Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/77490C9A792F11EEBF849942C4F9AE02.roa
File:                     77490C9A792F11EEBF849942C4F9AE02.roa (raw, json)
Hash identifier:          MpcjQVs1Jc1cjgEQDQ1xjrNe8yr/lbGI3mI0RqgvaQ8=
Subject key identifier:   41:E0:BC:CA:66:0B:60:F9:C9:05:B6:3D:3E:1A:A8:51:F2:8A:29:63
Certificate issuer:       /CN=A911F316/serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
Certificate serial:       0270
Authority key identifier: D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/77490C9A792F11EEBF849942C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 02:35:50 +0000
ROA not before:           Tue 03 Mar 2026 02:35:50 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     132292
IP address blocks:        203.7.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl
                          rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F316, serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
        Validity
            Not Before: Mar  3 02:35:50 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a64905-59ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:89:31:fc:f9:4d:32:47:cb:1c:98:68:d7:2e:
                    66:8e:55:9d:2f:a6:10:cb:24:0b:cb:a4:d5:83:8a:
                    ba:08:b4:47:67:86:21:d2:ee:f8:7e:f7:0e:75:46:
                    19:5b:d2:63:4b:ac:ae:14:9c:34:47:37:fb:1d:93:
                    cb:b2:87:2e:2a:21:fb:e2:ea:ba:92:60:23:f7:4f:
                    6c:02:74:d3:87:be:55:5b:64:65:9b:8b:8e:d1:bf:
                    94:e1:18:04:bd:a0:1e:0e:fd:4d:1d:e5:37:ac:cf:
                    38:2e:03:66:34:ab:45:d2:bb:53:5a:56:0b:37:6b:
                    1b:77:bd:5b:0e:0c:33:c5:fe:32:df:50:1a:ef:7e:
                    7d:7b:78:fe:4e:ac:7f:fa:92:90:b6:4d:bd:d1:7a:
                    d0:90:58:2b:d7:cd:b7:77:49:db:5e:a7:88:f8:fe:
                    ee:36:8f:f4:6f:87:60:8a:99:82:e7:68:3c:9e:45:
                    ae:ee:20:8a:1d:14:45:64:00:a1:57:7e:94:89:9c:
                    56:62:f6:df:78:6d:31:31:1a:03:63:a4:a5:ba:bc:
                    99:a2:db:43:5d:7b:c0:0a:b8:23:24:56:2c:11:7f:
                    b8:2e:87:6b:37:88:90:93:c9:fa:fe:2d:02:6d:e8:
                    ab:58:cb:a9:d2:27:93:e4:22:a6:b7:16:15:af:32:
                    d9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E0:BC:CA:66:0B:60:F9:C9:05:B6:3D:3E:1A:A8:51:F2:8A:29:63
            X509v3 Authority Key Identifier:
                keyid:D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/77490C9A792F11EEBF849942C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.7.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:b6:65:49:b8:71:09:eb:20:cb:5d:f7:f5:1a:8c:b9:ad:7d:
         78:76:18:db:7d:42:77:4b:a9:89:bd:61:56:b6:00:36:50:ab:
         5a:5f:6f:d1:6c:43:41:2b:97:52:2b:65:1b:fa:6c:05:3e:b6:
         0c:a5:8c:38:29:74:90:3b:d7:b9:3c:b6:7b:51:ba:fa:5d:7e:
         ff:f5:e2:b7:df:f9:a0:ad:de:c1:21:af:8e:d7:5c:d3:3d:2c:
         6c:87:94:57:8f:11:74:07:d6:15:b5:f0:8c:c5:33:b4:0a:0f:
         46:ea:2b:e5:08:b2:e2:62:6e:76:7b:b6:24:13:7d:c6:4c:71:
         e7:2d:65:af:f4:b5:e9:4a:2a:3d:9e:0d:c0:2e:87:09:c2:27:
         4f:cc:6f:49:e0:f3:bd:d6:c4:97:10:b2:30:07:ed:32:87:87:
         cb:04:98:08:27:b7:f8:41:17:a4:22:fe:5d:4a:8e:e9:c2:3b:
         b3:07:13:97:4c:55:72:0c:9e:15:17:ad:21:5f:9d:18:64:1e:
         5d:36:71:12:f6:fa:1c:f6:53:78:0e:0f:4e:07:bf:c4:a5:34:
         99:6e:0a:3e:b9:7c:c4:bb:18:c9:fc:12:52:06:e8:6b:79:31:
         f3:92:91:a9:5c:43:da:c7:32:b7:bf:12:94:62:c4:72:93:18:
         71:db:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:25:21 2026 by rpki-client