Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa
File:                     F7078BC4B73511EF8537DE81C4F9AE02.roa (raw, json)
Hash identifier:          ELSCQeg8vAjoGa+YuoCg81QSPxFqbBa/wXiWfauErKA=
Subject key identifier:   FE:AF:EE:6B:AC:00:BB:15:E4:01:14:EC:E0:71:73:4A:11:8A:36:86
Certificate issuer:       /CN=A91394E7/serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
Certificate serial:       F7
Authority key identifier: 89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:20:28 +0000
ROA not before:           Sat 25 Oct 2025 10:20:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     23921
IP address blocks:        202.38.157.0/24 maxlen: 24
                          203.31.183.0/24 maxlen: 24
                          203.92.27.0/24 maxlen: 24
                          203.190.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl
                          rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91394E7, serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
        Validity
            Not Before: Oct 25 10:20:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a58e9c-b847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:5a:d3:08:7d:a9:e4:09:3c:3f:64:66:47:
                    80:4b:c8:63:ef:02:ef:0d:69:b9:a6:99:f4:8b:f3:
                    12:f5:1d:6f:91:b7:6a:e0:cb:25:46:44:b3:7b:54:
                    59:e4:06:45:fe:42:56:f7:03:76:c1:ba:05:5f:11:
                    29:b3:e0:43:56:d8:37:f4:46:c1:f6:97:c9:44:bb:
                    df:b9:42:40:5c:37:f5:e1:c3:53:c9:77:b2:31:de:
                    de:95:80:02:d0:76:13:be:d4:8e:f8:5d:c8:6b:e0:
                    98:2c:a2:0b:ce:28:77:31:a8:32:54:08:cf:93:54:
                    16:c6:ac:62:59:98:1d:07:5e:bb:50:a2:ac:01:29:
                    47:bb:e3:08:f3:07:d8:1b:a5:97:5d:57:9d:27:45:
                    7b:ae:7b:59:9c:2e:20:8d:d9:81:49:a4:50:16:ee:
                    82:a8:6f:de:0f:cb:0e:c5:88:d8:a3:e7:b9:42:d5:
                    47:8e:22:b2:7e:0e:39:5d:17:3c:4a:17:70:a5:18:
                    db:8d:26:6c:56:95:7e:1d:75:24:ad:7b:4a:44:20:
                    0b:40:b8:28:85:68:71:73:2e:e3:42:c9:36:dd:83:
                    33:02:78:9a:7e:52:8b:89:67:cf:48:d5:15:99:b0:
                    33:41:15:45:b6:20:fc:db:4f:97:c3:0a:07:3c:7d:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AF:EE:6B:AC:00:BB:15:E4:01:14:EC:E0:71:73:4A:11:8A:36:86
            X509v3 Authority Key Identifier:
                keyid:89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.38.157.0/24
                  203.31.183.0/24
                  203.92.27.0/24
                  203.190.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:07:4d:bb:c5:29:52:24:21:47:e2:34:3a:f3:be:ab:cb:30:
         5c:fd:df:a9:9a:27:62:95:42:cd:fe:ac:21:c0:0b:4b:42:e2:
         80:be:dc:be:97:93:42:06:17:5f:66:9b:9e:d9:b3:54:a4:9d:
         4d:91:f9:f0:a0:9f:fb:54:ab:43:21:62:47:cd:64:bf:86:f3:
         ec:8f:fd:b1:ff:20:0f:a3:52:56:b9:23:c6:de:54:34:7b:41:
         48:2e:a8:86:fa:8c:e9:93:af:06:ed:97:e0:92:12:66:db:d1:
         0a:fd:d9:3c:7b:71:81:79:60:b4:43:2a:74:af:cf:d8:fb:86:
         9d:bc:38:83:bd:73:b3:77:7f:73:68:40:23:47:4c:6c:c4:dd:
         6b:02:bd:24:a7:f4:8c:4a:32:1a:2f:da:25:0e:ef:09:61:b9:
         bd:8f:6f:30:99:4f:c9:bd:ed:d2:dd:d8:5b:1b:d0:ab:36:27:
         37:80:19:ac:57:a9:85:ba:04:a2:66:ed:1d:ed:25:b7:b6:66:
         16:c0:17:2d:cb:ef:bb:0c:79:96:db:cc:38:6e:ab:72:77:13:
         6d:09:98:90:07:c2:09:55:db:10:21:a3:fe:c7:87:ef:86:75:
         d1:44:77:9e:90:c8:1f:87:12:3f:60:71:8e:7f:1c:54:84:bf:
         40:62:39:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:36 2026 by rpki-client