Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/69308C200A9611EABF034172C4F9AE02.roa
File:                     69308C200A9611EABF034172C4F9AE02.roa (raw, json)
Hash identifier:          Og8kggLWLgVMfPp3OlQnblKMTWi+r7xJXzXK2YD03aI=
Subject key identifier:   E3:65:E9:68:E8:47:54:C7:AB:2D:27:FF:8D:72:FC:FA:12:21:5A:48
Certificate issuer:       /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B
Certificate serial:       0CC0
Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/69308C200A9611EABF034172C4F9AE02.roa
Signing time:             Wed 04 Mar 2026 18:23:36 +0000
ROA not before:           Wed 04 Mar 2026 18:23:36 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     132489
IP address blocks:        45.126.72.0/23 maxlen: 24
                          103.84.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl
                          rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3264 (0xcc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC8B1, serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B
        Validity
            Not Before: Mar  4 18:23:36 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a878a8-f1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:c7:40:9d:d6:d0:3a:4b:3d:58:27:7a:75:
                    c1:4b:43:ac:99:1b:07:86:17:56:fc:6f:bb:07:6e:
                    95:69:63:92:51:75:32:ec:a7:6a:7d:a1:c9:3b:94:
                    b4:0a:2a:cc:d0:21:47:67:b9:d2:b3:5c:92:8b:be:
                    42:ca:db:1c:8b:c4:05:77:98:2c:6b:d8:0a:9b:c8:
                    ee:19:2c:73:10:75:fd:74:9e:1d:2a:e2:64:30:d4:
                    5d:6d:ef:cf:6a:03:eb:1f:91:d2:43:73:7b:8a:51:
                    0e:c8:87:72:cf:d5:72:43:51:d4:9d:ca:b8:f9:3c:
                    58:5f:a1:86:1b:57:f7:66:44:34:65:df:62:02:d0:
                    c8:e0:38:e1:50:0e:bc:4a:82:7e:a0:38:45:b6:74:
                    11:00:38:15:2e:8d:d0:86:db:b5:09:7f:d3:1e:33:
                    5a:e5:15:ce:b3:fe:4f:14:7c:8a:ce:76:2d:85:5c:
                    e5:13:41:9d:ba:4a:9c:39:6d:8e:88:8a:3e:89:14:
                    b9:7d:33:cc:54:5e:b4:e5:5b:d5:20:4b:f9:c7:7c:
                    74:02:95:78:9a:20:3d:3f:e3:25:55:42:23:03:75:
                    d3:dd:aa:35:3c:8d:69:48:4b:cf:f9:c3:4d:d6:9b:
                    a6:48:5b:80:1d:5f:63:01:53:1f:bd:ca:86:48:05:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:65:E9:68:E8:47:54:C7:AB:2D:27:FF:8D:72:FC:FA:12:21:5A:48
            X509v3 Authority Key Identifier:
                keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/69308C200A9611EABF034172C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.72.0/23
                  103.84.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:27:79:42:11:43:2d:17:07:11:fc:c9:47:3f:b1:d2:1a:30:
         be:58:60:63:e1:f8:05:e3:05:68:b3:a8:93:e2:88:33:6b:89:
         dc:67:5e:7e:12:e1:bf:7b:81:9d:1b:87:dc:ec:69:40:20:69:
         b0:f8:ea:d5:50:d8:a8:76:bd:e5:64:24:1f:89:74:36:c7:1b:
         ce:c3:02:aa:78:94:0f:0f:91:ed:89:ff:9d:19:e4:2c:88:ff:
         81:fe:a6:01:c2:60:74:f5:cb:20:54:f4:45:48:e5:ab:fd:d1:
         15:34:4f:73:71:b2:d7:aa:9d:16:b1:bc:38:e1:42:d0:3a:02:
         42:17:a0:8f:96:f1:27:23:41:d9:d8:55:c6:ed:88:31:7b:48:
         60:2c:97:1f:f5:ba:17:64:4e:16:36:71:74:25:9c:10:d1:07:
         4e:cf:24:34:51:e2:72:57:a1:65:bc:70:a6:ba:ec:88:4c:9d:
         d0:65:1b:21:fc:3a:8e:81:fa:89:a4:33:99:1c:11:6f:80:c3:
         b6:c1:c8:47:8c:7b:15:cd:e2:69:9a:e4:75:cb:6e:57:2e:c6:
         89:bd:51:47:42:47:b7:15:bf:f2:2f:50:44:e5:b8:9a:16:05:
         c1:eb:32:41:2e:24:f7:23:19:94:e6:51:86:7e:2a:77:12:6a:
         28:58:c3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:36:52 2026 by rpki-client