Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/96F5D26CFD5A11EEA0731E55C4F9AE02.roa
File:                     96F5D26CFD5A11EEA0731E55C4F9AE02.roa (raw, json)
Hash identifier:          gmHCuGwwGdskOl0yDHbyTBMAcXHOfQCNCZcwm8Huj/8=
Subject key identifier:   50:06:42:6F:12:28:37:A9:1E:34:05:BA:DF:55:5B:2D:79:2F:81:87
Certificate issuer:       /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Certificate serial:       0201
Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/96F5D26CFD5A11EEA0731E55C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:15:57 +0000
ROA not before:           Sat 05 Jul 2025 04:09:49 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152687
IP address blocks:        202.37.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
                          rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC86F, serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
        Validity
            Not Before: Jul  5 04:09:49 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a411dd-5c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:41:f9:e4:ba:16:54:93:f7:38:93:ba:d1:
                    ea:15:8c:84:36:5a:07:e9:2b:9f:1e:b2:dc:b3:a6:
                    fa:99:0f:2f:a3:52:d0:99:2d:ab:4f:cd:af:19:42:
                    ea:cc:76:6e:c6:a6:c9:9a:d4:d9:88:4f:c8:50:18:
                    8c:17:79:67:cc:03:b5:de:76:c6:b7:eb:dd:fe:a3:
                    c3:bd:58:4c:1c:6d:e1:8c:a8:06:10:49:ad:b6:4f:
                    9f:ef:f0:e9:58:62:7f:91:a3:68:a9:9c:02:5a:92:
                    16:a5:47:4e:f2:5d:1a:26:15:f5:c8:81:42:cf:78:
                    a9:c0:e6:62:27:54:72:d0:0e:bf:fa:af:17:c8:93:
                    9a:b7:34:91:15:f9:e5:60:bb:41:b4:44:5f:5c:41:
                    22:e2:d8:05:dd:00:6e:a2:c9:d5:0f:4f:14:6e:58:
                    36:f5:8e:cf:3f:44:fe:c6:5f:92:0c:21:08:f2:23:
                    cd:4b:38:97:03:a9:b7:a1:36:82:18:17:b3:95:fd:
                    03:ca:c8:50:30:88:ca:05:e7:22:92:9e:e5:b2:1a:
                    f9:21:99:71:ec:df:42:d2:a7:6c:e1:88:05:2d:6b:
                    2b:16:f2:57:33:c4:d1:b4:af:8d:fb:d0:52:e7:af:
                    c8:54:db:e8:88:46:78:08:bc:17:e7:91:d6:7a:8e:
                    fa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:06:42:6F:12:28:37:A9:1E:34:05:BA:DF:55:5B:2D:79:2F:81:87
            X509v3 Authority Key Identifier:
                keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/96F5D26CFD5A11EEA0731E55C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:c8:9f:3c:fd:07:5c:12:59:05:b5:29:e6:96:20:76:ef:96:
         67:0a:91:f1:52:00:54:b0:44:2c:aa:1a:5a:c4:51:8d:35:8a:
         ae:c6:61:59:bd:05:1b:29:01:e5:cd:3f:39:59:1d:95:8f:51:
         d9:b1:e2:27:5a:44:92:9e:50:46:66:e0:cf:92:56:fb:90:c1:
         10:f3:96:1f:fa:b3:f7:e9:f4:98:b0:36:d9:5f:dd:cd:04:0d:
         e6:47:38:36:ac:bb:43:83:8f:eb:30:21:a8:12:a8:e0:f3:ea:
         c7:1d:02:93:9d:d9:a8:1a:56:1b:f4:6a:c8:23:49:70:d1:94:
         e2:b2:9b:86:45:c5:49:fb:ce:61:21:4a:77:1a:98:a6:7e:72:
         6c:06:4c:c3:eb:f6:e5:c7:6d:11:fd:d0:c3:50:fd:4c:51:a2:
         83:11:2a:a5:a4:af:8b:62:ff:42:f9:e7:93:df:4b:65:3c:80:
         49:d4:4e:27:25:d7:25:11:63:ca:19:7e:ad:ff:99:ea:5f:bc:
         be:4c:85:e0:59:8f:6c:08:c7:ec:49:31:44:21:ed:18:4e:05:
         16:b1:0c:36:4d:de:a0:9f:20:6c:7d:75:e2:4a:e3:59:d5:64:
         fb:00:bc:09:01:22:25:9f:13:04:86:2a:9c:ac:dc:fc:34:d3:
         d6:1b:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:40:56 2026 by rpki-client