Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/593888C40AB811EE97CC7A32C4F9AE02.roa
File:                     593888C40AB811EE97CC7A32C4F9AE02.roa (raw, json)
Hash identifier:          jKf/2MU5Ip9D+4pRX+4cB+cT7JgiaWNbV4ALOM87qH4=
Subject key identifier:   CC:95:0F:D8:D6:5E:B9:28:9D:76:2F:E7:A2:A8:D7:B0:E6:4C:82:41
Certificate issuer:       /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Certificate serial:       020A
Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/593888C40AB811EE97CC7A32C4F9AE02.roa
Signing time:             Tue 17 Mar 2026 02:36:57 +0000
ROA not before:           Tue 17 Mar 2026 02:36:56 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     53871
IP address blocks:        203.28.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
                          rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
        Validity
            Not Before: Mar 17 02:36:56 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b8be48-0224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:c6:6c:a5:18:8f:ee:09:07:ea:67:ca:19:
                    93:66:2f:7d:7e:9a:a5:49:6c:6d:a2:09:51:1e:99:
                    b7:71:c1:01:08:08:44:d4:ff:be:41:a2:f4:5a:5d:
                    66:01:53:db:97:4f:94:0c:08:8b:76:de:76:2b:75:
                    da:37:42:96:c5:c9:cf:67:08:ed:ae:77:33:f3:2b:
                    70:27:c0:b9:9c:ab:49:5f:77:30:bb:43:5e:04:e6:
                    1f:66:c3:35:bf:6d:fc:55:20:e2:07:e3:f9:5c:b2:
                    5a:d9:90:cf:58:82:f3:90:94:11:54:d3:27:cc:53:
                    19:67:18:a7:3c:e4:b9:1a:73:f1:94:94:d6:16:93:
                    3d:07:7c:ba:f1:28:2d:ea:8a:e0:32:f1:11:f7:92:
                    bc:2e:ec:eb:47:94:d4:8c:87:0e:2f:a1:dc:3b:4c:
                    0d:33:e5:bc:ef:c2:71:b4:f6:5a:df:fc:5f:90:ca:
                    85:ed:ab:1a:7a:91:21:fa:e0:b3:23:13:3a:50:a8:
                    4f:e7:a7:e0:cc:34:b0:76:de:b7:f6:6a:8e:53:61:
                    6d:b4:6b:bc:ef:44:cc:25:99:8c:53:9f:99:d3:58:
                    ea:6f:30:72:41:61:5c:ad:df:14:46:0b:29:26:28:
                    32:a1:13:ed:9c:b3:2f:53:ea:d3:eb:7d:36:1e:93:
                    59:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:95:0F:D8:D6:5E:B9:28:9D:76:2F:E7:A2:A8:D7:B0:E6:4C:82:41
            X509v3 Authority Key Identifier:
                keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/593888C40AB811EE97CC7A32C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.28.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:69:a3:6e:5d:41:79:8c:db:2d:09:45:77:33:a2:f8:59:77:
         1c:5a:0d:b3:b7:34:42:f7:82:a4:fd:86:54:c3:e9:f2:08:38:
         c0:41:ea:39:4c:ea:a5:6a:6c:95:18:1e:51:7d:07:9c:89:21:
         77:88:26:1e:ba:bd:f0:ba:10:c9:1e:09:45:f4:8c:49:58:94:
         34:7a:d4:ef:aa:d5:5c:ac:f9:50:b6:f9:ef:20:93:8b:94:7b:
         f1:1f:41:27:fd:63:ec:54:b7:e3:91:19:3c:f1:6a:53:76:ed:
         3c:cc:17:93:4b:d8:fc:24:cf:bf:eb:56:16:9c:92:e1:85:cd:
         6c:33:ce:f9:34:68:66:09:b9:7f:27:22:fa:8b:3c:6e:01:22:
         ad:c1:f6:68:b9:dc:c7:00:06:54:b7:72:54:c2:e6:fd:21:da:
         61:4b:c4:e0:19:de:39:91:8a:09:e3:3f:33:c2:43:fd:03:01:
         5d:0b:73:e0:95:97:a1:a3:37:0d:df:85:2d:6d:73:5b:66:fd:
         37:80:e5:1b:be:32:39:48:a3:2b:c7:ff:da:0e:83:73:6f:20:
         ca:02:a1:52:58:4b:bd:c5:a8:1d:10:f4:9f:e0:15:a0:e8:16:
         32:ef:47:14:07:f6:2c:66:83:17:9c:d0:a4:24:be:12:f0:36:
         8b:cd:11:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:47 2026 by rpki-client