Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/ACA405589E7011F083978F1AC4F9AE02.roa
File:                     ACA405589E7011F083978F1AC4F9AE02.roa (raw, json)
Hash identifier:          aqdlEd+hSBzQzve2o5DblyAqPMOMIZAPbkwHiErLH6o=
Subject key identifier:   C7:9E:13:20:3C:FA:91:7A:44:F7:8B:9C:28:0D:5F:14:FA:8E:D2:8B
Certificate issuer:       /CN=A91678AA/serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
Certificate serial:       59
Authority key identifier: 98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/ACA405589E7011F083978F1AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:23:57 +0000
ROA not before:           Wed 01 Oct 2025 02:45:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     136914
IP address blocks:        202.133.64.0/23 maxlen: 24
                          2402:26a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl
                          rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91678AA, serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
        Validity
            Not Before: Oct  1 02:45:22 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a58f6d-4999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:a9:39:bf:e5:39:fd:6e:15:27:62:d5:95:
                    35:11:71:a9:3f:6d:57:a2:8b:17:bb:57:b2:50:0e:
                    14:64:26:94:bd:18:9b:58:04:bf:40:e4:98:81:bf:
                    14:42:f6:74:f8:b5:64:9e:4f:51:7a:b5:2f:59:9e:
                    86:36:86:d1:3d:c5:de:09:5a:0c:0b:de:16:53:fa:
                    e5:aa:ec:e2:39:d4:fa:ee:d3:09:fc:75:b7:ac:15:
                    13:25:c7:d8:b5:2b:ca:d6:8a:2a:81:3c:3d:55:9d:
                    30:b0:44:ac:d2:f8:4b:eb:3c:75:9e:a1:50:ab:e5:
                    77:d7:41:8d:19:a9:70:bb:04:1b:2d:46:3f:9f:3e:
                    b2:04:58:8d:17:dd:15:99:f7:bb:a7:1f:1c:52:ad:
                    d0:d6:41:1b:09:3d:98:99:cb:df:96:55:68:f8:07:
                    ab:2c:f2:be:36:0e:21:e8:1f:e8:b0:a1:36:49:e2:
                    4c:af:98:26:7e:a2:f8:0d:3a:3a:66:6d:a5:6e:23:
                    06:a9:5f:39:b8:1c:ff:8c:b0:7b:40:8e:71:a9:38:
                    95:06:14:58:fd:eb:22:ae:c0:ac:c5:45:62:9a:17:
                    65:4c:10:08:9e:68:fb:e1:74:d5:03:3c:a1:46:12:
                    70:c1:01:61:f1:c5:2a:94:93:de:fa:1d:b0:26:47:
                    2d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9E:13:20:3C:FA:91:7A:44:F7:8B:9C:28:0D:5F:14:FA:8E:D2:8B
            X509v3 Authority Key Identifier:
                keyid:98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/ACA405589E7011F083978F1AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.133.64.0/23
                IPv6:
                  2402:26a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:c0:f0:a2:c2:e7:b4:d0:59:4d:f2:81:7f:30:a1:6a:c8:43:
         55:2b:5e:41:d9:00:5e:cc:1f:d6:54:60:68:65:66:b0:45:2d:
         94:76:0a:69:67:25:90:1a:15:40:c5:ab:c2:0a:56:25:e7:69:
         99:ae:00:59:94:c1:e9:f3:4e:47:d1:67:24:97:68:29:88:14:
         1a:73:09:78:a1:53:08:b0:06:44:69:21:d2:64:12:d1:c5:be:
         85:f3:b0:d6:c7:81:25:2e:ed:a5:7e:ec:62:53:8a:08:11:87:
         b5:df:90:c7:00:17:13:e2:b2:34:0f:1a:4c:57:29:0f:8b:1b:
         23:01:e4:4f:63:6c:96:78:46:2f:15:68:32:1a:20:2d:02:74:
         04:81:f3:6b:22:b5:0c:5b:34:ac:5a:58:9d:7d:f2:32:70:bf:
         8d:14:a8:9c:61:60:f9:b5:6f:cf:d6:60:a8:66:19:a9:ce:95:
         ca:10:a8:ac:7a:6d:8e:97:0c:d5:ac:8a:e3:2c:09:0e:16:5c:
         c5:ff:90:1b:1a:56:50:c4:48:f5:f9:1d:cb:91:67:ae:f4:b6:
         de:b3:00:14:09:e0:65:fc:8a:da:f3:8f:9b:6c:86:bd:07:4f:
         37:c1:04:ad:d9:4b:84:3d:11:f1:6d:89:ef:bb:0c:e2:c4:90:
         e4:ff:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:01:36 2026 by rpki-client