Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/71AD02DC194F11ED818A3C66C4F9AE02.roa
File:                     71AD02DC194F11ED818A3C66C4F9AE02.roa (raw, json)
Hash identifier:          ROZc9LLExxAKSmBJDb4gQXjvPcIeYOybm5faBsQ7IsY=
Subject key identifier:   A5:57:40:5E:EA:E8:B5:7A:85:BD:7C:58:5F:55:24:C2:E8:82:C4:8D
Certificate issuer:       /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial:       0C31
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/71AD02DC194F11ED818A3C66C4F9AE02.roa
Signing time:             Wed 18 Mar 2026 19:25:14 +0000
ROA not before:           Wed 18 Mar 2026 19:25:14 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     56251
IP address blocks:        58.145.233.0/24 maxlen: 24
                          202.42.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
                          rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3121 (0xc31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
        Validity
            Not Before: Mar 18 19:25:14 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69bafc1a-a67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:aa:f4:39:e3:5e:89:3d:b7:9b:fe:21:e8:
                    c3:52:d0:4b:79:24:7e:b6:4c:79:50:06:30:02:f2:
                    a2:73:00:f6:c3:89:34:24:cb:54:c2:d6:0d:f5:c5:
                    5b:0c:89:52:6c:4c:91:db:27:d6:33:21:88:96:7b:
                    b6:2d:2d:48:1a:e6:ce:d0:69:91:75:af:18:cf:9b:
                    c3:18:8b:3d:7c:8b:d6:e2:37:93:51:40:68:c8:a5:
                    4a:5b:79:d8:96:c8:68:a8:71:ef:f1:84:c7:fc:28:
                    77:b4:1d:21:b4:94:23:49:97:f0:58:e9:7f:12:4d:
                    8d:20:78:a1:69:0d:f6:3b:d3:04:bb:c1:d0:38:88:
                    fc:a8:ac:33:bf:02:22:f2:d6:a0:10:51:f2:af:73:
                    94:09:0b:39:eb:e1:d1:cf:ae:c7:17:32:6c:e0:c3:
                    4d:4e:d8:8e:54:0b:1b:9b:73:de:15:8b:c0:b3:1c:
                    0e:14:5d:09:78:c9:bb:bb:a5:d4:16:56:7e:70:73:
                    04:ba:49:2b:3b:0f:37:bc:12:4f:d8:81:d8:32:23:
                    e5:5d:6b:4e:1c:e1:e4:02:8f:f1:52:5b:20:f9:a8:
                    9f:6e:45:fd:fb:18:6c:80:9b:e6:5a:15:1a:ea:45:
                    b5:2b:ef:08:33:32:06:f3:31:7f:b2:68:e8:90:72:
                    48:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:57:40:5E:EA:E8:B5:7A:85:BD:7C:58:5F:55:24:C2:E8:82:C4:8D
            X509v3 Authority Key Identifier:
                keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/71AD02DC194F11ED818A3C66C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.145.233.0/24
                  202.42.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:38:3e:2b:a9:de:36:16:f3:3b:c2:db:ab:2c:bd:ba:16:95:
         90:6e:c7:9a:26:51:a0:c2:4a:72:23:c8:4f:08:9c:72:2f:07:
         81:b9:cd:39:cb:4e:e3:66:af:72:ea:35:e9:c1:3c:ae:2e:d5:
         14:71:2a:a2:6a:62:dc:d2:75:b6:99:37:46:e9:57:ee:bd:36:
         b8:ed:4c:fa:77:eb:04:6f:e4:f7:a6:66:83:d1:a9:a2:17:44:
         a4:de:05:cc:97:5e:77:3f:f4:d0:51:5a:1a:b2:90:c3:08:d7:
         4b:19:aa:3c:3a:8f:81:44:0b:20:bf:23:6d:0f:da:99:14:ef:
         4f:f6:d7:8f:59:30:5f:55:31:48:d6:3f:25:de:0f:9d:c1:46:
         65:a8:c9:10:67:79:e8:11:66:9d:78:4f:20:26:1c:83:eb:c0:
         ac:24:22:b1:85:32:4c:8a:28:cf:04:91:28:d4:92:12:27:e9:
         63:a8:9b:c5:7d:e3:1a:db:90:d3:f9:70:49:5c:fe:c8:00:3f:
         dc:a4:67:31:51:67:e4:49:fe:5a:cf:99:22:9e:10:07:b8:6e:
         5a:04:4e:41:a2:d0:01:97:7c:bf:50:ab:2c:8f:49:86:d3:f6:
         1b:0d:e1:6f:d9:0a:2f:49:f1:23:70:8e:4f:50:9f:56:8d:09:
         55:29:af:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:04 2026 by rpki-client