:F3:FC:44:30:13:56:17:B4:88:79
Certificate issuer:       /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial:       19C9
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/54C069B0523211EBAD962F7AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:50:37 +0000
ROA not before:           Fri 20 Feb 2026 17:14:45 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     131109
IP address blocks:        121.54.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6601 (0x19c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
        Validity
            Not Before: Feb 20 17:14:45 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48a7d-289c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:e2:e3:f9:44:0a:e3:63:96:e5:2a:8c:a1:
                    e7:c9:a1:57:c0:a5:50:29:0a:37:11:f8:0c:8d:84:
                    a5:41:e5:8e:90:bb:d4:7a:ae:dd:80:d9:2b:2f:27:
                    bb:69:80:2d:22:85:1e:8f:8d:9d:5b:52:8b:b8:c8:
                    e3:20:b2:81:40:3b:a1:a7:7e:1f:ae:b3:ec:03:f2:
                    6d:7b:dc:3e:83:d0:0d:83:b1:9d:94:b8:9b:5a:72:
                    ab:7c:f9:c0:19:f2:28:e8:56:56:2e:72:cf:33:b2:
                    e5:d0:ea:76:6c:b0:8d:55:e3:c3:33:61:a3:e5:a8:
                    71:34:7c:52:66:d9:8e:e6:8f:f0:b6:f2:d4:1e:ea:
                    21:ff:fb:73:27:67:4e:a7:07:50:2e:ea:b1:56:f8:
                    19:e0:29:f6:ca:75:4a:79:bb:f8:36:d3:ae:ff:0b:
                    5b:dc:e2:3f:29:6f:b7:69:3f:54:aa:71:d6:12:16:
                    26:3c:e2:53:9c:7a:68:0d:42:ea:f5:14:59:70:b0:
                    b7:c8:96:92:52:e1:0c:ea:e8:4d:a6:4d:12:4f:4b:
                    65:73:e7:9f:8c:e0:9c:6d:c7:6c:0b:79:6a:8a:e9:
                    7b:be:ae:e3:58:f1:86:bb:19:7d:c0:8a:d6:3e:66:
                    98:cf:14:6a:6a:72:4b:3e:d3:61:77:ab:b2:a7:81:
                    93:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:27:21:89:6F:8E:56:DC:81:B0:F3:FC:44:30:13:56:17:B4:88:79
            X509v3 Authority Key Identifier:
                keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/54C069B0523211EBAD962F7AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.54.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:23:0d:16:2b:86:1c:20:04:8b:9e:21:82:0b:1e:2e:8e:d3:
         04:de:f3:29:42:42:80:bb:bb:9e:a0:2f:c8:9e:e8:4b:df:e1:
         5d:fe:3a:6a:1e:60:ea:96:37:8a:1d:4e:78:17:21:26:db:e7:
         7c:fb:b9:5b:b4:88:2f:5e:34:bc:2b:6a:37:95:b9:98:2b:96:
         68:0f:d6:3a:0a:12:2b:df:a8:84:eb:bc:b9:e6:f3:40:f1:7a:
         d6:ca:5b:c8:52:02:15:89:27:51:db:bb:28:01:78:53:f3:0b:
         62:99:80:0f:9c:52:d4:fb:90:7a:93:61:e4:1f:6a:3f:7f:52:
         08:89:0f:2c:b8:e5:b6:67:1b:02:7c:42:b0:a4:50:70:1a:c6:
         d2:7e:a4:ee:3b:e8:e1:65:8c:98:83:b1:78:ff:53:51:7f:e2:
         87:c9:30:51:4d:e0:20:f1:15:c8:30:86:97:4c:c3:8a:86:93:
         d8:65:6a:90:61:b0:f6:b6:44:e3:eb:60:d9:99:ba:4a:6d:8a:
         e6:4d:3c:1b:54:63:e5:35:87:0b:ed:5b:b1:77:68:82:5c:83:
         44:4e:f6:13:71:02:3e:ba:3f:d0:6b:33:b8:e1:c9:cf:6c:8f:
         ef:91:04:af:57:77:03:53:b2:b9:5b:89:be:36:60:e5:8f:87:
         46:26:da:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:27:24 2026 by rpki-client