Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/0B24875C7A4411EB804B7430C4F9AE02.roa
File:                     0B24875C7A4411EB804B7430C4F9AE02.roa (raw, json)
Hash identifier:          +Z0l5rtFf9gejJdRbzGI1Tev7wUao9HHsXdVWsy9gIw=
Subject key identifier:   AC:50:01:E6:F0:79:46:01:F8:C7:77:90:39:EC:7E:CA:D1:29:BC:FB
Certificate issuer:       /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial:       1B8B
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/0B24875C7A4411EB804B7430C4F9AE02.roa
Signing time:             Thu 26 Mar 2026 15:10:47 +0000
ROA not before:           Thu 26 Mar 2026 15:10:47 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138433
IP address blocks:        116.51.29.96/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
                          rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7051 (0x1b8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
        Validity
            Not Before: Mar 26 15:10:47 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c54c76-815b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:2a:e6:ca:83:a1:97:b7:98:c3:83:3c:e2:
                    b8:55:27:28:4f:d1:ab:57:74:c3:b0:52:f4:eb:ee:
                    16:b9:95:e8:e4:d5:3a:80:ef:ba:8d:47:1a:94:2a:
                    de:f6:fe:5c:14:7c:a9:33:83:2c:7b:2b:62:57:cd:
                    e2:e5:ac:d4:c9:48:07:25:d9:1d:f4:37:6d:87:4b:
                    43:70:04:a8:4d:fd:e6:48:10:b8:68:8a:d7:48:fa:
                    e6:74:67:a0:35:40:79:2f:ce:73:84:58:a1:de:50:
                    53:48:63:97:20:d8:64:26:32:e6:a6:f9:6e:cd:7e:
                    c8:16:50:30:75:57:06:87:21:29:87:0b:d7:e2:a3:
                    78:ab:59:31:d3:28:30:68:b5:59:fe:d2:7c:07:65:
                    27:67:f2:58:8f:3f:35:d4:13:1d:41:d3:8b:b4:c5:
                    78:b6:ad:3f:63:70:45:59:53:d2:7c:bb:c4:0d:a3:
                    89:6e:f5:b7:4d:27:75:06:75:d6:08:a8:c8:6f:d4:
                    3b:e2:71:7c:78:cf:61:93:a2:9c:9a:bb:bb:c2:11:
                    a4:b5:a1:a6:03:6f:cf:d7:c8:6b:f2:72:c9:7f:a9:
                    4f:74:a2:83:3d:a0:d5:98:62:34:05:94:84:6d:1c:
                    4a:42:f3:db:84:83:7f:b1:8c:3b:8c:4f:49:b0:f5:
                    c9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:50:01:E6:F0:79:46:01:F8:C7:77:90:39:EC:7E:CA:D1:29:BC:FB
            X509v3 Authority Key Identifier:
                keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/0B24875C7A4411EB804B7430C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.51.29.96/27

    Signature Algorithm: sha256WithRSAEncryption
         c0:bc:87:77:39:e2:9a:30:8a:41:b2:aa:dc:72:26:80:72:2a:
         04:c5:e1:9c:46:eb:74:3f:9b:f7:33:3e:f3:d0:0b:43:b4:b3:
         26:b1:91:9b:a7:ed:e6:46:bf:f1:4c:f3:b9:db:26:1f:03:c2:
         48:df:9d:3a:97:18:91:02:f0:e1:d1:db:02:ec:73:b8:f5:15:
         8d:63:21:c6:56:d8:2c:71:55:7e:88:78:f4:f4:9c:64:d8:85:
         9b:7e:df:33:3a:d4:64:3a:3f:39:78:b2:9a:79:22:d1:74:9c:
         11:8f:2e:2e:e5:f5:60:cf:9e:00:5a:68:29:4e:32:ab:8c:b4:
         62:6a:d5:7a:a9:09:00:19:14:77:68:f7:90:1a:52:e0:0e:58:
         80:47:c6:87:72:29:53:4b:e6:40:10:3e:f9:bf:b9:5b:8e:ad:
         8c:59:1c:88:39:f9:57:33:13:fa:f3:a0:24:06:e6:67:ae:65:
         e6:90:d8:8b:cb:41:68:9e:82:4b:a1:80:39:a6:c9:0f:ef:6f:
         51:fe:e8:e7:dc:19:a9:70:48:b5:1e:e3:eb:61:22:c2:a6:48:
         fd:ed:76:39:dc:6e:d6:e3:49:20:a4:bb:34:1c:cf:85:34:d0:
         66:e8:d6:36:52:b2:d0:25:9f:ed:c7:73:47:f8:7a:13:a9:61:
         35:b9:e1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:50:19 2026 by rpki-client