Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/B69D3A2A8AA711EB876EF84BC4F9AE02.roa
File:                     B69D3A2A8AA711EB876EF84BC4F9AE02.roa (raw, json)
Hash identifier:          liqudEt944TPxlO6q13NxIFzhm26td/UszwH+GlqOU0=
Subject key identifier:   91:DE:C8:DF:6D:BE:DB:90:C0:58:A2:DD:18:D7:6B:7E:52:7C:E7:0E
Certificate issuer:       /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
Certificate serial:       0CE7
Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/B69D3A2A8AA711EB876EF84BC4F9AE02.roa
Signing time:             Tue 14 Apr 2026 18:23:23 +0000
ROA not before:           Tue 14 Apr 2026 18:23:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        203.2.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl
                          rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3303 (0xce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
        Validity
            Not Before: Apr 14 18:23:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69de861a-7584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:d0:41:60:1b:bc:3a:67:1c:39:19:28:aa:
                    ae:26:f7:a9:da:7c:a4:8f:b0:50:66:49:3b:38:8a:
                    05:f9:66:94:3f:7c:63:39:75:56:51:c4:4d:75:63:
                    08:12:ec:04:b8:78:b1:20:32:13:bb:f4:39:57:1e:
                    6e:4d:78:d8:0e:6a:ac:7a:dd:91:c8:0e:a5:ec:ca:
                    b8:9b:0e:e4:df:10:d0:6e:bf:59:60:73:bd:64:01:
                    5c:0e:be:fe:e2:c1:4d:49:41:3f:b1:93:c3:9f:25:
                    35:b0:1f:16:d9:65:6c:9a:7c:34:14:f6:22:3a:90:
                    4c:45:ba:c6:83:cc:18:98:f1:00:71:54:2b:97:89:
                    1f:7d:29:cb:82:36:83:25:b6:0c:f9:e8:32:33:18:
                    4f:ca:9b:c4:61:0d:dd:ca:98:6e:3b:60:ce:31:00:
                    51:96:ad:1e:f9:90:a7:80:e0:8d:93:52:04:db:fc:
                    36:68:63:82:7a:a4:27:df:dc:d5:83:4a:2f:a0:2c:
                    9c:18:5f:cd:7f:22:fa:8f:7f:f6:71:9d:85:9f:fd:
                    81:01:2c:4a:99:82:1f:c3:a2:d9:31:8d:da:b4:ae:
                    69:84:1c:e1:e8:2b:0f:a1:9a:94:fb:ad:f0:aa:d8:
                    23:ca:67:1e:a0:65:8d:e0:70:0d:47:57:87:11:57:
                    4c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DE:C8:DF:6D:BE:DB:90:C0:58:A2:DD:18:D7:6B:7E:52:7C:E7:0E
            X509v3 Authority Key Identifier:
                keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/B69D3A2A8AA711EB876EF84BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.2.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:65:8b:e7:dd:cc:f2:fb:e6:00:ca:99:43:e3:19:24:97:6e:
         48:15:98:2b:0a:f5:0f:24:ea:80:18:5c:0f:6b:ce:b8:c5:33:
         2e:75:d3:46:49:0b:d2:45:4a:0b:18:1b:c7:1d:3b:47:d4:9a:
         43:3b:34:7c:f3:d1:8d:bb:0d:ce:ff:29:0b:71:4e:54:24:37:
         a6:98:eb:ae:76:e0:44:6f:80:9b:71:66:32:d6:0f:4b:d6:e4:
         c2:c5:5e:02:ab:8d:c0:2c:f7:56:5a:06:d4:1f:f6:92:6c:18:
         b0:e6:0c:13:e7:d7:d1:d4:40:53:7f:5e:df:92:02:f9:06:ec:
         3f:88:25:f9:ef:f2:ae:66:8a:69:91:e2:d2:b8:92:67:eb:c0:
         78:c8:d4:1a:38:8c:30:39:63:bc:c4:c7:61:ac:ef:b6:74:6a:
         87:94:55:5b:1d:f4:eb:9e:b8:b0:ed:0c:6f:61:6d:ef:36:ce:
         d1:c7:01:e1:b6:ab:dc:ab:d7:cf:3c:14:8b:4a:48:6f:cd:69:
         41:e9:12:63:6a:70:24:7c:49:a0:27:bd:2f:1d:8f:8f:ee:fc:
         1c:c6:2c:f8:3c:a2:e9:81:80:9d:23:60:04:35:b0:e5:80:8e:
         f3:99:c8:74:9d:6e:6c:1a:c3:52:7a:92:86:bd:4d:da:b1:77:
         9b:84:0d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:39 2026 by rpki-client