Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
File:                     FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (raw, json)
Hash identifier:          nyjMQ4Y7DB/tIj8XNqvBhuvlZj0Lq52QsaNMK9E+R5Y=
Subject key identifier:   82:D7:B7:2E:F4:7D:BA:DE:58:9F:25:17:EA:C9:A0:7A:A3:4A:C1:14
Certificate issuer:       /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Certificate serial:       0197
Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:09:55 +0000
ROA not before:           Sat 13 Dec 2025 03:42:58 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152153
IP address blocks:        113.192.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
                          rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
        Validity
            Not Before: Dec 13 03:42:58 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a456c3-8119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7d:19:eb:13:8a:42:62:cb:b2:cd:b1:66:ca:
                    30:07:6e:2e:ff:ac:f0:f3:62:6a:b7:5d:10:46:3d:
                    76:5e:19:01:ff:d9:c4:7f:6a:5b:f1:62:1e:6f:1b:
                    77:4e:b9:7e:63:c5:4a:78:54:47:52:05:ba:39:54:
                    20:b1:1b:f5:79:2e:4f:7a:48:92:b0:75:07:9f:3e:
                    7f:ae:3c:94:86:c3:3d:cf:1d:cc:00:18:0b:fd:b1:
                    01:8d:04:4f:35:64:7f:ce:75:34:b8:28:6b:e0:89:
                    d4:6d:06:d7:54:ee:81:9c:d7:ce:d5:25:c4:33:d7:
                    28:52:e0:f3:90:bc:9a:b9:a2:ef:47:4a:9b:7e:34:
                    cf:26:4d:94:8a:08:97:52:2a:4e:9b:a2:a8:a7:40:
                    a3:0b:fa:17:3c:7b:fa:56:33:1a:15:f5:b3:85:da:
                    78:6f:05:d2:b7:38:49:3a:56:03:09:2f:20:3c:0f:
                    fc:1f:0b:b9:28:36:fd:89:8a:81:25:79:23:c6:6a:
                    9d:46:5a:3b:8b:f5:71:89:71:7b:6f:c2:05:e9:86:
                    14:fe:5e:d8:fa:89:71:7a:c2:4f:9d:73:f7:09:d1:
                    b8:26:07:e6:74:2e:d8:44:6d:9a:25:4d:46:bd:97:
                    8c:ca:58:10:7e:d6:d4:e5:23:f4:56:f8:46:64:f4:
                    01:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D7:B7:2E:F4:7D:BA:DE:58:9F:25:17:EA:C9:A0:7A:A3:4A:C1:14
            X509v3 Authority Key Identifier:
                keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/FE9EA8D4B67A11EEB24FA643C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:56:a3:09:14:26:eb:18:07:17:8d:07:fb:0d:08:ea:cb:b4:
         ff:3e:57:d0:d3:c9:4e:23:70:e7:fe:f9:44:c2:a2:74:ef:c1:
         27:db:77:f1:64:72:bd:66:c5:09:62:f0:cc:fc:3c:8a:29:fa:
         3d:17:c4:ac:9e:ba:1e:63:6e:b8:d2:80:7d:38:84:d1:8c:db:
         6a:f7:8e:e2:d3:4e:94:1d:9f:a5:ac:72:38:e9:65:18:c9:7c:
         0b:94:10:c1:06:b7:a6:67:52:cd:4f:43:41:0d:10:ec:15:5c:
         03:6e:d8:43:f2:50:e4:d6:4c:4b:0c:50:c6:46:6c:dc:a4:f4:
         f9:fe:86:34:50:fc:9a:2c:d7:3e:33:fb:d3:0f:c4:5e:68:c6:
         1c:13:e3:60:3f:a9:ac:ed:3e:f3:9a:72:20:6f:36:e3:a6:f2:
         30:0f:51:6d:14:64:07:96:65:6b:2f:0a:e4:9b:c6:79:a0:07:
         8b:46:4a:9d:31:68:87:cd:35:67:11:e4:3d:6b:32:c9:81:fd:
         8c:d1:74:ce:09:8e:c5:da:d1:20:98:50:62:18:8e:1c:9a:de:
         86:78:9b:68:4f:44:e4:a8:05:74:05:d1:ec:a5:5b:3c:7e:9a:
         cd:91:21:04:83:13:1d:a1:2c:65:46:71:ab:da:e7:68:61:83:
         f3:54:70:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:37 2026 by rpki-client