Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/791E1D14836E11EEAD2B0731C4F9AE02.roa
File:                     791E1D14836E11EEAD2B0731C4F9AE02.roa (raw, json)
Hash identifier:          9nJcymyhJdyjosWxKF37Ye2GxMONKGYPO84iI01RFGA=
Subject key identifier:   27:FD:8E:12:F9:D7:64:D8:F9:E9:A9:CF:CD:6A:F5:0F:B1:5A:23:A7
Certificate issuer:       /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
Certificate serial:       01C3
Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/791E1D14836E11EEAD2B0731C4F9AE02.roa
Signing time:             Thu 19 Mar 2026 03:38:12 +0000
ROA not before:           Thu 19 Mar 2026 03:38:12 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     151833
IP address blocks:        203.223.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl
                          rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
        Validity
            Not Before: Mar 19 03:38:12 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69bb6fa4-a87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:2b:ff:fc:5f:33:cc:37:bd:0a:a9:98:64:
                    39:d5:cc:3a:7e:04:bc:3c:e6:98:7d:53:be:c6:94:
                    a9:75:3e:e8:df:70:14:98:54:db:9e:ea:0f:bf:0b:
                    c3:70:c3:fc:6c:0d:1f:2d:b5:51:d0:f3:b6:32:2f:
                    e6:95:ff:64:74:83:b6:23:39:2f:5c:c0:86:07:a8:
                    a4:34:b6:f2:51:b6:88:22:c9:87:f5:80:2a:43:e3:
                    17:42:4a:fa:45:57:e3:98:6a:9b:54:dc:24:1b:59:
                    1a:a9:7d:88:f2:0c:e9:e1:66:41:3c:14:e8:e8:db:
                    f9:0f:2f:90:7a:65:d1:5d:8c:09:5f:bf:86:f8:33:
                    d0:00:05:cf:b1:ba:1a:54:b5:c1:88:87:cb:58:5d:
                    15:23:f9:2c:8a:c1:be:21:93:29:5f:eb:94:e7:ff:
                    b4:60:84:43:ce:ad:63:46:f4:dd:5f:e5:8a:a6:f7:
                    7f:1b:92:08:07:fc:f6:31:cd:a0:f1:52:ac:d2:cd:
                    1d:4c:af:52:03:06:f0:95:95:fd:b5:a2:4a:fd:4c:
                    0a:4e:64:e9:17:6a:da:4d:7b:ed:8d:a9:4b:a4:a1:
                    ad:fd:61:44:93:36:30:fb:1d:1e:35:50:85:fd:88:
                    d6:98:d1:fd:ab:a5:54:e2:9a:6e:af:e5:ec:07:95:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FD:8E:12:F9:D7:64:D8:F9:E9:A9:CF:CD:6A:F5:0F:B1:5A:23:A7
            X509v3 Authority Key Identifier:
                keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/791E1D14836E11EEAD2B0731C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.223.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:17:d8:57:12:a1:45:64:6b:46:13:ee:f1:5d:7b:e8:c3:74:
         14:d0:3a:55:4b:0a:85:e1:35:1d:3e:64:ee:55:0d:4f:70:5f:
         95:8e:7b:88:7c:bc:5f:24:09:4c:5c:77:55:92:17:c0:ef:24:
         fc:87:6b:4a:2c:74:2f:51:31:a0:0d:db:9d:5d:41:cb:b1:52:
         7c:4f:2b:bc:95:08:1e:e1:c2:f2:21:f3:0d:e8:39:6f:fc:89:
         f5:39:f1:a3:b1:de:07:a0:f0:1e:1d:6d:e9:5a:07:df:67:f9:
         54:2b:17:01:5b:22:98:7b:bd:6e:af:1b:5d:12:bb:78:5f:59:
         f7:14:f1:04:94:52:b5:0d:46:38:4c:02:99:89:93:d6:af:f8:
         96:25:34:44:b8:a2:d4:98:8f:46:cc:f9:f5:74:92:31:31:46:
         54:0b:8a:0e:a7:e7:3a:9e:5e:1e:fe:59:c7:38:13:8c:36:8d:
         78:eb:66:88:e0:11:88:6d:9b:36:0b:cf:de:18:de:2b:ab:e1:
         f6:42:07:02:c5:1f:b8:bc:15:15:91:b8:44:9b:68:72:0b:28:
         ba:99:40:4f:0b:b6:65:10:a1:44:a6:d2:28:bb:57:27:70:31:
         63:22:d4:c6:7f:c2:06:3e:89:9a:69:30:31:5e:17:de:7d:8f:
         4a:d1:fe:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:26:07 2026 by rpki-client