Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/584BBFB03B7811F099AF3F55C4F9AE02.roa
File:                     584BBFB03B7811F099AF3F55C4F9AE02.roa (raw, json)
Hash identifier:          TIY6gyAp3NwOI0omiLD20nrzYuDIOBYf89hc7GdDNuw=
Subject key identifier:   06:76:0F:CE:04:83:99:C5:9E:64:C8:6F:77:17:0D:C4:57:EE:F1:CA
Certificate issuer:       /CN=A91BBA4F/serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
Certificate serial:       99
Authority key identifier: E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/584BBFB03B7811F099AF3F55C4F9AE02.roa
Signing time:             Fri 13 Mar 2026 06:44:36 +0000
ROA not before:           Fri 13 Mar 2026 06:44:36 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152583
IP address blocks:        157.20.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl
                          rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBA4F, serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
        Validity
            Not Before: Mar 13 06:44:36 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69b3b254-fcaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:62:70:7f:e5:65:32:22:c5:cf:d7:3f:f3:
                    ca:ae:d4:03:c0:33:f3:00:f4:fd:73:6a:15:cf:60:
                    9a:01:8c:8c:26:db:b1:12:76:7e:18:df:38:2b:1d:
                    f1:1a:d6:07:6e:61:1c:ea:e8:56:39:a7:5f:c1:f3:
                    f7:24:7e:09:fc:6a:07:31:56:20:29:6c:b7:4b:5f:
                    63:17:b2:ab:f7:4b:d4:bb:21:bc:28:95:4e:bb:40:
                    fe:3f:9b:0a:45:5f:ca:0f:e7:cb:07:38:42:4f:89:
                    1a:f9:70:85:83:84:21:7a:72:c4:b1:c7:c3:c7:2e:
                    6f:91:02:cc:40:75:e2:43:f9:62:1d:3f:65:66:d2:
                    2b:f9:ad:7c:90:47:8f:41:37:a8:06:41:78:43:92:
                    72:eb:1a:d3:56:21:2d:d9:0f:70:84:36:24:fa:62:
                    f8:6c:ae:97:25:56:cc:63:d5:5e:29:44:83:ba:6f:
                    ee:bb:08:38:a0:3e:38:54:ec:ea:6a:ca:58:ce:86:
                    1b:99:73:ba:9c:e9:ac:dd:d7:5b:51:2a:e2:51:05:
                    3f:ad:62:a7:84:8f:24:30:26:35:2f:43:3f:40:ad:
                    c1:94:39:ed:18:95:6d:a5:97:04:9a:f2:c5:c9:19:
                    21:5b:e8:38:fe:9c:14:11:cf:5f:25:bd:20:df:73:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:76:0F:CE:04:83:99:C5:9E:64:C8:6F:77:17:0D:C4:57:EE:F1:CA
            X509v3 Authority Key Identifier:
                keyid:E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/584BBFB03B7811F099AF3F55C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:cb:6b:0c:b9:cc:84:f7:e8:92:4d:1a:0e:90:61:a1:ea:53:
         a0:0e:a6:54:12:67:42:68:0a:7e:4e:4e:9b:cc:82:04:65:13:
         b8:e8:82:45:a4:8a:e0:cc:7f:a1:b8:78:ed:f5:61:b1:53:97:
         96:04:b3:dc:2c:60:ab:5a:6b:d7:50:4a:23:67:d8:24:50:60:
         f6:f4:ff:5a:53:23:37:e9:16:24:40:2b:a2:20:95:16:5a:e4:
         0b:76:09:c1:87:94:09:bb:29:ec:c6:b1:40:0a:d0:a6:f7:5c:
         9a:31:6a:46:60:01:d6:e8:32:a2:d9:9f:94:e7:7e:3b:91:2b:
         e4:50:15:66:f2:66:f8:97:2e:37:aa:3e:d6:ad:02:78:65:c1:
         bc:ca:bc:25:1a:3a:fa:15:b3:30:64:b2:e3:d7:d5:c3:a1:1d:
         fb:47:75:bf:15:61:c8:a2:a4:7f:95:e9:29:ca:7d:75:36:17:
         2f:4f:e5:06:88:72:e5:68:3f:2b:2e:68:13:3b:e9:a2:f8:a6:
         d9:19:ba:ce:5e:40:17:57:4d:ea:53:86:1d:05:c4:78:c4:07:
         c8:38:16:26:26:52:1b:1a:5f:b1:53:ec:92:3b:e3:81:66:c6:
         2b:23:ca:2c:64:b3:01:0b:8b:c6:2f:8e:71:90:1c:ff:15:e3:
         5a:1a:ad:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:13 2026 by rpki-client