Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/A40873CE7FB811EB82018D29C4F9AE02.roa
File:                     A40873CE7FB811EB82018D29C4F9AE02.roa (raw, json)
Hash identifier:          t6apfvlYJvqq9FJWUtI8eDXqztkm176ohKOkUYdVlcw=
Subject key identifier:   B7:5F:C3:FA:30:7A:DA:49:A8:32:29:C6:91:65:C2:1E:C1:E5:12:09
Certificate issuer:       /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial:       070F
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/A40873CE7FB811EB82018D29C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:30:43 +0000
ROA not before:           Wed 30 Apr 2025 22:33:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     140637
IP address blocks:        194.193.16.0/22 maxlen: 24
                          194.193.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807 (0x70f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
        Validity
            Not Before: Apr 30 22:33:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a59103-40c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7b:5e:62:e1:00:d5:fc:eb:b6:25:69:86:72:
                    29:f4:94:a5:0a:c1:75:2e:f3:8e:7b:fb:37:d3:72:
                    aa:5c:42:09:b6:71:66:a2:51:51:68:5b:7a:7d:b2:
                    8b:ae:d0:9e:fe:cb:12:20:3a:f7:81:bc:05:ef:23:
                    fc:35:6d:67:7f:dc:0d:3f:e1:ac:79:8f:cd:1b:80:
                    c8:ba:73:59:90:d5:fc:9e:a1:8c:a7:1a:5c:b5:dd:
                    c7:c6:e1:fd:f7:a8:0e:f5:18:c0:33:12:a9:71:63:
                    e6:0b:55:ad:e1:22:06:24:f2:ad:55:fe:31:93:54:
                    96:b0:73:3e:45:3a:cf:8c:0c:19:89:85:c9:d8:5c:
                    0c:45:ca:a0:a0:20:0f:19:c6:25:30:4e:b2:3c:70:
                    83:42:b2:ce:32:c6:d5:ab:91:d7:57:55:a3:44:dc:
                    b7:aa:fa:e2:18:42:cd:f4:19:a3:d2:6c:53:57:59:
                    04:df:ea:85:55:ce:5d:be:f5:6a:73:77:e6:ac:ed:
                    d8:c0:a2:10:65:7c:11:34:74:03:22:a2:d7:54:9b:
                    9d:9e:0d:4d:72:a4:03:dd:dc:3d:df:6f:56:f0:a5:
                    17:95:0a:48:83:26:29:55:3a:d9:15:6f:94:5f:8c:
                    62:c8:36:c3:d2:e4:d4:78:cf:35:f0:ad:e2:0e:b6:
                    24:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5F:C3:FA:30:7A:DA:49:A8:32:29:C6:91:65:C2:1E:C1:E5:12:09
            X509v3 Authority Key Identifier:
                keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/A40873CE7FB811EB82018D29C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.193.16.0/22
                  194.193.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:27:49:d8:b4:81:01:1b:e0:7e:7e:32:29:de:01:ad:f5:ad:
         78:31:a1:5b:82:64:33:02:7c:e6:9d:4e:0e:69:67:95:40:a2:
         fc:5f:bf:f4:d2:8d:f3:1f:fc:f1:b9:fe:c0:af:02:2c:b2:8d:
         93:a7:b7:b6:23:05:25:e0:ef:ac:45:0a:48:4d:ba:87:39:63:
         df:d7:43:df:94:0c:c7:f6:09:6d:da:cd:af:76:4b:ba:bb:5a:
         1d:07:70:57:b9:c1:de:84:81:3a:85:93:f6:d2:b8:58:fe:6d:
         0e:3f:0b:b7:f9:cf:c0:a9:89:e1:11:dc:73:54:7e:eb:c6:2c:
         2e:08:4e:3b:06:4b:a3:df:46:fc:bc:3a:1f:00:a5:05:eb:78:
         05:34:4f:0e:6a:05:0b:77:33:7f:10:43:1c:e4:d2:ef:43:e4:
         af:13:6a:f5:80:56:d5:b5:6b:da:53:26:69:57:c1:09:8f:10:
         34:38:88:4d:05:7f:c8:b1:0e:0d:88:9d:2c:0e:29:21:f1:28:
         f3:b1:81:d1:56:ac:88:d6:d0:cb:00:e2:46:95:9b:94:13:84:
         a3:06:67:0d:2f:ce:14:8a:b7:20:28:bf:2d:7c:e1:74:69:54:
         80:ba:15:60:e5:32:13:d5:72:7f:f4:f4:77:63:6f:97:3c:17:
         e5:99:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:22 2026 by rpki-client