Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/8489DCB2DD1111EA9D8EEB74C4F9AE02.roa
File:                     8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (raw, json)
Hash identifier:          mPbx6GaGGpEZcuE74LbXOCQRX7Jy5PlwX+gtNN/XZgI=
Subject key identifier:   B5:61:85:A7:4B:58:C6:53:BB:65:5A:E3:6D:BC:23:02:A4:41:DF:39
Certificate issuer:       /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial:       19D1
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/8489DCB2DD1111EA9D8EEB74C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:50:45 +0000
ROA not before:           Fri 20 Feb 2026 17:14:52 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     23877
IP address blocks:        202.80.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6609 (0x19d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
        Validity
            Not Before: Feb 20 17:14:52 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48a84-175e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:ec:15:59:23:7e:49:69:50:c9:1a:22:5c:
                    d6:92:fc:22:29:f0:bf:6b:fc:b3:63:e4:a9:6d:e4:
                    d5:e4:08:32:24:88:d4:7e:b2:86:20:94:58:2b:d2:
                    0f:ba:95:f2:5b:a2:5c:97:70:18:cb:0a:51:82:60:
                    6f:df:09:cd:66:c5:12:9d:e2:a3:18:52:eb:7b:b9:
                    e8:6a:be:66:5e:c5:fb:3c:c0:f0:e2:c8:1c:eb:e4:
                    e1:e5:1b:0d:41:e8:80:9e:ba:7e:6e:ba:c7:dc:e0:
                    40:52:30:04:64:1b:0b:8f:a2:7b:d8:85:c5:86:7b:
                    c3:bf:0e:79:46:6c:cf:8f:ea:67:a8:41:8b:c7:4e:
                    14:b5:f3:99:5d:1d:26:a7:5e:ca:9b:e9:c9:f1:b1:
                    6c:97:a8:32:37:42:e9:86:5e:55:7d:aa:dd:a3:04:
                    f4:f9:3c:9e:f7:f7:d7:12:c9:93:d6:39:61:9c:ac:
                    fc:70:9c:1d:b5:05:45:99:ec:42:fc:de:87:f5:4d:
                    66:69:7a:8c:c6:19:ba:33:21:e9:50:8b:d2:f4:63:
                    43:d2:6b:41:80:e7:2d:69:be:a9:c2:9b:99:a8:13:
                    73:91:79:07:26:13:f3:36:4f:64:c9:da:0e:f2:2e:
                    43:03:70:b2:3a:ef:f0:2c:b4:a3:1c:68:68:97:8a:
                    f8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:61:85:A7:4B:58:C6:53:BB:65:5A:E3:6D:BC:23:02:A4:41:DF:39
            X509v3 Authority Key Identifier:
                keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/8489DCB2DD1111EA9D8EEB74C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.80.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:19:26:17:9f:e5:af:1c:f1:45:ab:06:7e:23:b0:f8:cf:73:
         59:d0:4f:35:a4:79:cd:0a:f3:f8:9a:52:e8:9e:05:dc:77:c6:
         e0:f5:a3:68:3f:75:a5:61:09:f0:11:dd:35:87:e4:ca:c2:30:
         c1:89:f8:b8:71:21:de:72:09:e7:e3:2d:ac:6f:10:73:03:5b:
         57:77:61:f5:11:a8:11:c8:0f:6a:68:9c:ff:d3:17:b6:4a:3f:
         df:6b:cd:5f:3a:99:9c:c2:7a:fe:3d:95:3c:9a:9f:7c:82:dc:
         44:a6:bc:e8:8f:a8:c7:d5:fb:23:d4:5d:af:fb:1d:36:8f:63:
         3f:04:7b:98:af:a9:2a:8e:1f:d2:0c:ca:80:6a:e2:bb:ca:24:
         56:9e:34:fa:a7:18:bc:c6:23:3a:a1:0d:14:05:94:03:6c:fa:
         f9:9d:f4:40:10:0a:f5:42:94:64:67:7f:85:14:2a:f7:f2:a3:
         a4:c5:da:0f:53:df:3b:15:ff:dc:a3:9d:84:e2:54:e2:48:2b:
         a7:ae:73:e6:5c:22:7f:04:ab:e2:47:aa:a2:dc:a5:1e:31:24:
         98:19:73:5f:93:43:0a:5d:2c:63:7e:fc:2b:d6:0b:e9:c3:96:
         25:49:05:a2:fe:5b:c8:f0:e2:33:35:48:fc:bb:b6:f5:3f:f1:
         11:72:08:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:03 2026 by rpki-client