Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/30C10672A27411E68C8EC670C4F9AE02.roa
File:                     30C10672A27411E68C8EC670C4F9AE02.roa (raw, json)
Hash identifier:          IKHns3xQAZ8SnBrGXzDPofmrZ5cCEzhZkFjsuZiPsNI=
Subject key identifier:   81:53:9D:F9:7D:69:5A:F9:BA:08:1C:81:9D:5A:6A:A5:68:8D:6F:17
Certificate issuer:       /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Certificate serial:       1E46
Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/30C10672A27411E68C8EC670C4F9AE02.roa
Signing time:             Tue 10 Feb 2026 16:13:31 +0000
ROA not before:           Tue 10 Feb 2026 16:13:31 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     38193
IP address blocks:        203.170.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
                          rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7750 (0x1e46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
        Validity
            Not Before: Feb 10 16:13:31 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698b592a-1c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:27:8d:ad:1c:d9:3d:90:6e:91:04:82:02:
                    57:1b:2d:ff:1b:8f:c9:ff:4f:86:83:72:56:8d:e8:
                    86:08:7a:9d:f3:9f:c4:e4:5f:6f:34:8f:f5:11:54:
                    31:d7:8f:b4:0b:cc:66:20:08:93:b6:62:6b:5c:02:
                    18:0b:2f:96:50:44:18:81:03:90:fc:33:2d:83:c5:
                    03:a6:93:3b:02:96:3b:d5:af:4b:69:f1:e3:85:53:
                    98:0f:9d:67:55:d4:04:d2:18:a8:01:90:16:c3:56:
                    eb:ec:73:18:a6:23:aa:99:1f:fa:34:d2:ed:d7:d8:
                    ad:16:8d:a3:41:c5:6b:7c:4b:f5:c3:43:7f:a4:65:
                    4e:89:99:60:d8:86:b0:eb:e0:6d:ec:21:76:60:ff:
                    36:56:d5:f5:15:cf:e4:46:34:cc:d4:9f:b6:15:40:
                    32:a6:27:cc:ea:e2:62:93:2c:93:7c:7a:c6:21:1b:
                    90:30:67:c3:8c:6f:cb:92:1e:80:ab:8e:36:a9:e4:
                    dc:4a:1a:99:56:f6:65:75:39:62:d0:b2:73:29:dd:
                    44:8b:70:bd:89:6e:be:af:e5:2a:5b:23:0c:b6:31:
                    f3:1f:aa:03:3c:68:e2:cf:eb:5c:68:9e:22:f8:70:
                    42:fb:23:5c:c2:6a:b5:64:17:d8:ab:28:03:3e:7e:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:53:9D:F9:7D:69:5A:F9:BA:08:1C:81:9D:5A:6A:A5:68:8D:6F:17
            X509v3 Authority Key Identifier:
                keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/30C10672A27411E68C8EC670C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.170.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:60:11:98:de:68:54:2f:73:3e:42:d7:b5:bf:3d:d4:dc:bd:
         4e:4a:d1:5d:36:54:62:cb:55:ec:30:93:8d:e2:19:32:9e:06:
         6a:88:46:03:2c:74:de:d2:2e:4e:56:f0:e9:1b:c7:55:a1:27:
         52:6c:47:90:69:dc:e5:45:d8:19:83:d2:40:d6:a2:15:7c:e2:
         a3:cf:e4:c7:66:47:8a:83:bb:0a:52:8d:26:d3:2c:cb:c0:5d:
         5d:05:08:b0:17:d8:16:85:7e:2e:0d:67:9c:c2:86:50:9a:df:
         b9:3f:68:77:cb:04:5d:dc:f5:c7:d8:07:00:07:cb:dc:e8:47:
         0e:97:35:da:a9:64:d0:56:e9:77:7a:f5:a0:59:96:69:60:8f:
         87:12:ef:9c:f8:f1:58:9c:f5:09:f4:c6:c1:a5:cc:53:4d:72:
         97:19:be:b8:9f:52:50:c0:b5:6b:34:cc:9b:46:b0:71:5c:22:
         92:f8:17:03:6b:e0:fb:5c:73:fe:12:f0:3b:a2:a1:32:3f:35:
         9f:ac:3b:b6:9f:2e:9e:a6:a7:93:64:c8:ca:ed:b6:c0:42:08:
         a3:ac:11:a7:75:21:10:3f:a6:bb:56:ad:e9:dc:21:54:2d:dd:
         d5:36:50:84:6d:55:bf:3e:3f:33:3c:7c:22:89:0a:00:e4:46:
         04:29:a1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:28:42 2026 by rpki-client