Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/0B1C46B26C8E11EDA1402673C4F9AE02.roa
File:                     0B1C46B26C8E11EDA1402673C4F9AE02.roa (raw, json)
Hash identifier:          UWH1x8giA5CUDbuKn5hiEaz+aWmWPo/dG0Iot9P77PQ=
Subject key identifier:   4B:3F:38:FC:24:1E:D3:68:2E:EA:61:82:BD:82:02:03:7A:40:77:CD
Certificate issuer:       /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
Certificate serial:       0277
Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/0B1C46B26C8E11EDA1402673C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:58:04 +0000
ROA not before:           Sat 05 Jul 2025 03:10:16 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        203.4.188.0/23 maxlen: 24
                          203.4.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl
                          rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
        Validity
            Not Before: Jul  5 03:10:16 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a41bbc-6c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:f8:03:8a:3b:13:c5:26:78:6e:34:b2:05:
                    fd:ca:31:32:72:60:33:f0:e0:ad:6a:73:07:d4:e4:
                    50:dc:81:a9:06:5e:38:91:86:bb:01:fe:97:2a:e4:
                    43:36:e3:b8:62:cc:bd:32:86:5b:1e:8e:ee:a7:01:
                    ea:20:10:53:b4:85:37:06:25:39:b6:94:43:52:93:
                    51:13:75:27:e6:5a:f5:5f:cd:8e:93:b0:80:fa:50:
                    3f:76:f5:e2:89:e8:13:b8:d5:4e:d4:61:c7:13:65:
                    81:db:e1:38:53:29:bd:ec:c6:ba:63:93:41:19:85:
                    67:69:06:4c:6b:67:8a:10:02:6a:56:d6:51:9a:de:
                    5f:39:5b:77:c7:86:fe:b6:77:ef:94:48:60:3e:45:
                    11:28:c8:ba:16:bf:fb:4e:e0:f1:d8:df:5b:7b:4a:
                    f2:ee:c7:78:0a:e3:0d:c6:82:8a:d1:44:71:17:d1:
                    79:9e:d1:b3:88:8b:cf:0d:01:40:36:ea:68:8e:77:
                    bc:61:2c:11:26:1c:84:2d:1d:e1:1c:b4:23:b2:06:
                    cb:69:d9:68:10:ba:d7:77:4a:27:76:53:d7:cc:50:
                    de:39:16:f5:cd:a8:18:26:ec:12:b0:09:bb:18:d5:
                    94:d3:0e:b2:08:e1:ec:07:fc:22:f7:bc:99:67:b3:
                    ce:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3F:38:FC:24:1E:D3:68:2E:EA:61:82:BD:82:02:03:7A:40:77:CD
            X509v3 Authority Key Identifier:
                keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/0B1C46B26C8E11EDA1402673C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.4.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:c9:8d:0f:d1:83:b0:0b:f4:a7:30:b4:36:a1:1a:f1:d6:d1:
         40:16:9d:69:95:97:b5:a1:4d:cd:5e:6a:a4:6a:fe:c1:69:64:
         f7:8c:d4:9e:2c:0b:12:d6:54:f9:62:57:2b:80:fe:86:0b:4d:
         b2:be:23:0a:d9:14:32:76:3f:be:3e:5a:88:3d:4f:76:a8:3a:
         2c:d9:52:fb:bf:35:72:aa:d6:7d:77:a3:dc:7b:b1:33:c2:fd:
         6f:90:69:e2:2d:3e:8c:d4:ce:66:50:be:a3:95:21:48:e8:c3:
         9b:ac:cf:f3:a5:7d:8e:fa:7a:5d:4a:25:ea:53:27:3e:88:d7:
         a1:a3:5c:11:71:c7:98:f0:26:10:9b:07:16:40:b8:b9:77:9e:
         e2:29:82:22:c3:69:75:8d:54:cc:f6:11:7a:6f:8e:e9:83:de:
         67:c9:51:b8:f6:0c:42:86:d4:d0:93:d0:fd:33:d2:34:ba:43:
         50:c3:97:0e:55:0f:5a:66:45:b7:8e:41:d1:f4:0d:8c:01:24:
         6a:4f:4e:d5:24:57:58:6c:b3:7b:3c:52:37:3e:0a:8e:04:45:
         b6:04:61:21:30:c1:4f:db:fb:e8:2e:1d:af:b0:5b:b9:5e:fe:
         da:61:1d:fb:6b:2e:1c:f3:73:f9:8c:c5:e1:42:24:35:32:65:
         f2:65:4a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:20 2026 by rpki-client