Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/7B9AF6D818F111F0A3CFBB17C4F9AE02.roa
File:                     7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (raw, json)
Hash identifier:          nktDe11gvsE65ib6LZ/T7Xnz69olIOKlmlIRE0LDOww=
Subject key identifier:   5D:6C:EF:20:FC:6F:D4:65:AD:FA:21:BD:70:76:71:9E:8F:37:56:23
Certificate issuer:       /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial:       02CD
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/7B9AF6D818F111F0A3CFBB17C4F9AE02.roa
Signing time:             Tue 03 Feb 2026 01:21:19 +0000
ROA not before:           Tue 03 Feb 2026 01:21:19 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     139358
IP address blocks:        115.42.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
        Validity
            Not Before: Feb  3 01:21:19 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69814d8f-961b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:36:8a:cf:03:ce:1f:3a:80:78:b9:6a:b9:
                    a3:24:05:ab:36:dc:13:25:43:d4:80:6c:2e:4a:ca:
                    d2:6c:a4:3f:1e:f2:30:f0:05:da:5e:6c:ed:49:4f:
                    e2:b1:54:0a:12:f4:4c:12:04:aa:1d:fd:99:cc:4a:
                    82:26:af:ab:df:99:8f:10:84:6a:9f:86:c2:e3:2c:
                    9b:1c:90:23:b7:a2:f1:3e:3b:63:cb:4e:c5:1d:31:
                    2a:9a:9b:09:17:5c:8b:f2:fa:e1:3b:0c:a2:40:99:
                    08:6e:41:f3:14:cc:07:1e:86:80:92:cf:ea:90:89:
                    12:b4:1c:c4:11:6c:6f:d3:dc:da:fd:f5:b1:b4:87:
                    76:c7:f8:23:2e:d0:88:41:fd:3e:b9:05:a9:42:bd:
                    94:be:45:fe:6d:fe:70:4c:3f:1e:9b:6d:22:26:5d:
                    4c:d8:1d:bc:bd:37:7c:fb:9c:01:77:2f:1a:c6:c7:
                    6e:84:ac:6f:22:8c:ae:79:ce:ce:82:c0:08:c9:91:
                    43:8d:6f:2b:08:dc:aa:7c:a0:5b:78:6d:4a:ae:ad:
                    72:4c:57:04:71:80:91:64:01:69:3b:f6:dc:9e:20:
                    4c:e3:fb:15:f2:0b:2b:1a:95:9b:4b:70:83:85:3d:
                    ba:85:8c:92:9e:97:be:65:a4:6b:58:08:10:9b:d2:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6C:EF:20:FC:6F:D4:65:AD:FA:21:BD:70:76:71:9E:8F:37:56:23
            X509v3 Authority Key Identifier:
                keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/7B9AF6D818F111F0A3CFBB17C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:3a:32:dd:5d:cb:d9:a1:43:a9:70:32:6f:ba:8e:67:5f:42:
         5d:a7:da:d8:22:5f:70:88:f6:83:df:a9:8b:68:4a:2b:dc:16:
         05:3b:f8:f7:51:e8:9e:d4:36:99:93:61:02:33:06:8d:1a:b1:
         35:79:27:4f:32:32:e0:97:23:0d:f1:9f:bb:b6:2c:85:14:e0:
         1e:ce:a2:1d:af:7b:c1:62:1f:3a:c1:11:d2:6c:e0:7c:c3:68:
         9c:c8:38:36:1b:fe:71:64:99:2b:88:7f:1b:7a:06:c3:d6:86:
         fc:7b:57:72:0c:46:31:d8:7b:5d:92:db:a8:ca:18:5a:c4:8e:
         eb:36:cc:6a:e9:79:6d:2e:55:21:aa:97:ac:e4:68:d6:15:15:
         00:84:46:e2:25:65:11:f1:b7:bd:60:10:d5:ad:9b:7c:00:61:
         42:05:06:44:42:d2:8f:1c:91:0a:e7:bd:86:d3:e3:cb:47:a5:
         ba:6c:3d:35:82:56:5e:d7:ef:63:49:ef:7e:ab:0a:5b:e2:4a:
         91:04:8c:ea:04:b4:ea:50:a5:5c:d6:4c:3c:48:05:42:33:7a:
         65:2f:b4:fd:d3:1a:93:19:43:53:26:ea:78:3f:c9:8b:12:fe:
         65:13:d3:dc:73:dc:9e:5b:d0:a4:15:55:9c:95:e9:e7:de:5a:
         42:39:4b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:26 2026 by rpki-client