Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/70F3668238F711EFB4132D26C4F9AE02.roa
File:                     70F3668238F711EFB4132D26C4F9AE02.roa (raw, json)
Hash identifier:          J+hvCkdt6g/OaFOvzPdZIrEAlI39zR1KbhhXWY3YwWA=
Subject key identifier:   F1:34:76:90:81:DF:BE:D8:05:38:40:9C:EA:B7:FD:2B:68:A3:2D:81
Certificate issuer:       /CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193
Certificate serial:       0142
Authority key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/70F3668238F711EFB4132D26C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:18:09 +0000
ROA not before:           Thu 23 Oct 2025 07:19:38 +0000
ROA not after:            Sat 30 Dec 2028 00:00:00 +0000
asID:                     151953
IP address blocks:        203.19.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl
                          rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 04:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6FD6, serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193
        Validity
            Not Before: Oct 23 07:19:38 2025 GMT
            Not After : Dec 30 00:00:00 2028 GMT
        Subject: CN=69a5aa30-3711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:17:fa:91:87:0f:61:22:1a:e9:81:c0:7e:
                    e2:12:4f:7a:f4:87:16:79:36:1d:0a:9f:51:59:cf:
                    c5:a5:ff:0f:dc:84:3b:dd:fc:f0:5c:cf:1a:7e:b1:
                    10:16:e5:1e:bb:d8:a5:a8:fd:d5:f8:da:0f:5d:4b:
                    41:17:fd:cc:97:33:a5:a7:b8:1a:0a:d9:1f:3c:f5:
                    75:33:57:b9:27:87:6e:6b:7c:cb:e0:2f:66:9e:96:
                    c7:e0:ca:0c:34:9d:f7:2e:95:ed:d1:46:b0:b6:21:
                    5c:41:21:af:3d:71:f8:cf:d3:e4:a1:fa:bc:0e:3b:
                    0e:55:24:92:37:ad:ec:d3:7c:ae:e6:b7:09:df:d8:
                    24:f3:f2:69:fa:48:71:5e:e3:c9:81:43:a1:cb:53:
                    e9:1a:15:0f:d2:9c:b1:6c:44:46:25:e6:cc:3c:a6:
                    b3:ab:81:f0:11:23:55:cc:ea:19:07:f6:cb:f8:20:
                    15:88:d7:9f:80:23:88:95:b3:d8:22:0d:a6:23:0a:
                    f2:a2:61:15:26:5d:86:d4:70:42:9a:9a:5f:b6:12:
                    4c:d5:97:fb:c8:15:f7:8b:55:24:4c:67:51:65:06:
                    58:bd:40:e5:62:ab:59:83:92:93:6a:b4:97:73:c3:
                    82:cc:4a:89:a1:3f:99:57:c8:f1:a3:4b:fd:40:3a:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:34:76:90:81:DF:BE:D8:05:38:40:9C:EA:B7:FD:2B:68:A3:2D:81
            X509v3 Authority Key Identifier:
                keyid:E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/70F3668238F711EFB4132D26C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.19.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:37:59:4d:07:19:82:14:d9:36:ea:ee:4e:56:b3:a8:f1:59:
         af:5a:a3:69:b3:1c:40:59:8a:a6:00:e0:48:76:d0:93:b3:92:
         7b:47:07:3e:5c:7c:38:b3:10:05:69:1f:43:9e:29:2f:dc:09:
         41:8a:82:4e:b1:b6:54:dd:69:0b:17:ec:71:06:f2:9d:5b:75:
         42:86:19:f6:2e:7b:d6:76:b9:4f:71:89:e9:da:31:16:5f:4f:
         f2:b1:07:bf:89:03:09:1e:aa:fa:16:1f:2a:f7:23:dc:93:24:
         4d:c8:15:d7:ac:15:00:32:35:47:8a:f5:7c:80:42:f4:4f:0b:
         c4:3b:34:f7:05:a2:3d:b2:1d:61:f8:fc:39:d0:d2:e5:05:9a:
         2e:b7:df:66:39:ea:d9:63:c4:c9:d7:17:1c:33:5c:65:dd:9b:
         eb:32:26:16:89:fb:06:e1:05:d4:08:73:04:4a:1e:5d:82:47:
         9c:5c:a2:5f:b2:19:e3:6b:dd:6f:15:2c:ff:a4:88:cf:7d:63:
         64:9e:d5:87:77:73:e7:ab:81:23:6b:c0:c3:f9:78:36:56:07:
         fc:46:99:0d:b1:dc:e5:a2:53:01:db:92:33:00:0e:29:ad:9d:
         eb:34:05:1a:5a:87:65:57:52:91:a2:3c:d2:74:42:05:43:a8:
         11:50:17:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:11 2026 by rpki-client