Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/AC82414A392511EF88F70D39C4F9AE02.roa
File:                     AC82414A392511EF88F70D39C4F9AE02.roa (raw, json)
Hash identifier:          hKQ2h489zBdCdDYcUOKChPL8Ijm3M758tY3uGhwDTqA=
Subject key identifier:   6F:E0:54:9A:1D:7B:F1:B9:33:F7:7C:8C:51:94:ED:D6:EA:DF:5A:A6
Certificate issuer:       /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179
Certificate serial:       0177
Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/AC82414A392511EF88F70D39C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 04:41:03 +0000
ROA not before:           Tue 03 Mar 2026 04:41:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140991
IP address blocks:        203.223.88.0/24 maxlen: 25
                          2001:df3:a3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl
                          rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB193, serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179
        Validity
            Not Before: Mar  3 04:41:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69a6665f-3362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:f8:c2:92:63:65:c8:cb:8b:73:ca:78:eb:
                    22:d2:3e:e1:5d:02:30:4b:2e:1c:9f:f4:2f:8b:11:
                    f5:83:1c:e3:96:1e:5b:af:17:b3:dc:43:58:4c:a5:
                    78:dd:5b:00:a6:f8:0e:f9:55:5d:26:7a:59:90:5f:
                    07:d3:13:78:57:6f:91:c0:d4:42:ca:68:1b:70:ec:
                    1d:bc:b7:b2:18:2b:fc:81:dd:f7:eb:6c:73:aa:da:
                    c7:d9:ac:d1:74:b4:cb:19:b5:11:e0:2f:e3:09:6a:
                    3f:da:da:1c:5f:7e:7c:e6:82:67:04:08:59:0f:a8:
                    53:82:05:88:b0:3a:c1:76:71:90:98:8e:bb:c4:b8:
                    af:0d:ad:ce:70:95:3a:f7:a1:ba:ad:6f:0f:33:b1:
                    ca:00:7c:91:bb:ad:ed:8d:7e:4f:99:50:29:cd:5c:
                    22:4a:59:d5:01:9e:bd:f4:b3:5b:a2:d5:1a:29:11:
                    02:95:7d:f9:82:75:41:10:dd:2e:9d:dc:c5:28:b9:
                    9b:61:a5:74:a7:1e:0b:15:e4:19:75:b5:c6:51:e1:
                    0c:c8:53:99:44:7b:5b:f6:05:ad:e1:71:e4:b3:59:
                    97:ef:cd:38:12:69:37:a2:5b:5c:bc:d2:b6:af:90:
                    55:91:59:e0:32:80:d4:eb:0c:29:f4:95:1c:31:f4:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E0:54:9A:1D:7B:F1:B9:33:F7:7C:8C:51:94:ED:D6:EA:DF:5A:A6
            X509v3 Authority Key Identifier:
                keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/AC82414A392511EF88F70D39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.223.88.0/24
                IPv6:
                  2001:df3:a3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:b7:98:81:3a:c9:2b:12:a3:c5:f1:7c:51:26:e2:79:04:9a:
         23:26:45:d3:eb:ae:86:97:fd:1d:24:03:b6:32:ab:41:3e:99:
         0b:cb:5f:c2:08:3e:33:4e:1e:cf:bb:34:e3:1e:bf:1b:f6:c5:
         4f:9a:e3:0f:b5:81:a2:df:2f:6e:a8:60:84:4a:f1:79:d0:ed:
         66:59:7b:ec:56:cf:74:37:14:e7:67:52:46:0b:25:72:19:a2:
         17:39:8a:bd:fe:87:fe:35:39:e3:09:3e:f3:68:99:bc:71:14:
         e1:b2:93:53:fb:8f:d6:32:4f:2a:78:e9:5a:81:99:07:47:8c:
         35:8e:34:9a:73:ae:60:21:c0:a7:c6:e6:ea:9d:49:4f:66:85:
         36:77:5c:7e:fb:95:73:6d:71:33:78:1d:08:f2:3b:fd:32:c3:
         38:3d:d2:92:f9:77:7c:6f:66:51:8d:5c:48:b3:86:f7:fa:0d:
         16:74:00:5a:64:cc:a0:b1:d7:74:c2:80:c4:2a:fd:99:72:fe:
         06:16:93:2d:fc:03:10:e7:41:97:55:65:e5:99:db:9b:bb:b2:
         8d:77:10:22:dd:6c:60:c4:2b:81:36:26:82:25:57:a2:d6:53:
         47:2a:3b:45:54:9e:e9:39:0d:ad:87:92:fa:ad:c1:8c:9d:c5:
         ca:d0:a3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:30 2026 by rpki-client