Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/657EDAC0003D11F187167F2F4B6F56BC.roa
File:                     657EDAC0003D11F187167F2F4B6F56BC.roa (raw, json)
Hash identifier:          4QNpZ4lYAWDyFPtVqSrnEIjMO2wek++7TF/91yII7Vs=
Subject key identifier:   1F:35:FC:B6:E6:8A:22:3A:78:B3:96:75:8F:B9:9A:04:98:D4:7A:3C
Certificate issuer:       /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial:       01C3
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/657EDAC0003D11F187167F2F4B6F56BC.roa
Signing time:             Fri 01 May 2026 04:37:35 +0000
ROA not before:           Fri 01 May 2026 04:37:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152702
IP address blocks:        202.71.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
                          rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
        Validity
            Not Before: May  1 04:37:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f42e0f-128b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:8d:d0:4c:24:1c:44:48:9c:5c:6f:de:89:
                    5e:b9:53:1e:bb:0a:21:d4:00:4f:94:16:6b:6f:cc:
                    f6:80:b5:5e:aa:6b:00:3b:bf:2c:ad:a5:68:8f:5c:
                    c3:c1:70:ed:df:4e:31:ee:0e:80:48:b0:22:6f:19:
                    c3:0b:e3:1f:6e:e4:08:87:57:78:ea:5e:57:e3:42:
                    08:b0:6c:16:ad:99:fd:f3:c1:f6:15:ec:90:2d:9d:
                    ff:c2:50:5b:93:3c:26:72:d8:c5:12:1b:dd:50:a8:
                    e2:30:93:f5:4a:b4:42:0a:31:f6:a4:85:69:ec:4a:
                    78:ff:a9:f8:46:50:ae:e2:35:59:1f:d1:28:3c:38:
                    3f:de:b7:06:4f:86:1f:9a:14:34:de:1f:8d:12:e5:
                    83:62:33:00:86:e8:0a:99:6d:1e:1f:9a:5b:af:ba:
                    4a:22:d9:d4:38:09:78:f1:78:04:99:71:87:1c:c9:
                    6f:6d:65:c3:69:96:d1:6d:cb:09:6a:b9:2a:04:21:
                    bb:62:bd:09:da:a1:67:de:bc:b3:59:86:8c:5f:a2:
                    97:a4:11:83:c3:42:b7:df:e1:fd:34:7e:63:32:9e:
                    07:8c:74:a5:45:d4:02:4b:e8:f7:81:87:26:1f:f5:
                    99:8c:4d:94:6b:57:a9:79:5d:de:47:46:42:6f:b4:
                    46:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:35:FC:B6:E6:8A:22:3A:78:B3:96:75:8F:B9:9A:04:98:D4:7A:3C
            X509v3 Authority Key Identifier:
                keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/657EDAC0003D11F187167F2F4B6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.71.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:9a:de:26:d1:7c:28:8a:45:bc:a1:13:49:a4:80:79:f1:01:
         0f:97:11:40:38:67:07:72:ca:86:99:69:37:d1:44:6f:79:0d:
         c4:e3:5e:fa:5a:58:60:ec:19:15:2f:16:30:46:13:2f:7b:38:
         a7:5f:b5:bb:e0:e0:f4:c5:4f:a3:46:ae:94:9d:bb:0e:f5:c9:
         6f:52:b1:c6:e9:79:a8:6e:4d:14:42:1e:40:e5:ad:ee:d1:2a:
         0e:7c:97:5f:9e:57:4f:4c:97:f7:bf:80:81:9a:f2:09:2d:d6:
         28:61:c7:47:fb:99:e8:ca:eb:16:80:97:22:97:05:47:e4:3f:
         98:95:27:ab:05:b9:a3:a2:4d:f6:14:c8:b0:5e:34:94:87:fa:
         1e:32:7c:41:e9:18:a5:f6:5c:66:c1:97:90:65:d0:bd:7b:bd:
         e6:e4:36:ac:e9:98:6b:8a:35:30:b0:ee:bf:d5:b4:ab:2f:a2:
         79:04:f2:d2:89:17:51:83:d4:33:d0:f9:14:ed:40:ec:31:9c:
         15:89:e6:f4:9b:46:13:23:6b:ca:80:59:2b:c9:4c:67:cb:4a:
         6d:32:8d:71:ca:45:bf:b1:71:1c:ae:b1:d2:81:8f:dd:fd:a8:
         8c:c8:c4:4e:53:b0:5e:32:e2:1e:89:3c:72:9e:ab:ba:d6:2d:
         f7:19:5f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:21 2026 by rpki-client