Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa
File:                     45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa (raw, json)
Hash identifier:          0nz7vF2PQ3K7o56KxyU01DvG8c4KXrrihtD0h2snQrw=
Subject key identifier:   3B:E5:F2:01:3D:B0:84:E6:64:57:A0:95:CA:C3:8A:5D:F8:33:C6:F9
Certificate issuer:       /CN=A91D65E6/serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
Certificate serial:       0169
Authority key identifier: EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:32:26 +0000
ROA not before:           Fri 11 Apr 2025 05:11:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152675
IP address blocks:        203.62.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl
                          rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 04:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D65E6, serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
        Validity
            Not Before: Apr 11 05:11:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a59f7a-28e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:27:c6:41:dc:ae:b3:e5:f9:d3:2a:c7:e6:
                    38:07:97:12:3a:60:59:61:9d:22:be:d3:56:5b:17:
                    f9:ee:38:15:72:c1:f7:a1:8c:c7:e3:44:a0:d9:12:
                    4c:f4:5a:d0:a4:6e:05:ba:45:b4:5c:d4:40:65:11:
                    9f:ca:e8:a7:b3:d3:d9:bf:a5:5e:a8:5e:f8:dd:01:
                    96:12:1b:82:eb:9e:9d:37:d8:ec:32:f5:78:2b:3f:
                    ef:ca:e7:e3:dc:5d:d5:38:02:19:4b:8c:5a:7c:e1:
                    fb:87:cf:92:df:44:5b:53:fe:55:7c:75:6d:e9:9d:
                    9b:07:88:85:0f:00:2e:e1:96:3b:9d:87:36:ba:29:
                    3f:83:49:fe:5f:f7:d3:b9:85:43:2d:36:4f:5d:3c:
                    e4:ce:6a:1d:71:e1:d3:56:f4:5a:60:2a:f1:b1:f9:
                    a9:34:e8:4a:32:d3:34:d0:0d:ce:85:9c:09:75:aa:
                    ce:80:98:61:ca:f1:25:1a:ad:0e:7e:f3:1f:8a:cc:
                    a7:c1:06:e8:c7:fd:0d:e8:86:75:42:d9:9e:48:df:
                    87:88:ed:e8:8f:52:d2:30:7a:ec:43:58:a5:54:cd:
                    40:22:0e:d0:11:ac:12:14:ec:c0:fb:6a:22:94:b7:
                    6f:0a:4f:ef:54:13:ef:6f:99:c7:14:4a:35:f0:4c:
                    42:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E5:F2:01:3D:B0:84:E6:64:57:A0:95:CA:C3:8A:5D:F8:33:C6:F9
            X509v3 Authority Key Identifier:
                keyid:EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.62.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:34:b7:d2:9e:03:71:e7:65:ca:79:f4:2d:bb:87:0b:ec:82:
         6e:cf:77:36:5a:0b:f4:ff:8d:16:0d:70:f2:a6:35:2e:28:c6:
         d5:14:83:f8:b9:28:ca:53:d4:3d:32:50:1d:18:79:16:73:09:
         4e:53:b5:22:0c:99:8e:50:cb:59:32:bb:4d:8f:1a:2b:fc:c2:
         ec:8a:e8:9c:aa:5a:c0:e2:14:5b:29:a6:a4:8f:05:b8:04:28:
         94:d3:9b:f5:cb:45:cc:70:77:a5:bf:88:82:a7:65:ff:6f:d6:
         2f:9a:c1:db:55:12:21:c9:e6:b4:78:aa:0b:96:65:3f:d5:2a:
         31:3f:11:b6:da:b9:2b:6c:98:ff:6f:41:3b:eb:89:99:8e:14:
         f1:55:30:6d:4a:ba:da:af:34:66:4f:c6:e5:cb:0a:6a:42:b9:
         ee:f6:ad:81:5d:e2:17:cd:8d:70:4f:0c:4c:29:b0:d2:ec:96:
         1d:51:1d:c5:7e:5d:c6:1a:92:f4:b7:07:b1:d5:68:41:16:f0:
         04:67:f9:98:d2:21:86:80:23:2b:33:57:fb:72:6b:47:68:7c:
         3d:de:76:71:67:0a:f9:01:bd:49:20:cc:33:ef:30:50:a8:ba:
         4a:cb:40:a8:20:3b:6a:28:24:79:a4:40:71:51:ca:39:9a:19:
         70:2e:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:39:51 2026 by rpki-client