Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa
File:                     19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (raw, json)
Hash identifier:          ejrbn1cXQIOSDIP8FAmGTsCzRd86mlRV6HJ14LG2j6E=
Subject key identifier:   29:19:86:61:63:80:34:5F:B2:2B:F4:E3:3A:EE:34:83:3C:AE:33:C9
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       285F
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:38:54 +0000
ROA not before:           Tue 08 Apr 2025 15:53:33 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     139710
IP address blocks:        203.213.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10335 (0x285f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Apr  8 15:53:33 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a487be-a122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3f:76:9b:fe:a8:04:be:4a:fa:dc:f2:b4:be:
                    23:e9:bc:c7:a1:6f:18:de:75:62:45:8d:db:47:00:
                    df:30:90:ec:e4:2d:83:6e:e2:d3:92:ff:31:62:7d:
                    9e:e8:75:f7:ee:aa:eb:a0:35:7e:36:b7:86:31:a6:
                    57:b8:56:9d:50:41:32:99:91:89:d2:c3:43:73:be:
                    b6:80:11:f9:59:23:f3:60:af:d4:a8:94:5e:de:6e:
                    3c:f2:58:88:b7:1e:82:31:ec:b8:aa:94:9a:5a:07:
                    31:dc:76:60:45:21:bc:88:e6:b0:b8:6a:db:d1:28:
                    a0:89:05:ad:f2:51:43:69:b6:b0:e0:b9:75:6a:07:
                    d2:6d:d9:9b:dc:87:4d:25:52:24:ec:ba:86:24:3a:
                    c9:fc:9c:23:ed:0c:75:0a:f4:ef:a3:d3:62:c3:1a:
                    5e:e6:92:c3:96:2d:78:d7:20:64:78:59:45:b2:93:
                    5b:e7:00:9d:e3:69:d0:64:b5:01:3d:5a:f3:fc:30:
                    33:3a:61:e9:b6:2a:da:46:33:47:c4:60:cb:e1:cf:
                    eb:24:57:03:c5:77:a4:42:5e:03:1c:42:d7:1d:79:
                    60:73:7b:6f:e5:9b:61:06:47:c6:3a:2a:5e:fb:48:
                    94:25:db:37:62:3b:38:e6:45:e7:cb:70:f9:10:5a:
                    89:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:19:86:61:63:80:34:5F:B2:2B:F4:E3:3A:EE:34:83:3C:AE:33:C9
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.213.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:1a:24:d4:df:e8:3c:75:13:9d:5f:2d:7d:78:4f:15:e4:28:
         1c:66:c8:01:a1:e1:ef:68:d8:4c:a9:c7:67:98:05:ba:31:64:
         a2:b2:32:b5:4e:56:95:cf:83:6c:0a:33:f1:37:ea:2f:89:4e:
         8d:0f:5c:c4:02:68:19:20:e9:0a:b8:e9:66:ae:dc:ca:63:55:
         26:07:ad:0c:8e:0b:5a:20:d8:a0:17:31:e1:af:db:ba:ae:73:
         b3:67:80:2c:54:c8:a4:0d:58:a1:af:cd:23:74:3c:0e:a8:2f:
         0c:c4:6b:30:76:0f:eb:c8:60:1b:27:bb:c6:7e:93:75:e8:7e:
         5e:fb:36:66:2a:03:bd:28:21:49:07:01:ec:c9:f2:13:69:51:
         db:da:99:ee:1b:dd:04:cb:41:19:67:ad:8d:3b:eb:49:ae:03:
         49:14:ef:cb:17:f2:86:73:ff:07:f2:2f:6e:2f:ee:6b:20:33:
         43:14:86:30:02:62:ba:b6:46:1a:aa:0b:d5:6e:66:62:b9:b6:
         e0:5d:7e:32:a2:d9:8a:e0:db:29:a8:72:99:d4:96:d0:89:28:
         48:22:c4:78:1d:64:47:74:fb:c2:8a:47:9f:3d:21:ba:08:a4:
         00:42:93:37:ee:14:4d:35:50:19:7c:7a:5d:ee:e3:ac:34:83:
         a0:91:30:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:27 2026 by rpki-client