Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/84365644062E11EDA95B3143C4F9AE02.roa
File:                     84365644062E11EDA95B3143C4F9AE02.roa (raw, json)
Hash identifier:          gqN7UWMyX0CPgI9L0kIUiJFyQbeTEOCGXadnvfS1PPo=
Subject key identifier:   36:E0:CC:CC:6B:58:00:C7:57:B1:4A:51:36:04:09:38:9F:72:AE:60
Certificate issuer:       /CN=A91F65FA/serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5
Certificate serial:       0320
Authority key identifier: 50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/84365644062E11EDA95B3143C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:53:04 +0000
ROA not before:           Thu 15 Jan 2026 00:20:30 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     56132
IP address blocks:        203.0.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl
                          rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F65FA, serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5
        Validity
            Not Before: Jan 15 00:20:30 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a436b0-aca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:47:86:dd:df:19:76:f5:30:f3:9b:e8:bf:fd:
                    8c:b6:5f:98:89:57:c9:e7:70:a3:7c:7b:05:4b:47:
                    41:e3:88:70:09:a8:ea:4c:85:a2:4f:e8:0b:43:b7:
                    83:08:49:3f:d6:7c:e8:f5:80:5e:ce:eb:a1:a3:1e:
                    88:c6:ad:6e:06:53:87:b8:2c:38:2b:8b:07:b9:fb:
                    b3:c7:d9:c4:43:b7:2d:10:20:d5:ce:c0:48:a0:0c:
                    be:4b:d6:d7:32:18:ab:f9:e7:15:ec:80:21:3c:f0:
                    af:ad:69:bc:60:16:c8:20:8a:4b:6b:35:a4:35:45:
                    05:ed:ba:a7:4c:0f:90:68:e9:b3:7d:3d:8b:01:7c:
                    a5:79:7e:6a:62:99:8c:23:0a:07:ba:d9:95:fd:9c:
                    8e:90:e9:28:6c:c5:22:06:42:f1:49:b0:20:57:21:
                    a6:75:7c:30:21:8b:da:ae:11:d9:15:0d:41:71:1f:
                    5b:ce:04:0f:e0:dc:0b:1e:55:b4:a1:3f:db:30:d2:
                    5e:27:66:31:89:4f:07:54:71:70:f8:72:8d:02:39:
                    64:b5:3c:54:00:ca:04:94:2d:2b:c4:db:44:73:be:
                    f2:8d:54:05:ee:50:a8:8e:2e:1f:65:ea:b0:09:a6:
                    1f:ba:15:c2:ea:d8:d7:a0:a1:12:f8:14:21:58:4a:
                    e8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E0:CC:CC:6B:58:00:C7:57:B1:4A:51:36:04:09:38:9F:72:AE:60
            X509v3 Authority Key Identifier:
                keyid:50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/84365644062E11EDA95B3143C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.0.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:f4:63:38:65:cc:12:30:1a:43:3b:e7:4e:40:76:48:ca:fd:
         dc:b8:22:df:b0:c7:e7:ad:90:cf:9e:fe:ca:07:4c:78:8c:19:
         f1:75:1d:54:03:1d:50:cd:88:0e:29:fe:6d:35:79:54:40:6e:
         61:e2:6c:59:b9:25:6b:f3:28:03:b5:20:de:0f:05:82:81:c7:
         46:a1:5f:b0:e6:02:da:36:03:ee:fe:2d:c0:be:f5:23:71:a5:
         af:f3:20:05:52:6f:a0:3c:7f:98:93:33:c6:ff:d2:a7:b9:bd:
         e7:d8:46:a0:ed:ba:1e:51:71:cd:ca:91:1b:be:0f:5f:b9:2b:
         cb:35:f6:18:d5:02:5b:f6:eb:fc:91:e9:c0:c5:9d:69:16:61:
         a9:0a:60:42:6e:03:4e:07:54:27:2b:38:98:b8:ff:28:1c:a9:
         5a:c9:b5:8b:47:45:be:02:ee:02:69:93:37:b2:a0:57:83:ac:
         29:d7:16:19:ee:43:2c:c8:2b:68:53:5b:1a:bd:ba:60:77:87:
         e4:29:e7:ae:34:85:c0:9a:a3:eb:c4:04:67:ab:c3:3c:05:34:
         d1:62:b4:bb:4e:2b:1d:d8:22:2d:4f:60:ca:e4:07:60:19:13:
         78:27:87:bd:5a:2e:d3:f3:b9:53:85:ce:d3:1c:ce:f8:1d:46:
         0a:67:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:32 2026 by rpki-client