Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/E7F141609E9911EBB4117632C4F9AE02.roa
File:                     E7F141609E9911EBB4117632C4F9AE02.roa (raw, json)
Hash identifier:          BWMRKEzqCdvPb4VJWbmdWJfwpPUSHKLOetVFGH3P10s=
Subject key identifier:   2B:F2:4D:40:A7:A1:C0:FE:4A:04:88:97:40:2F:09:74:97:28:70:15
Certificate issuer:       /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
Certificate serial:       0A41
Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/E7F141609E9911EBB4117632C4F9AE02.roa
Signing time:             Sat 30 May 2026 20:24:23 +0000
ROA not before:           Sat 30 May 2026 20:24:23 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     17720
IP address blocks:        203.26.6.0/24 maxlen: 24
                          203.29.96.0/24 maxlen: 24
                          2001:df1:be00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl
                          rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2625 (0xa41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE735, serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
        Validity
            Not Before: May 30 20:24:23 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1b4777-12dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:ff:a5:ba:98:d4:8a:ff:b5:6d:ed:0d:f9:
                    a3:5c:68:57:48:06:0c:c5:99:5e:51:90:c2:c7:57:
                    c4:79:de:56:36:3a:b0:82:4c:5a:23:3b:26:6b:e7:
                    ed:0c:24:2b:95:35:59:31:82:4a:c2:d9:9b:cf:38:
                    a9:43:ae:7c:17:1c:0d:e2:24:36:2e:6c:79:b5:c8:
                    47:c4:74:62:a9:c8:1a:87:94:6c:e0:d0:9d:f9:e3:
                    31:b0:28:b9:ff:29:86:54:ee:25:77:24:95:0b:82:
                    69:6b:73:dd:ff:bb:76:5e:50:76:f0:59:3e:a9:3b:
                    89:e5:20:74:62:07:41:ab:e0:75:68:f9:ff:5e:7d:
                    7e:8d:4c:3a:c0:19:f5:58:1f:b1:f2:1b:53:ec:a7:
                    27:e4:e8:ae:ee:d2:6c:a0:e8:6b:f8:dd:a1:f7:8a:
                    c6:b9:35:8f:cd:9b:dc:e4:c8:71:ee:f7:87:f6:d5:
                    a7:71:cc:7a:c7:1c:a7:e0:68:d9:8a:73:82:d6:47:
                    f2:dc:5d:b1:d0:00:69:39:3a:d9:62:f6:0b:82:f4:
                    eb:64:69:39:1a:36:b1:3a:60:cb:ce:8c:7b:90:ad:
                    ba:80:45:c1:e1:b2:6d:61:37:4a:b3:cf:61:41:78:
                    99:45:88:40:60:d8:30:65:16:44:b0:61:d0:15:da:
                    2e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F2:4D:40:A7:A1:C0:FE:4A:04:88:97:40:2F:09:74:97:28:70:15
            X509v3 Authority Key Identifier:
                keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/E7F141609E9911EBB4117632C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.26.6.0/24
                  203.29.96.0/24
                IPv6:
                  2001:df1:be00::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:8c:51:d0:11:dd:80:e1:ff:95:81:65:95:59:89:a8:31:4a:
         f9:5d:97:2c:87:5b:76:32:75:68:6a:57:81:a5:84:28:a3:19:
         8b:57:a2:6e:3b:5c:b7:b4:ee:ce:52:ed:c2:4f:5e:43:6b:51:
         67:8a:2e:ec:b5:14:a6:3d:a1:b3:59:14:d3:3f:04:c9:b5:22:
         ce:5f:7e:7a:df:3a:39:80:2f:24:17:68:df:1e:bc:b3:b1:d1:
         31:f6:ae:3a:a9:b1:df:fa:c5:ff:49:46:8a:96:fa:86:5e:48:
         54:da:19:9e:ce:2a:4c:32:64:57:3f:43:0b:15:43:6e:6b:72:
         9d:17:14:7d:9b:10:38:2c:f0:e6:fb:91:09:61:44:10:76:a4:
         e0:c1:60:34:be:1d:dd:f8:1e:6e:1a:cd:5d:52:5b:d2:d3:62:
         25:04:4d:08:f8:e9:b5:36:38:67:51:43:03:c1:18:8d:70:e5:
         d2:79:dd:d9:fe:40:43:37:92:34:bc:5e:08:79:ee:dd:92:10:
         9d:f0:cb:f9:0a:fe:c6:40:63:26:53:6a:56:e5:15:95:85:ab:
         2d:88:72:87:ed:91:81:f3:ee:d5:9f:87:50:af:79:a4:eb:d5:
         2f:ab:6c:5d:fb:1e:9a:6c:58:6b:bd:c2:ef:61:af:c2:c7:28:
         59:97:b1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:49:48 2026 by rpki-client