Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BE76940057F11F1BBFA6CD7ADEE528E.roa
File:                     0BE76940057F11F1BBFA6CD7ADEE528E.roa (raw, json)
Hash identifier:          6ZHlxBuUbn16eSux/ogpwO6CFNWl05TS7wn4VyI0hlQ=
Subject key identifier:   C6:AF:47:55:48:4B:57:E0:97:40:06:EA:C4:49:0D:BF:1C:1E:B7:21
Certificate issuer:       /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Certificate serial:       0871
Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BE76940057F11F1BBFA6CD7ADEE528E.roa
Signing time:             Tue 03 Mar 2026 00:23:57 +0000
ROA not before:           Mon 09 Feb 2026 06:17:44 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     64073
IP address blocks:        202.36.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
                          rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161 (0x871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
        Validity
            Not Before: Feb  9 06:17:44 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a62a1d-1ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a9:6a:c8:e3:e3:3c:95:d0:c6:ad:49:7c:cb:
                    22:35:1c:3c:50:31:a8:a4:a8:af:7f:b8:82:59:99:
                    e9:48:ad:f3:61:15:24:7b:c4:f0:cf:3d:ed:1e:9d:
                    fc:6e:4a:28:2f:96:b8:81:a4:2e:34:aa:30:a5:14:
                    3d:61:24:c3:7c:54:6f:9c:9e:2e:22:38:4f:e1:31:
                    4d:8f:3d:f5:57:f8:73:78:2f:8b:77:1e:cc:a4:57:
                    ec:90:ef:f8:b6:2c:b7:b4:b9:49:9e:73:86:fa:a3:
                    18:22:f5:e4:1f:e6:21:3a:fe:2e:36:77:8c:c4:68:
                    ac:6f:de:90:6c:03:5a:1e:25:d9:92:a5:03:e5:e2:
                    1f:a4:c3:12:82:31:7e:bd:fc:27:78:c1:dc:52:d1:
                    e0:27:45:18:8a:cd:43:e6:84:ab:75:b1:43:d0:8d:
                    c5:24:71:c7:bc:ff:57:92:bf:fd:f6:df:a4:72:5e:
                    f0:51:7f:76:fb:93:df:b0:c8:e4:68:0b:b0:41:66:
                    06:10:a3:40:19:85:59:c7:67:b7:bf:ea:37:9b:b0:
                    2d:1e:96:c1:aa:03:b8:c3:97:78:58:cc:80:be:6f:
                    b1:fb:c8:49:aa:aa:51:7a:7e:ed:36:37:e7:06:d9:
                    b4:6c:b6:47:ba:fa:db:1f:b3:ba:3f:c9:23:ff:63:
                    57:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AF:47:55:48:4B:57:E0:97:40:06:EA:C4:49:0D:BF:1C:1E:B7:21
            X509v3 Authority Key Identifier:
                keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BE76940057F11F1BBFA6CD7ADEE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:79:bd:ce:e4:d1:a5:01:c6:77:41:85:a4:7f:a5:48:ac:7a:
         78:e8:dc:7a:07:aa:62:4e:36:04:fe:43:3d:ec:16:ee:d2:3d:
         4e:4b:f5:c3:d5:0e:6f:3f:4d:45:1b:ae:e0:b4:a2:4e:b9:af:
         0e:a8:df:8f:9d:9f:ba:a4:2b:56:f0:17:d1:29:83:b5:eb:97:
         8b:5b:23:7f:17:d3:f3:92:29:eb:8a:2e:d5:ef:91:7c:12:a5:
         e0:46:7d:96:aa:55:69:f9:c7:0d:ae:32:c0:b5:bb:13:5e:d5:
         97:48:97:a2:bf:24:04:4a:80:5d:62:78:ad:5c:02:18:61:1a:
         01:b7:5d:de:d9:d1:ea:48:e0:ef:0a:ea:8c:1c:8d:c3:26:79:
         51:01:6a:86:5d:c8:3c:85:a1:db:91:71:c5:af:48:6e:73:e2:
         63:65:03:96:ac:cc:1d:3b:7e:34:8b:cb:79:b8:24:8f:c9:96:
         25:a7:9f:ea:77:dc:25:02:55:a0:0c:15:6b:01:1a:19:ae:86:
         b6:ab:be:01:f3:e4:07:8d:da:e2:70:95:2d:cd:d9:76:a7:b3:
         11:5d:69:db:e8:1b:85:4f:88:2a:76:1d:85:b9:e3:f8:7e:83:
         c8:c0:66:74:50:ff:19:30:9e:13:a5:27:84:d0:9f:bc:63:9c:
         ca:c0:3b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:32 2026 by rpki-client