Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/91E9F5FCEB7211F0B89C2E104F6F56BC.roa
File:                     91E9F5FCEB7211F0B89C2E104F6F56BC.roa (raw, json)
Hash identifier:          4kY1N0JmfJKxXFlgpxTMmZzLvUHE7guNh7KUYwhQfXQ=
Subject key identifier:   6C:FF:8D:12:0D:77:E7:01:84:A0:90:E7:7E:53:70:09:FB:32:57:AC
Certificate issuer:       /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial:       0194
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/91E9F5FCEB7211F0B89C2E104F6F56BC.roa
Signing time:             Wed 11 Mar 2026 03:38:50 +0000
ROA not before:           Wed 11 Mar 2026 03:38:50 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     17461
IP address blocks:        203.3.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
                          rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:42:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
        Validity
            Not Before: Mar 11 03:38:50 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69b0e3ca-d3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f9:b0:1a:16:fb:4a:66:35:22:65:7e:2e:87:
                    c3:4c:6d:a8:f3:34:d5:08:e6:22:61:fa:38:11:51:
                    11:9f:9d:65:ec:4c:3b:21:e8:1a:93:94:43:ba:61:
                    d4:4c:90:50:5b:13:2c:81:ec:1d:e3:eb:09:09:11:
                    ef:84:f7:27:0c:96:1c:7c:9c:60:b9:22:e4:64:f3:
                    8a:35:c1:a1:45:dd:71:19:3a:56:84:1e:69:6c:a3:
                    0c:89:e0:2e:3a:b6:7a:66:6f:e2:1a:51:98:40:51:
                    2e:b6:b8:36:94:47:83:70:77:fc:97:9d:a6:0c:4b:
                    8e:9c:d6:7a:fd:dd:2f:82:7c:5e:8f:e2:23:3e:dc:
                    85:6c:75:36:bb:4c:30:d5:95:90:e1:a2:c3:8c:27:
                    e3:65:08:10:ee:8d:89:ec:c7:55:3d:69:2b:6d:bc:
                    15:3a:e9:76:4c:bb:0e:d4:d3:32:2b:be:c5:79:ec:
                    ec:f5:6a:ab:8f:e6:0e:da:8d:ed:09:8d:c7:37:69:
                    6c:5f:f7:22:83:ea:d1:b9:54:b6:44:86:fe:bb:32:
                    c0:a2:0f:2e:78:b5:1b:08:bd:f6:6b:3f:81:b4:46:
                    7c:f9:03:73:52:3f:1b:c0:50:8b:16:a8:e5:10:5c:
                    15:be:d4:4f:ce:d5:41:b8:77:05:d7:79:ea:10:1b:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FF:8D:12:0D:77:E7:01:84:A0:90:E7:7E:53:70:09:FB:32:57:AC
            X509v3 Authority Key Identifier:
                keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/91E9F5FCEB7211F0B89C2E104F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.3.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:66:27:4e:b0:e6:fe:83:b0:50:ad:46:2f:1a:2d:e9:b9:43:
         30:dc:83:23:c5:60:84:8f:01:c6:bc:20:d7:41:74:07:34:7b:
         d8:bf:47:a1:00:b6:6b:d9:cf:f3:43:93:d7:de:72:be:7a:3f:
         60:df:58:a4:d9:53:3c:f3:fe:8d:07:f8:ed:22:ef:4e:fa:55:
         b7:34:77:2d:5c:63:0e:f7:9b:b5:fc:0b:9e:5c:97:c5:75:b8:
         cc:2e:02:b5:1b:10:4d:cb:d4:b4:36:7c:bf:ce:41:44:04:05:
         c3:60:6a:54:9d:ca:1e:85:2a:8e:a8:ee:6f:67:5a:60:44:7a:
         73:e7:76:68:b9:5d:cc:12:ae:d4:88:99:eb:7c:29:a6:8e:0f:
         b5:5c:44:11:90:0b:35:39:25:bb:40:58:be:6f:53:00:e0:67:
         65:51:59:dc:91:0f:41:32:9b:c4:33:db:9c:c3:be:c4:ba:f0:
         e4:46:ab:1f:8f:b0:c8:23:dd:8f:8d:5e:9f:c7:0a:06:ee:cf:
         19:e8:24:ed:ea:5d:0c:6f:48:d2:13:d5:8e:11:7d:62:0a:56:
         55:27:b3:19:d0:32:09:ba:97:b1:c4:99:d5:f3:da:c3:b3:60:
         82:8c:2b:4b:c4:b9:93:4f:b4:5e:94:a7:8e:bb:a6:40:c0:d5:
         3b:44:70:93
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU1QzkxMTAvBgNVBAUTKDc4MzlBMUZDMDE3NDAyNEJDQkE4NEQwMTJEM0VDNENB
NDY3OUFDNzEwHhcNMjYwMzExMDMzODUwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWIwZTNjYS1kM2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy/mwGhb7SmY1ImV+LofDTG2o8zTVCOYiYfo4EVERn51l7Ew7Iegak5RDumHU
TJBQWxMsgewd4+sJCRHvhPcnDJYcfJxguSLkZPOKNcGhRd1xGTpWhB5pbKMMieAu
OrZ6Zm/iGlGYQFEutrg2lEeDcHf8l52mDEuOnNZ6/d0vgnxej+IjPtyFbHU2u0ww
1ZWQ4aLDjCfjZQgQ7o2J7MdVPWkrbbwVOul2TLsO1NMyK77Feezs9Wqrj+YO2o3t
CY3HN2lsX/cig+rRuVS2RIb+uzLAog8ueLUbCL32az+BtEZ8+QNzUj8bwFCLFqjl
EFwVvtRPztVBuHcF13nqEBu87wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGz/jRIN
d+cBhKCQ535TcAn7MlesMB8GA1UdIwQYMBaAFHg5ofwBdAJLy6hNAS0+xMpGeaxx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS84ODJGMjMyMEM5
RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFrdkxxRTBCTFQ3RXlrWjVy
SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VEbWhfQUYwQWt2THFFMEJMVDdFeWtaNXJIRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU1QzkvODgyRjIzMjBDOUVCMTFFRThCODU3QjBDQzRGOUFFMDIvOTFFOUY1RkNF
QjcyMTFGMEI4OUMyRTEwNEY2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAywPtMA0GCSqGSIb3DQEBCwUAA4IBAQBmZidOsOb+g7BQrUYvGi3p
uUMw3IMjxWCEjwHGvCDXQXQHNHvYv0ehALZr2c/zQ5PX3nK+ej9g31ik2VM88/6N
B/jtIu9O+lW3NHctXGMO95u1/AueXJfFdbjMLgK1GxBNy9S0Nny/zkFEBAXDYGpU
ncoehSqOqO5vZ1pgRHpz53ZouV3MEq7UiJnrfCmmjg+1XEQRkAs1OSW7QFi+b1MA
4GdlUVnckQ9BMpvEM9ucw77EuvDkRqsfj7DII92PjV6fxwoG7s8Z6CTt6l0Mb0jS
E9WOEX1iClZVJ7MZ0DIJupexxJnV89rDs2CCjCtLxLmTT7RelKeOu6ZAwNU7RHCT
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:22:40 2026 by rpki-client