Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/047E1E9C341C11EE84F4D52CC4F9AE02.roa
File:                     047E1E9C341C11EE84F4D52CC4F9AE02.roa (raw, json)
Hash identifier:          EAtID2r50bcuRZVKtp+bEX8FvFjLB8tjThINGgwdwIA=
Subject key identifier:   D2:52:1E:1B:93:A9:30:07:83:9A:F5:11:EA:77:14:E8:4B:5B:74:6B
Certificate issuer:       /CN=A91ECE62/serialNumber=89027890033D5D623BD4E43986E880F6AB138494
Certificate serial:       020C
Authority key identifier: 89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/047E1E9C341C11EE84F4D52CC4F9AE02.roa
Signing time:             Tue 05 May 2026 03:34:20 +0000
ROA not before:           Tue 05 May 2026 03:34:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        202.36.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl
                          rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECE62, serialNumber=89027890033D5D623BD4E43986E880F6AB138494
        Validity
            Not Before: May  5 03:34:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f9653c-588d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:90:b2:a1:95:0d:3f:48:60:48:95:75:8c:c2:
                    3c:cd:d0:67:9d:7d:da:53:69:70:f2:76:0f:e8:7e:
                    b1:f6:10:96:fc:e6:ed:b6:8a:4f:16:87:31:23:8d:
                    88:b4:9f:20:38:43:28:fe:df:d4:da:d9:88:8e:18:
                    df:4f:ba:fe:5f:79:fd:03:09:c8:cc:94:14:ee:aa:
                    e8:c0:18:d2:65:1d:4c:70:ab:cd:34:19:98:1b:e4:
                    8a:80:2b:b2:49:2e:ac:a6:f9:0b:b3:76:b5:35:56:
                    b8:a5:5f:94:ed:78:9b:62:bc:4f:9f:c1:f5:04:4c:
                    fa:7c:62:fc:28:c3:7d:b7:4a:79:c2:7e:77:fb:bb:
                    96:53:60:f3:f3:a3:60:97:d2:26:9a:97:51:e7:5c:
                    8b:b0:60:a0:d8:7e:a5:49:0d:64:49:0d:ec:e2:70:
                    eb:0f:09:2e:da:e8:34:20:10:15:24:e3:3a:ad:ea:
                    24:64:f4:0b:0b:2e:20:92:11:94:7d:56:35:b4:4d:
                    5c:5e:75:b0:00:ac:83:12:18:8f:b3:b1:99:97:05:
                    e7:db:0a:fe:ca:d9:43:0c:56:54:3f:19:a6:23:83:
                    05:fe:07:b9:67:34:f4:4d:44:d9:f3:34:77:5b:e9:
                    45:97:1c:30:7b:3b:8a:3f:f5:0b:c5:c9:5a:4e:dc:
                    24:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:52:1E:1B:93:A9:30:07:83:9A:F5:11:EA:77:14:E8:4B:5B:74:6B
            X509v3 Authority Key Identifier:
                keyid:89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/047E1E9C341C11EE84F4D52CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:a5:c2:86:1d:6d:92:b1:a5:aa:19:0e:c7:0b:93:2b:d0:30:
         74:e3:3a:2e:8c:5a:be:33:a1:62:d7:2e:40:8c:79:12:aa:f2:
         2d:5f:26:96:6f:49:77:b6:82:1f:76:53:c8:65:9c:c7:c8:d5:
         2e:3e:cf:c0:ca:5b:13:87:b3:8c:ad:fe:d1:ad:f5:fb:a5:ca:
         97:d9:22:75:1e:a3:8c:c8:60:a9:c3:93:5f:dc:26:83:4a:46:
         c2:d3:bd:23:cb:fe:48:e4:f6:96:7b:42:64:c8:43:b7:9f:a0:
         00:5a:8d:cb:e5:62:e2:dd:77:29:f0:e8:fa:e0:81:f7:43:39:
         fb:bb:33:14:3f:1d:1a:a2:4f:ec:c9:97:4c:8b:c6:dc:40:e6:
         08:26:dd:e5:51:35:9b:0c:25:1d:06:8f:67:e7:28:eb:46:27:
         99:77:79:a1:ea:38:08:59:5e:d7:e1:75:a8:dc:7a:a8:db:1d:
         48:3b:3b:2f:e3:bb:35:59:91:82:4e:b4:92:11:18:fc:02:8b:
         5f:d3:f3:88:5d:6c:19:d8:83:f6:30:88:35:b3:04:17:f5:6a:
         76:97:42:c4:e0:84:0a:08:2f:af:72:bb:2c:4e:07:ad:a8:bb:
         72:65:f1:b2:7b:e7:d1:b1:36:9e:e5:55:34:fc:d1:a0:73:a2:
         e3:e8:9a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:37 2026 by rpki-client