Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/2A3F7C6A879F11F09F9FAD48C4F9AE02.roa
File:                     2A3F7C6A879F11F09F9FAD48C4F9AE02.roa (raw, json)
Hash identifier:          iC/AbxD41oNNIk1Irlt9oX4UZFYCSbc0qhTqLhLs0qY=
Subject key identifier:   E4:6E:08:D7:70:91:6C:50:B7:69:64:00:27:CA:36:EE:FA:3C:DF:32
Certificate issuer:       /CN=A91C5E1C/serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D
Certificate serial:       5E
Authority key identifier: 76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/2A3F7C6A879F11F09F9FAD48C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:09:54 +0000
ROA not before:           Tue 02 Sep 2025 01:50:13 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     136408
IP address blocks:        203.12.86.0/24 maxlen: 24
                          2001:df5:ff40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl
                          rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5E1C, serialNumber=76078D3619B7C2AFBDDA33AB5363EE5FED7A860D
        Validity
            Not Before: Sep  2 01:50:13 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a5a842-47af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:ab:b1:a7:fc:cc:d5:e1:3e:d2:fa:bf:0b:
                    b1:84:96:62:e1:70:96:f6:de:17:5c:6f:de:da:3c:
                    c7:90:d5:d1:bf:b8:6c:1b:2b:7e:2f:1a:74:90:10:
                    11:cc:76:34:e9:1a:29:e9:39:1a:79:88:13:fd:1f:
                    1f:4c:55:bc:fb:89:0b:21:e9:17:11:a8:96:27:4b:
                    99:bc:70:bc:7e:70:1f:22:07:ac:6a:93:17:f5:6f:
                    9b:60:e9:ec:18:cd:c4:25:0e:84:23:67:7b:ec:3b:
                    6e:cf:6d:f7:0f:4e:35:9a:4f:28:a3:5e:3d:29:be:
                    a8:ae:bf:b5:e5:e8:8f:27:ba:46:df:8f:1d:6e:3a:
                    71:9a:82:fb:44:07:c1:8f:5e:15:b0:49:e3:28:c3:
                    d2:a9:b6:e9:f1:7f:34:cc:c5:f9:b4:59:72:5d:eb:
                    29:96:71:1a:97:5d:af:fb:a5:75:d3:ae:49:ae:68:
                    1f:7c:14:a7:48:de:3f:ce:97:e6:f8:e5:25:b8:7a:
                    56:33:3b:82:a7:22:66:71:26:a2:69:6b:22:f0:47:
                    66:19:38:97:bb:b1:02:b8:7f:91:d6:ca:a7:d9:1f:
                    e6:76:0a:77:05:db:bc:1f:55:08:ee:bb:51:43:57:
                    3a:e4:f3:a7:e9:a1:a3:f1:4f:4d:09:1a:94:cd:e9:
                    f6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6E:08:D7:70:91:6C:50:B7:69:64:00:27:CA:36:EE:FA:3C:DF:32
            X509v3 Authority Key Identifier:
                keyid:76:07:8D:36:19:B7:C2:AF:BD:DA:33:AB:53:63:EE:5F:ED:7A:86:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/dgeNNhm3wq-92jOrU2PuX-16hg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dgeNNhm3wq-92jOrU2PuX-16hg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5E1C/6475893A879311F0B5786346C4F9AE02/2A3F7C6A879F11F09F9FAD48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.12.86.0/24
                IPv6:
                  2001:df5:ff40::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:77:25:3e:2d:5a:21:5e:c0:e8:d4:f7:fe:cc:14:b6:0c:b4:
         47:9e:f5:d5:9b:f8:b9:c0:3f:e7:5d:ed:6f:64:2b:d7:50:a2:
         68:0b:34:10:25:8b:c7:ce:32:e2:53:48:ad:d7:ff:53:fd:4b:
         70:22:2e:69:5f:7c:c4:6e:53:69:9a:4a:20:ad:6b:31:75:d4:
         c9:a2:ee:10:d1:31:bc:22:26:0d:df:90:29:e1:4d:85:23:2a:
         5c:78:a4:49:73:21:f6:cc:0a:1e:51:fd:dc:4a:81:3b:04:63:
         be:c2:ff:8a:ec:0a:78:ab:ac:d3:02:60:4b:51:7d:d6:e3:5d:
         67:65:f0:a5:d3:9a:ee:50:05:5b:1a:ce:b1:14:10:4a:17:35:
         9f:36:8b:03:4e:d6:60:02:12:32:59:30:05:b2:1d:a0:d7:bc:
         f9:88:fe:06:7c:58:4d:2b:7e:29:ce:30:ea:5f:0a:a8:e6:93:
         3f:2d:98:cc:95:f7:00:9e:c3:19:ed:18:f9:67:f6:69:ed:e8:
         f2:b8:32:cb:d2:ad:1d:34:f2:d5:6e:69:1e:e6:f8:9e:cd:c2:
         71:19:ca:79:8f:73:21:0e:7f:18:a8:c9:25:7d:87:e3:76:ad:
         66:46:8f:80:a3:b3:2c:49:8d:89:e1:c6:fd:31:d4:c6:da:93:
         af:4a:93:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:22 2026 by rpki-client