Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/7AEEA290829E11F0975FC440C4F9AE02.roa
File:                     7AEEA290829E11F0975FC440C4F9AE02.roa (raw, json)
Hash identifier:          NJ63YJDh2rXhGyC41ze8yWJyNkK6DiJWZj8EZ4mClWY=
Subject key identifier:   47:53:A6:4F:AB:C0:80:12:F4:4F:98:D4:78:85:70:98:F0:CB:93:06
Certificate issuer:       /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
Certificate serial:       0A42
Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/7AEEA290829E11F0975FC440C4F9AE02.roa
Signing time:             Sat 30 May 2026 20:24:25 +0000
ROA not before:           Sat 30 May 2026 20:24:25 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     24541
IP address blocks:        203.26.6.0/24 maxlen: 24
                          203.29.96.0/24 maxlen: 24
                          2001:df1:be00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl
                          rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2626 (0xa42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE735, serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
        Validity
            Not Before: May 30 20:24:25 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1b4779-9700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:3a:eb:cd:ec:b1:75:4d:5b:ed:f4:26:6f:
                    8b:a3:8a:46:da:9f:0a:b3:27:02:11:fb:12:e4:e3:
                    a2:4d:0e:a4:18:72:0d:4a:f7:08:cd:0a:41:c9:71:
                    09:8e:b0:da:7b:c9:91:2a:76:58:93:95:ed:67:81:
                    f7:1c:a6:0c:ba:7e:1f:b9:67:bc:a9:a0:9e:b2:ff:
                    52:c2:86:2b:64:5c:17:b0:10:07:87:c4:e8:02:7b:
                    42:27:6b:ff:ef:5f:58:3d:4a:f1:15:88:e8:71:53:
                    9c:5e:7f:47:a8:76:a4:6f:7c:fa:2a:63:e7:b4:67:
                    dd:c3:6f:5a:a4:25:d4:d0:06:ef:bc:97:dd:c3:05:
                    5a:2f:e7:36:6e:7b:98:0c:69:b1:49:5f:c6:b9:d7:
                    b3:6b:32:82:a8:03:7d:ec:e2:48:87:ec:47:93:21:
                    d9:7a:1a:93:a1:bb:50:72:93:7f:9f:17:79:7d:07:
                    e0:a1:44:ee:8e:c5:db:1c:c5:01:cc:4c:41:ee:54:
                    07:58:4c:55:2c:7b:be:ad:c5:1c:9e:d3:6f:d2:1f:
                    e4:1b:1c:6a:a5:a7:f9:c7:74:ef:f7:9f:4d:b0:0d:
                    f1:c0:b6:7c:9b:01:5e:5c:4c:d1:95:2c:1a:93:15:
                    99:d3:5b:ca:f7:41:6b:9e:b2:53:f0:0c:26:bf:58:
                    05:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:53:A6:4F:AB:C0:80:12:F4:4F:98:D4:78:85:70:98:F0:CB:93:06
            X509v3 Authority Key Identifier:
                keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/7AEEA290829E11F0975FC440C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.26.6.0/24
                  203.29.96.0/24
                IPv6:
                  2001:df1:be00::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:69:9c:d6:a7:96:19:1e:1b:9d:26:7a:fd:50:bf:9c:f3:bf:
         f6:4b:68:34:22:70:f9:1c:d8:2b:0d:17:87:0f:44:45:5b:71:
         48:04:75:a5:b9:0a:1b:fc:09:43:dc:cf:13:cb:43:bf:a2:97:
         f3:cc:4d:0f:9c:10:77:10:8e:ec:18:44:01:24:99:36:8b:a6:
         74:35:c4:27:a9:a7:ca:00:e4:52:12:76:46:23:00:26:ed:c3:
         50:f6:5c:9f:30:f9:c7:13:a5:89:23:cd:87:ba:8a:61:2e:c1:
         ca:44:04:fb:e9:43:8c:3a:92:cc:7d:b4:bd:8f:a3:35:5b:c3:
         e7:2e:83:03:c6:b3:7a:cd:b5:6e:05:e2:87:df:2d:5e:ed:c1:
         71:47:cf:ef:e9:55:14:50:79:20:7c:37:44:dc:46:03:2a:99:
         10:23:9f:8f:f0:b7:df:30:e8:b7:ea:6d:52:43:3e:dc:4f:9f:
         7e:4c:b7:b0:87:c8:40:35:a3:39:11:ad:22:77:d0:92:79:a9:
         bb:ce:fa:fc:fe:4e:e5:71:df:10:60:a5:42:c4:60:4a:6c:19:
         c7:63:8c:ff:2c:c5:b4:01:50:15:a0:22:7c:ca:5c:6b:ea:67:
         b8:73:8f:9b:24:b8:db:91:45:db:6b:29:a9:e0:1f:2b:cc:97:
         03:cf:df:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:49:58 2026 by rpki-client