Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/FD5EB4204DA711F1ACB8DF32A6833773.roa
File:                     FD5EB4204DA711F1ACB8DF32A6833773.roa (raw, json)
Hash identifier:          GHtMetWx7wnYIWlxkSxWAYA+hPFdlvAtLs/Y4SiXxqo=
Subject key identifier:   A6:46:E1:5E:CC:9F:92:B5:D5:2F:DD:2F:7F:74:C3:21:75:93:7A:BD
Certificate issuer:       /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076
Certificate serial:       0CD3
Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/FD5EB4204DA711F1ACB8DF32A6833773.roa
Signing time:             Tue 12 May 2026 02:12:13 +0000
ROA not before:           Tue 12 May 2026 02:12:13 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4134
IP address blocks:        203.207.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl
                          rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3283 (0xcd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076
        Validity
            Not Before: May 12 02:12:13 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a028c7d-e347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ea:14:6c:73:56:9d:62:42:b6:31:16:6e:cf:
                    97:c5:d8:32:45:6a:b5:d5:a8:d8:b5:62:da:ed:e1:
                    1b:dd:63:0f:3f:8a:19:9d:19:e8:e1:f3:3c:fc:b9:
                    41:06:80:0c:c8:19:11:f1:3b:64:b7:78:96:ea:be:
                    ad:13:93:42:95:e1:b2:d8:4e:a1:cc:4a:30:8d:22:
                    e9:bd:cb:ea:ce:c0:a4:fa:9f:a1:b7:9b:b9:9b:53:
                    ca:96:e3:8f:c3:2e:78:7e:9f:33:41:74:f0:ac:61:
                    7f:1e:32:5c:83:dd:ec:d9:cc:7b:4a:b4:d2:82:b2:
                    1e:25:a8:bc:07:8f:b6:e7:28:66:7d:15:64:ea:6c:
                    3f:fb:a4:2c:c7:83:44:05:2d:50:75:6c:b0:d3:4d:
                    86:a0:b2:6d:b9:57:89:b8:a8:ec:53:65:3a:31:05:
                    81:19:0d:f7:34:c4:26:9c:70:6f:e2:53:47:e6:14:
                    16:ee:de:f1:a0:1c:59:7e:dc:a1:de:b8:00:c5:5e:
                    f9:f6:f8:9a:35:76:3c:24:e2:17:75:1f:f5:28:54:
                    cb:ee:13:fd:6b:27:3e:41:4d:66:49:b8:4c:bd:77:
                    14:ea:b1:91:34:9d:fe:cc:01:79:7b:e1:a4:02:f8:
                    62:c9:67:0b:a5:0f:68:73:cb:01:76:07:3b:65:ad:
                    89:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:46:E1:5E:CC:9F:92:B5:D5:2F:DD:2F:7F:74:C3:21:75:93:7A:BD
            X509v3 Authority Key Identifier:
                keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/FD5EB4204DA711F1ACB8DF32A6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.207.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:59:50:5a:6f:4c:de:f2:b6:a8:88:a7:d1:71:dd:34:2a:29:
         56:b1:94:9b:21:bb:a3:19:ed:6f:74:a0:5f:78:da:f5:87:2c:
         49:25:bd:67:9d:dc:69:46:a6:75:65:8e:1c:95:e5:d8:a5:c3:
         26:8f:3d:04:6c:92:26:54:79:94:72:fc:86:c9:73:e8:09:e1:
         f6:63:2d:f9:98:57:07:61:c1:a8:8f:a8:c6:ca:25:47:16:49:
         f7:d7:c1:d1:ad:29:38:db:d1:09:50:48:8f:a2:03:dc:cb:fc:
         d5:7a:4f:f5:cb:9b:34:e1:36:e1:a6:31:fb:69:0e:5c:e8:7f:
         bc:9b:35:16:3a:96:aa:4d:ff:18:cb:88:1e:eb:50:1d:5c:55:
         cc:da:62:b3:1f:97:5f:84:de:81:0c:5d:67:32:bf:4b:d5:cf:
         83:6e:32:bb:58:61:fc:7d:57:94:58:21:5a:94:3c:b2:60:6e:
         40:2b:4a:3a:cf:8a:e4:f3:67:39:00:ce:4c:19:dc:38:f8:5c:
         bd:30:8c:96:e9:b0:9e:a0:20:a0:19:8f:dd:bf:93:bb:97:c8:
         9c:27:25:18:93:28:d0:a7:ff:92:8d:23:b1:99:e3:50:05:3a:
         f1:4c:75:4c:e7:fa:04:ae:bb:b4:88:68:27:a3:8b:e6:53:ea:
         9a:96:20:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:09 2026 by rpki-client