Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/85035A64F0CD11EE8CC1FC16C4F9AE02.roa
File:                     85035A64F0CD11EE8CC1FC16C4F9AE02.roa (raw, json)
Hash identifier:          dxzq0VMZkiHTUy7wFisGlDEOiXs1C7Sc/wLnWHN/fu0=
Subject key identifier:   B7:6E:95:48:9B:63:85:B4:82:77:35:47:80:54:1D:1F:2F:D0:CB:25
Certificate issuer:       /CN=A91232C2/serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36
Certificate serial:       0166
Authority key identifier: 6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/85035A64F0CD11EE8CC1FC16C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:06:26 +0000
ROA not before:           Fri 09 May 2025 05:16:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     55482
IP address blocks:        203.32.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl
                          rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91232C2, serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36
        Validity
            Not Before: May  9 05:16:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a5a772-8a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:10:20:6b:ea:18:e4:ba:58:d7:f4:44:e0:82:
                    5e:31:96:24:8d:9c:5d:88:84:82:2f:03:8f:90:db:
                    97:09:60:2e:1b:a4:88:88:73:b9:b5:35:20:36:c5:
                    31:9b:a6:09:d0:9e:87:74:e7:15:22:89:ed:cf:e8:
                    a1:01:47:da:fc:bf:44:f8:c5:cc:b3:2f:57:53:9b:
                    30:3a:0b:0a:3e:0d:d0:3c:03:09:c4:6e:ca:4f:0a:
                    f6:a6:41:3b:dd:3c:c4:64:b5:33:21:61:18:19:31:
                    8a:2e:f7:57:3e:41:55:c8:a4:56:e5:55:fb:e4:74:
                    ac:70:f3:7c:6b:3f:fc:ac:23:74:df:ce:e1:d9:96:
                    a0:5e:72:2e:d0:cd:ae:b7:2f:af:70:e5:39:e9:cf:
                    3d:a8:20:36:91:ee:12:1e:95:eb:9d:60:3c:9e:30:
                    92:78:99:b0:65:ce:83:bb:f9:83:87:18:a8:8a:14:
                    90:eb:d2:e4:79:aa:37:7d:7d:15:c8:06:f1:86:6a:
                    cb:ab:87:b8:d8:39:d4:10:c7:50:65:88:b0:3d:6c:
                    b5:a4:54:92:47:f5:bd:9b:f5:ed:db:92:74:92:e3:
                    8e:08:32:f7:e2:0c:1d:a7:c7:4c:cd:72:b6:60:58:
                    9b:88:2b:5a:1c:ea:39:8f:f0:d6:32:f3:9d:ab:b4:
                    90:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6E:95:48:9B:63:85:B4:82:77:35:47:80:54:1D:1F:2F:D0:CB:25
            X509v3 Authority Key Identifier:
                keyid:6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/85035A64F0CD11EE8CC1FC16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:21:3a:86:8a:43:73:1b:1f:2b:e2:ea:c8:ec:ba:25:f3:e5:
         ec:92:76:25:d3:02:a9:7d:6e:d3:cd:96:16:eb:32:9c:8f:7c:
         3b:96:cc:6b:f3:f7:b2:60:e6:64:4f:55:2e:da:2d:8c:84:22:
         13:21:88:79:e8:69:0a:ee:ed:eb:ad:c9:a4:ff:c5:f2:9f:42:
         a7:24:68:a9:57:62:8e:c3:d2:58:e0:9b:76:1f:69:ad:1b:9c:
         d9:e7:0d:8e:56:6b:1c:dd:cc:8e:43:9a:b1:e0:ef:85:68:40:
         e8:bb:c1:49:ac:2b:f3:50:4f:ee:c0:6f:ed:1b:db:19:dd:71:
         34:5f:66:8b:0e:99:86:2b:bf:16:75:fe:cd:21:c0:b5:6d:c7:
         67:dd:2c:8d:74:83:c1:ed:3a:b1:05:a2:b4:ad:30:99:c4:c9:
         17:04:dc:53:33:01:4d:a3:0e:cd:30:c6:7c:2f:1e:be:89:02:
         6f:58:96:a7:9d:dc:26:26:d4:0a:7a:95:25:72:82:98:38:2e:
         ad:d2:9d:c1:b5:53:06:9b:93:21:74:6d:74:3a:ab:f9:9f:f2:
         fc:0d:8f:07:6d:6b:00:f1:39:5e:08:09:2f:90:84:a0:ae:b1:
         34:d2:3d:55:ac:8f:99:3a:2b:43:7b:e8:b2:31:d7:84:99:22:
         e2:f6:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:51 2026 by rpki-client