Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/90798692AA0A11EA89D5161EC4F9AE02.roa
File:                     90798692AA0A11EA89D5161EC4F9AE02.roa (raw, json)
Hash identifier:          RObxtW51NsjZz83e+7RyvdJYnFl+EIf82gNL/++qoe8=
Subject key identifier:   03:E8:9E:DF:21:97:D2:E5:6A:AE:47:1C:D6:97:3D:70:91:0B:FB:0C
Certificate issuer:       /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B
Certificate serial:       09AF
Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/90798692AA0A11EA89D5161EC4F9AE02.roa
Signing time:             Fri 08 May 2026 20:25:34 +0000
ROA not before:           Fri 08 May 2026 20:25:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38567
IP address blocks:        202.45.149.0/24 maxlen: 24
                          203.14.176.0/24 maxlen: 24
                          2001:df0:65::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl
                          rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2479 (0x9af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B4B7, serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B
        Validity
            Not Before: May  8 20:25:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fe46be-94cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:5d:a5:9b:52:62:cb:32:88:0a:14:b5:bb:
                    01:de:f2:96:0a:81:ff:14:b4:02:df:c0:36:20:a5:
                    2c:8b:49:70:ec:4f:49:65:23:50:8d:b9:ac:59:1e:
                    08:61:f2:82:5c:7e:23:fb:e5:cb:18:74:57:5e:6f:
                    9f:ad:9d:52:ec:ba:e7:0d:38:1b:ae:41:33:fb:12:
                    00:a1:cc:9d:52:7e:ef:00:00:ff:fe:07:ee:7f:3f:
                    8d:02:47:7b:84:7d:76:d5:d7:21:8a:7e:6e:c4:90:
                    74:f4:2d:a2:0b:da:9a:1d:bf:e0:f6:4a:e8:cd:85:
                    7a:aa:c1:3f:f9:a9:5d:d3:42:7c:28:75:d7:a9:1a:
                    0e:53:86:03:86:f1:80:ce:cf:42:cb:bf:6d:ef:d5:
                    9b:e3:8d:5a:1e:51:1c:50:1d:0f:0a:c0:4e:8e:f1:
                    0f:38:c3:03:81:e5:99:22:7e:0e:7f:75:f6:06:13:
                    1c:ba:7a:48:31:30:0d:d4:b0:8a:a4:49:ef:84:0d:
                    d4:5b:b5:5b:b7:50:0c:8d:8c:e9:36:a5:bf:13:68:
                    8b:27:a8:61:82:00:5b:fe:f5:6f:77:32:5e:3c:65:
                    de:f5:3a:cd:e5:42:4b:ea:18:44:5a:f9:0e:2f:72:
                    e6:8a:42:03:17:65:53:47:a9:8b:13:05:b5:6a:d5:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E8:9E:DF:21:97:D2:E5:6A:AE:47:1C:D6:97:3D:70:91:0B:FB:0C
            X509v3 Authority Key Identifier:
                keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/90798692AA0A11EA89D5161EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.45.149.0/24
                  203.14.176.0/24
                IPv6:
                  2001:df0:65::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:e3:cf:d7:c8:aa:8e:6f:a1:e6:9e:8a:26:e4:ff:89:e1:9a:
         4a:25:cf:6b:4b:9d:8b:71:ef:bf:31:c2:cf:04:21:72:3d:c8:
         ea:29:9c:6d:c2:44:ec:4c:67:54:44:21:83:99:b5:bc:ca:97:
         d1:dd:da:34:1b:0d:fb:86:c1:d5:ad:9c:5a:3b:7b:b1:38:8e:
         7f:7b:f0:02:64:64:d4:b3:16:d1:9d:c8:1b:5f:8f:1d:91:a9:
         a7:54:5b:7c:b4:5c:4b:d7:6a:03:d2:dd:14:b8:04:94:c6:d5:
         6c:23:e8:c7:2b:2b:22:75:8f:43:53:41:e1:3f:90:cb:54:0c:
         0e:f2:df:49:12:c6:6a:45:8d:e4:94:05:52:4e:86:b8:71:be:
         a4:58:1d:f2:e4:0f:25:72:29:90:65:65:c8:76:6d:e3:95:82:
         13:5b:a2:65:e1:53:e4:11:d4:ee:0a:7d:7e:46:a1:f9:eb:c9:
         8f:4a:dd:93:da:f0:fb:51:7b:39:eb:08:a4:57:c6:12:81:f9:
         62:23:41:43:80:5c:62:d9:1e:ae:93:1a:0b:c0:da:3a:ab:83:
         19:2c:31:8f:de:a2:ec:07:38:e3:ec:bf:af:37:ca:f1:8e:9d:
         35:e8:88:d0:76:61:f0:f1:ff:26:be:ed:4b:eb:8b:b2:63:dc:
         43:5a:8a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:32:25 2026 by rpki-client