Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/AB4B141CA24211ED92C4107BC4F9AE02.roa
File:                     AB4B141CA24211ED92C4107BC4F9AE02.roa (raw, json)
Hash identifier:          UEUSncbvcRYXE+6AzGdqUvKwJ/u7rXG3RrB+0He5Cnw=
Subject key identifier:   76:4E:ED:30:DA:3C:E1:A9:32:79:C7:06:ED:BB:C7:DD:80:D6:18:DF
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       06D6
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/AB4B141CA24211ED92C4107BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:57:04 +0000
ROA not before:           Wed 30 Jul 2025 23:34:49 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     3836
IP address blocks:        203.185.96.0/19 maxlen: 24
                          2001:f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1750 (0x6d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: Jul 30 23:34:49 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a453c0-cf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e2:b4:06:02:92:51:31:e7:ec:77:86:8a:ce:
                    6b:83:c5:34:0f:d9:a0:d8:99:1a:3d:01:bd:d5:5e:
                    53:f8:b5:8f:59:eb:34:ab:ef:82:ba:85:a3:26:f7:
                    99:41:dc:5d:d4:74:8b:94:b6:7f:01:85:e1:47:22:
                    57:04:0d:24:dd:7c:34:4a:46:1a:ee:96:77:8a:5d:
                    86:5f:4e:b7:8a:0e:98:ac:d7:70:ee:ed:88:27:0f:
                    6c:78:12:5e:45:4a:1f:d0:f5:f2:c3:f9:31:03:65:
                    87:96:a3:ab:fb:c5:0b:46:70:1a:29:d2:61:33:09:
                    a9:d7:06:ee:58:10:31:6c:a4:18:e8:9e:18:9a:c3:
                    45:94:ae:2b:53:11:f9:56:db:98:58:83:91:c7:d5:
                    ca:d5:f8:6f:3f:b2:ee:20:29:38:6b:81:4b:c0:3b:
                    94:46:ca:00:2d:ed:30:5e:13:aa:a2:aa:78:fc:b1:
                    e2:80:3f:dd:f5:f2:18:f6:34:72:5d:32:46:ce:cc:
                    67:e0:86:4b:91:84:c5:84:1c:4f:41:18:e8:67:e1:
                    28:da:18:67:c1:2f:c0:36:d7:0e:5c:be:27:b3:e9:
                    3b:7a:10:ee:15:ff:a5:7b:a5:bf:6a:ac:91:54:b7:
                    c3:55:f1:81:2c:e2:07:ef:68:b4:f6:41:46:6f:23:
                    d6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4E:ED:30:DA:3C:E1:A9:32:79:C7:06:ED:BB:C7:DD:80:D6:18:DF
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/AB4B141CA24211ED92C4107BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.185.96.0/19
                IPv6:
                  2001:f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:21:84:29:12:c3:03:de:6d:d2:ea:0f:1c:d8:75:57:db:b3:
         eb:2a:23:48:8d:18:9d:06:2c:58:48:23:aa:6c:31:1d:03:e6:
         1b:7d:fd:ee:67:ee:eb:f1:96:c6:1f:3d:ba:2f:cc:5e:1e:2e:
         92:8b:a3:47:a1:e4:93:35:07:cd:e7:8c:03:32:fa:47:e4:18:
         49:a7:19:37:29:63:56:ba:67:6c:50:04:78:d9:82:22:a1:7f:
         81:b2:68:8d:00:77:7b:51:58:0a:d2:c7:c6:6b:3b:b4:ac:44:
         91:96:0b:3a:60:88:22:96:82:77:f8:73:45:6e:a9:cc:c1:b5:
         69:23:d5:d1:74:43:8e:5b:e1:43:25:dc:82:c9:c9:71:5c:c5:
         2e:17:96:50:bc:f7:b5:0d:98:83:31:67:06:0b:07:28:18:14:
         08:1a:4c:9f:c9:a7:2b:22:cb:d9:c8:98:7b:6f:77:c4:c7:a8:
         f8:20:d3:75:b4:0c:cc:61:0f:f2:9b:7d:35:38:d6:af:fa:4a:
         de:32:21:2d:1c:6d:30:ad:3b:83:80:1e:6f:93:1e:5e:2b:cc:
         ad:80:26:7c:df:04:b8:84:0e:dd:bf:06:e4:db:41:a2:24:bf:
         5e:ea:8c:46:d7:41:1a:2b:23:7b:43:b3:fe:e8:21:15:a5:46:
         ed:7b:f2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:29 2026 by rpki-client