Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/E9610376903B11EBB91C8B5DC4F9AE02.roa
File:                     E9610376903B11EBB91C8B5DC4F9AE02.roa (raw, json)
Hash identifier:          3z8kfah8Rc+EmdONJ0N2qktr5a3vi1+hhYLPgwRRaD4=
Subject key identifier:   77:47:3F:48:14:DB:E3:74:1A:30:D4:80:FD:15:60:B6:78:BC:E2:A3
Certificate issuer:       /CN=A919DCE3/serialNumber=062240CDE756D95B5777E267AA7B0654F834F493
Certificate serial:       06D9
Authority key identifier: 06:22:40:CD:E7:56:D9:5B:57:77:E2:67:AA:7B:06:54:F8:34:F4:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/E9610376903B11EBB91C8B5DC4F9AE02.roa
Signing time:             Tue 10 Mar 2026 22:29:16 +0000
ROA not before:           Tue 10 Mar 2026 22:29:16 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     9723
IP address blocks:        203.22.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.crl
                          rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1753 (0x6d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DCE3, serialNumber=062240CDE756D95B5777E267AA7B0654F834F493
        Validity
            Not Before: Mar 10 22:29:16 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b09b3c-abd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:ef:0a:1b:1c:72:1f:73:1c:11:d9:ca:fb:
                    df:fc:b5:46:47:2e:53:29:90:bb:94:7c:25:c7:55:
                    f8:cc:94:c0:46:28:b1:78:93:dd:f9:17:2e:c0:c3:
                    ae:01:60:04:4d:1d:de:62:79:18:a4:2d:7f:ae:94:
                    12:dd:c9:35:3e:55:92:17:4b:ac:ce:57:1c:54:33:
                    8f:ee:39:7e:c4:57:bd:b0:e0:e8:91:e8:81:d2:3b:
                    e1:89:62:3f:7b:d8:bc:5b:f7:0e:32:dc:57:99:da:
                    0b:20:79:47:a7:11:23:15:2a:11:c5:b4:b2:a1:8e:
                    af:0d:66:d0:b5:a2:61:96:d3:a2:06:8f:48:b1:34:
                    04:ca:2d:ef:2d:6a:46:d4:11:aa:7b:2b:7b:c5:af:
                    c1:b9:39:ad:9f:a2:3a:87:44:60:fb:28:f2:f5:bc:
                    6e:96:b6:e6:5b:20:97:93:0f:8a:8c:3a:f5:80:22:
                    dd:68:cb:2c:d0:fa:80:7c:76:8b:ac:ed:23:9f:4c:
                    9f:ad:9f:df:d5:24:8f:8f:08:8d:3e:48:f6:cf:05:
                    cf:f4:f5:da:e7:64:39:22:38:e3:e1:21:e3:e0:28:
                    8b:a6:f8:b9:ee:30:64:6d:8c:1a:3a:e8:57:9a:2a:
                    ce:b4:9e:55:f1:51:5c:00:2b:5b:47:5f:f0:16:3f:
                    0b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:47:3F:48:14:DB:E3:74:1A:30:D4:80:FD:15:60:B6:78:BC:E2:A3
            X509v3 Authority Key Identifier:
                keyid:06:22:40:CD:E7:56:D9:5B:57:77:E2:67:AA:7B:06:54:F8:34:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/E9610376903B11EBB91C8B5DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.22.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:95:d6:a2:7e:0b:01:23:d5:5a:90:11:3e:20:3a:85:1d:d5:
         35:a3:1d:91:24:ee:bb:e3:e0:27:a1:a1:2b:40:98:1c:08:db:
         d7:cf:29:13:e1:76:ef:9c:08:e5:e3:83:47:8e:25:bf:b8:40:
         0d:06:a0:47:84:83:0b:fe:b7:e5:a7:cc:3f:45:a0:34:8e:ab:
         38:71:aa:36:b2:4a:71:9e:d9:34:35:99:49:86:8f:ee:86:6b:
         64:81:00:bb:0c:8a:42:31:d7:5a:81:3d:7e:71:27:f5:66:ca:
         c5:8d:00:54:ba:45:69:e6:43:16:f6:13:94:cd:67:fe:a1:a0:
         1b:1c:80:b8:47:54:e8:19:7f:3a:3b:cf:94:36:fc:ca:71:7e:
         8c:1a:3f:01:df:cd:3d:d9:86:c4:18:86:23:bb:fb:cd:b4:0c:
         91:f6:35:bf:d6:8e:6b:f5:91:b5:9a:ab:4c:4c:33:a9:8a:73:
         81:11:94:96:12:aa:59:99:a8:7a:5d:8c:23:98:c5:33:5c:b9:
         80:db:d4:f0:90:e9:5d:ea:df:66:9c:6d:54:bb:9d:3e:77:97:
         68:a7:67:04:13:30:32:ea:e8:9e:d6:39:4e:c6:3b:c3:d9:18:
         83:b0:85:8e:67:b4:67:17:dc:8e:6b:ac:2f:36:55:af:b5:68:
         09:f9:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:20 2026 by rpki-client