Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/62C9C1CEE03111EEBECE581EC4F9AE02.roa
File:                     62C9C1CEE03111EEBECE581EC4F9AE02.roa (raw, json)
Hash identifier:          t0JwIZnWNwkpA1Xj7Iomz+i/IAzNKzGVXslW6fglsrA=
Subject key identifier:   94:E6:85:D9:29:8F:44:5E:88:B7:E9:74:3C:04:F7:69:33:7F:AD:BC
Certificate issuer:       /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial:       197E
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/62C9C1CEE03111EEBECE581EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:11:08 +0000
ROA not before:           Fri 04 Apr 2025 16:45:36 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     147314
IP address blocks:        203.96.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
                          rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6526 (0x197e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
        Validity
            Not Before: Apr  4 16:45:36 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a448fc-2b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:96:c6:a1:69:08:40:d9:ec:88:f7:32:ed:00:
                    67:29:44:f7:df:7a:fd:fc:7a:f1:73:e0:06:b6:59:
                    83:a9:2d:10:f1:4f:73:96:04:39:76:14:f9:0b:14:
                    30:45:59:6e:54:f5:12:7a:f5:f6:e4:12:66:ba:7e:
                    d5:8d:9d:11:0b:d4:63:ca:61:a3:07:d8:70:0a:58:
                    d7:a2:e5:f2:09:47:90:17:14:71:76:a8:af:dc:59:
                    f2:24:e4:dd:9a:0f:ea:e1:21:e9:c6:70:e7:22:25:
                    a4:9c:40:32:54:a8:23:3f:03:a6:48:49:5e:e4:ae:
                    9e:35:1c:af:ca:71:77:42:8a:24:54:cf:a0:dd:f2:
                    62:9d:7f:20:db:15:38:75:dc:52:f1:f5:06:31:b8:
                    8e:e0:9a:2b:e9:ca:85:b4:bf:6e:f3:ae:5b:4a:bf:
                    a0:f5:45:26:40:97:29:d4:3c:0d:5b:ca:01:b7:58:
                    b8:b4:84:c0:d2:50:dd:58:43:22:ab:a7:f4:2e:04:
                    16:fe:ca:d9:d0:be:cd:99:62:81:c5:f5:4f:6e:78:
                    17:78:3b:4d:cc:2a:14:dd:34:10:ae:dc:ca:34:7d:
                    c0:ed:29:9e:e6:4b:53:e2:52:d2:1d:07:53:c1:6a:
                    0b:d8:d9:52:1c:77:7a:ad:8f:09:6b:4a:44:ba:8f:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E6:85:D9:29:8F:44:5E:88:B7:E9:74:3C:04:F7:69:33:7F:AD:BC
            X509v3 Authority Key Identifier:
                keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/62C9C1CEE03111EEBECE581EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.96.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:29:af:cb:b8:a6:f6:ad:5e:de:61:4a:98:9a:fe:ad:c5:63:
         6b:a4:c9:6a:05:5d:95:45:7a:0b:1a:98:3a:65:98:03:cc:fd:
         71:ba:a4:e9:18:0c:98:eb:05:16:48:c0:c1:fe:aa:c7:f1:c8:
         02:f2:e2:d3:ad:9a:b7:7c:c4:43:df:2a:e1:f2:2a:92:e6:5a:
         d2:c5:70:b9:21:d4:7a:83:6c:fc:ba:9a:2b:8e:03:db:67:ca:
         55:99:92:61:e7:df:18:24:af:78:11:17:17:3c:22:c0:4b:ee:
         98:de:eb:85:b6:5b:41:5d:f2:ec:19:aa:b9:29:86:f3:82:95:
         be:4e:ce:3f:11:3f:1a:a7:6b:84:d0:1a:b2:72:21:cb:0e:a4:
         94:05:fe:04:f2:39:4d:dd:91:79:02:59:b0:5d:5c:02:60:86:
         53:c9:ab:02:c6:58:ca:f2:5c:a6:b2:7d:3f:91:6f:7d:7f:ac:
         14:e7:8e:d1:d8:bc:02:31:f2:2a:54:23:b9:76:41:41:47:cc:
         05:cd:87:06:35:a3:c7:f5:65:98:91:75:6d:ce:d2:1c:50:29:
         08:8b:ad:f7:e0:13:76:5c:8e:d2:eb:27:72:1f:33:69:39:a7:
         3a:68:1d:46:57:20:c9:c1:dd:90:ec:19:c0:23:e0:09:c1:73:
         93:05:ad:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:38 2026 by rpki-client