Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/E9CC4952DBB711F09A595FAD4E641951.roa
File:                     E9CC4952DBB711F09A595FAD4E641951.roa (raw, json)
Hash identifier:          EtIKzTCAN2VdvSH9vn7Jry+LrXGcko8wl7wpF7oNjrk=
Subject key identifier:   3C:60:EC:EA:B8:92:20:B8:B4:E5:9B:BA:9E:04:DB:03:01:7F:6D:CB
Certificate issuer:       /CN=A91EAE28/serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D
Certificate serial:       2D
Authority key identifier: DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/E9CC4952DBB711F09A595FAD4E641951.roa
Signing time:             Mon 02 Mar 2026 11:27:37 +0000
ROA not before:           Thu 18 Dec 2025 02:19:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18390
IP address blocks:        203.20.60.0/24 maxlen: 24
                          203.28.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE28, serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D
        Validity
            Not Before: Dec 18 02:19:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a57429-50a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2a:6f:f4:35:4e:2e:b1:03:ce:d7:74:e1:45:
                    81:b0:dd:8a:ae:41:ca:66:9e:05:d9:9d:17:b6:5f:
                    a6:70:d2:61:fa:53:5d:d0:4d:c0:e7:e8:0f:98:47:
                    9b:52:f9:79:91:32:a3:ef:f1:f1:94:46:87:31:06:
                    2b:8d:08:5b:f4:09:57:10:0f:e2:68:29:2d:b9:28:
                    11:fc:d2:bb:a4:b3:bd:62:8c:77:70:e1:21:0d:a4:
                    d0:4f:8f:5c:b5:dc:8c:6b:ef:b7:5c:38:e0:29:19:
                    55:14:1e:fc:7a:20:7a:1a:69:31:11:b6:56:c1:03:
                    5e:08:56:a1:67:f5:16:9b:24:9b:62:0f:41:84:96:
                    18:49:8b:93:56:96:ef:02:1e:b6:49:78:f6:1c:ee:
                    26:f4:37:46:a7:94:69:fc:4f:b1:fb:c9:6e:e9:52:
                    55:03:50:dd:61:bc:41:44:c5:d6:11:70:d9:84:9d:
                    a0:81:a4:8a:c3:0f:68:87:3a:53:35:c5:5a:0a:71:
                    5f:31:98:f1:22:31:df:c9:54:af:e8:0f:99:7c:24:
                    c0:bf:a2:36:bb:ee:ac:6e:b3:77:2c:2b:8e:19:db:
                    a7:57:9a:d2:36:56:73:7b:d3:e3:9a:ff:11:7d:d8:
                    89:e8:4a:89:16:3d:bf:40:c1:f0:0e:6b:0e:76:5b:
                    12:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:60:EC:EA:B8:92:20:B8:B4:E5:9B:BA:9E:04:DB:03:01:7F:6D:CB
            X509v3 Authority Key Identifier:
                keyid:DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/E9CC4952DBB711F09A595FAD4E641951.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.20.60.0/24
                  203.28.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:d3:f8:46:e8:f2:98:9c:3d:6e:34:33:00:c6:68:96:a6:f1:
         d0:2f:2c:a1:ba:b3:24:3b:f8:d7:71:a1:41:f7:cd:33:7b:b0:
         2e:c2:ac:04:9d:78:bc:e9:c5:65:c1:79:cb:2e:35:dc:9e:3f:
         a1:76:d0:7c:60:67:47:d7:58:ec:82:1a:8e:5f:72:45:cf:13:
         e3:c3:73:b6:cb:bb:65:39:64:6c:f0:7b:ff:37:c2:c4:4a:08:
         8d:6d:c1:7c:8f:7f:2a:71:e2:c2:0e:5a:2d:0d:22:b9:84:26:
         27:d7:b5:02:c7:77:25:94:4d:a8:0d:f7:f9:7c:95:78:f1:8d:
         88:f0:82:35:a3:c3:24:15:9b:b7:bc:7b:40:ca:2e:c9:83:b0:
         24:52:87:12:b7:f4:72:bd:60:7c:82:44:47:37:7a:8e:da:04:
         68:f3:8a:34:0b:c3:ce:8d:a6:2a:25:a1:dd:96:e7:5d:a4:67:
         6a:64:1c:a5:e5:30:f1:75:c3:a2:74:d6:1a:c7:6f:88:6d:85:
         16:21:ef:5c:47:3d:b8:7c:9b:a5:29:b8:2e:ff:c8:0c:d3:9b:
         d9:27:e8:ec:d8:96:a8:eb:90:c8:8a:bf:9e:66:ed:c3:71:24:
         bb:d4:de:9d:8d:ca:24:91:f3:13:c0:87:3b:ad:40:29:98:89:
         0a:41:f3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:00:57 2026 by rpki-client