Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/D6C060C27E1811EEB9B4FE4AC4F9AE02.roa
File:                     D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (raw, json)
Hash identifier:          bTmhZaAypt5r6H6ei3QiJe1JRpUEf1NlmVzAJrVmPHM=
Subject key identifier:   20:88:DE:66:C0:EC:74:D9:2C:27:6A:3E:A0:00:23:11:FA:EC:29:35
Certificate issuer:       /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial:       05E5
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/D6C060C27E1811EEB9B4FE4AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:22:40 +0000
ROA not before:           Fri 02 Jan 2026 23:19:22 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     61317
IP address blocks:        202.43.6.0/24 maxlen: 24
                          202.43.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1509 (0x5e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
        Validity
            Not Before: Jan  2 23:19:22 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a483f0-b504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:d7:e3:fc:87:ac:fb:8c:c7:a7:bc:2b:73:
                    e1:d3:7d:42:f3:81:c5:86:36:27:1c:3f:5d:94:f2:
                    c8:a0:21:05:91:ec:7b:d9:57:21:da:e2:7a:a9:94:
                    ba:04:99:e6:59:6f:55:54:bb:4d:2c:c9:91:6e:90:
                    4a:e8:7e:2c:8f:c4:46:25:30:14:62:a2:ee:98:89:
                    db:fa:20:ec:3e:4b:d1:be:fc:92:7e:e4:11:da:47:
                    27:91:68:d9:89:54:8c:63:57:0a:a6:28:48:26:4d:
                    99:c0:1c:d0:fc:f7:28:21:d3:7c:a8:74:7d:b0:39:
                    bb:44:f3:fe:ae:53:4f:09:6a:eb:a2:cb:30:81:60:
                    0a:b7:08:2d:35:93:39:52:a4:67:22:61:ed:89:c7:
                    04:03:38:4d:dc:c5:49:48:af:e9:5a:2f:2f:2e:34:
                    74:fd:79:20:1c:e8:40:6a:cd:14:83:30:e0:c0:b5:
                    cb:2d:b1:8d:d7:31:56:38:d7:6b:a0:66:e2:b7:ec:
                    51:f9:46:8f:09:9f:49:cd:80:70:b6:37:75:31:08:
                    ec:2e:75:07:47:d7:7b:cf:a5:69:58:b6:f3:b6:2b:
                    20:d2:53:0b:0b:ff:63:ef:6b:30:a6:f9:79:9b:57:
                    5d:5b:35:16:0f:9a:60:fe:56:f2:92:f1:57:6e:5e:
                    b3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:88:DE:66:C0:EC:74:D9:2C:27:6A:3E:A0:00:23:11:FA:EC:29:35
            X509v3 Authority Key Identifier:
                keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/D6C060C27E1811EEB9B4FE4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:8b:39:e8:f2:15:bd:bc:d4:8a:37:e1:70:07:e9:f4:df:9e:
         a7:46:a0:1c:76:b4:7c:36:b7:b4:5e:38:96:fe:4b:99:75:8f:
         35:fe:67:db:fa:e6:16:cf:aa:b2:e6:00:a8:34:7a:11:83:52:
         19:2d:08:d4:c4:76:fb:14:9f:9c:f3:27:49:f6:21:ef:80:9b:
         22:4e:f7:c8:6c:55:72:f8:d2:99:b0:4c:f0:bb:8c:7c:d7:07:
         7c:22:e9:01:f8:0d:2e:ca:c6:a4:41:d1:60:0c:56:8d:76:ed:
         ad:0f:b5:3b:e8:78:09:04:16:80:79:8c:35:69:67:c6:46:a9:
         43:ce:1d:6e:ee:de:d6:1a:04:b4:1a:8f:78:67:ee:09:7d:a2:
         2f:78:de:f3:cd:21:28:5a:73:fb:09:4e:7c:bd:79:2b:fc:c9:
         5f:79:37:1e:27:22:87:2d:93:49:69:2d:04:70:9d:e9:c8:77:
         90:f8:31:1e:a0:00:f0:09:0f:47:63:c4:b1:23:16:a0:b6:bf:
         1f:4f:ae:47:ca:ca:39:1c:db:83:e9:c3:58:50:d1:8f:8d:8d:
         c0:38:78:e1:19:85:90:e0:1b:23:c2:52:73:2b:32:4b:38:f9:
         97:a2:58:da:42:51:71:03:95:f4:ed:8e:aa:26:96:cf:9d:86:
         70:e7:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:13 2026 by rpki-client