Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/EE647C1418A411EFBA690F60C4F9AE02.roa
File:                     EE647C1418A411EFBA690F60C4F9AE02.roa (raw, json)
Hash identifier:          QRW89YvyXKuiuVqN3av9FpFxRLwsjZ4Fxr5K/DhmUjs=
Subject key identifier:   FF:42:78:06:FB:24:C4:BE:0D:5B:47:D1:A7:E4:6D:E2:66:4D:9F:14
Certificate issuer:       /CN=A91DC0F2/serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7
Certificate serial:       0169
Authority key identifier: A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/EE647C1418A411EFBA690F60C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:05:35 +0000
ROA not before:           Tue 23 Dec 2025 04:24:52 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152135
IP address blocks:        210.79.168.0/24 maxlen: 24
                          210.79.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl
                          rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC0F2, serialNumber=A0033F4943630DC94E2DDF5F2A6B88E866461AE7
        Validity
            Not Before: Dec 23 04:24:52 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a41d7f-f544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:b5:87:4a:5b:45:62:6e:71:46:a7:74:3d:
                    4d:d4:68:5f:bb:e8:c4:80:dc:fd:87:64:27:4e:e1:
                    94:96:77:7e:ad:33:8a:59:ff:02:e5:92:59:9f:bf:
                    c1:b7:85:88:52:1a:b4:c9:83:ef:c3:17:af:20:5d:
                    1e:a4:51:dd:b7:f2:ad:84:ab:9d:f1:d5:b0:3d:1b:
                    0e:17:14:a4:97:68:82:70:d2:f5:81:21:a8:b1:f9:
                    2c:4f:84:6d:fc:ff:09:3c:76:de:34:22:7b:e4:b4:
                    44:ea:15:a8:55:ee:bf:20:c2:f7:ad:b9:ed:93:48:
                    29:86:09:26:97:15:d0:7f:a5:09:b3:eb:cb:37:95:
                    15:70:b9:c7:4f:08:65:c8:59:83:68:10:49:7c:54:
                    e4:ba:d0:ad:29:33:bd:4d:96:61:a2:33:43:03:2f:
                    9c:21:c6:9b:ee:45:88:e9:dd:fc:ec:7b:65:bf:13:
                    3c:95:10:c5:67:db:c8:4f:5f:cd:47:ab:e5:1f:98:
                    37:c6:35:04:52:eb:cb:bd:4c:38:f6:58:ea:57:bd:
                    c6:68:f7:fd:a3:0a:01:77:29:9b:bc:95:12:aa:60:
                    34:c5:3b:d5:50:33:21:b6:24:08:15:41:06:f0:db:
                    54:5c:4f:06:78:de:db:2a:7c:90:17:00:7d:7f:ac:
                    f6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:42:78:06:FB:24:C4:BE:0D:5B:47:D1:A7:E4:6D:E2:66:4D:9F:14
            X509v3 Authority Key Identifier:
                keyid:A0:03:3F:49:43:63:0D:C9:4E:2D:DF:5F:2A:6B:88:E8:66:46:1A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/oAM_SUNjDclOLd9fKmuI6GZGGuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAM_SUNjDclOLd9fKmuI6GZGGuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0F2/7F33EE24FD7E11EEA1B3535CC4F9AE02/EE647C1418A411EFBA690F60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:5a:77:5f:fe:3e:d7:68:21:f3:f8:32:70:32:64:0e:2a:81:
         32:e5:7e:5a:18:7e:a9:1e:b1:7e:75:49:0e:ae:a9:17:c9:12:
         62:7d:d2:b7:96:9e:04:02:01:df:2e:81:25:69:31:16:43:68:
         bb:cb:42:b3:b2:9b:9b:cd:97:4f:dc:c0:28:ad:7c:eb:ac:30:
         8a:5b:98:4e:69:90:d6:4d:39:ae:4c:87:de:37:da:a5:3b:38:
         2c:df:63:10:db:d7:8f:c6:c5:f2:6a:e6:b9:e2:cb:a1:02:b4:
         23:f2:66:a7:37:0d:f0:7c:c7:99:d1:24:ee:f1:64:55:18:9f:
         ae:49:33:e7:29:e0:40:07:32:23:b6:f2:76:a8:c4:3b:fe:3b:
         4f:ba:5f:4d:40:b7:5f:63:0d:88:dc:e8:4d:68:b5:e2:f8:e6:
         17:14:5e:88:ef:92:2d:38:f0:3f:a6:9e:31:6b:a2:84:e2:07:
         88:8b:4c:bf:bc:d9:8d:a5:9e:fe:dd:9a:08:db:57:eb:89:15:
         e2:98:e6:36:a7:a1:19:85:6f:9a:af:f7:54:f6:25:91:5e:04:
         c9:72:d5:52:30:c9:7b:80:a7:48:91:1d:58:03:00:49:c2:10:
         8a:fe:dd:0e:57:01:fa:0b:6b:b4:17:cb:78:bc:3e:c4:9a:f2:
         86:1a:5b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:08 2026 by rpki-client