Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/93D86AAED76611EF9C982924C4F9AE02.roa
File:                     93D86AAED76611EF9C982924C4F9AE02.roa (raw, json)
Hash identifier:          h/SmLSS017YgGA7zYy4/07yQ0L9fFewbCCdQwU4sBFA=
Subject key identifier:   28:40:46:D9:45:A2:2F:17:51:7F:E9:1F:9A:B4:89:45:FC:B7:4B:10
Certificate issuer:       /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Certificate serial:       DB
Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/93D86AAED76611EF9C982924C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:15:42 +0000
ROA not before:           Tue 03 Feb 2026 06:28:50 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        203.55.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl
                          rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
        Validity
            Not Before: Feb  3 06:28:50 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a41fde-f51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:05:44:20:59:06:2f:4b:db:0e:9a:b9:c7:7c:
                    6f:21:fa:99:d3:7b:fb:78:1c:ee:67:87:0f:71:72:
                    2b:2e:12:e4:fe:fc:1a:ef:64:65:75:b4:7a:27:fe:
                    df:71:c3:49:f8:53:d3:f3:fb:32:c7:aa:77:5f:93:
                    49:a1:10:74:29:69:b6:d6:52:cb:de:d1:69:29:a6:
                    6d:2d:57:49:20:b1:b5:59:09:1a:65:69:bf:e4:8b:
                    09:df:c4:6b:16:fe:77:bd:ea:0e:e8:7b:88:f3:08:
                    0f:b7:7f:a2:d4:88:9f:4f:29:40:12:28:ed:2a:0d:
                    27:2b:cc:d5:85:03:c8:71:ba:6c:10:75:24:c0:6c:
                    9b:35:a3:ba:d2:6a:2e:0b:05:e1:59:e5:c2:42:8c:
                    16:c0:17:6a:0e:2e:25:f9:9f:c1:c4:34:d7:18:b4:
                    7a:9a:cc:ca:56:f2:1e:a2:0a:54:d8:55:b7:3e:03:
                    8c:db:0d:e9:d5:27:c6:0a:c2:e6:ef:75:8c:bd:5c:
                    01:87:14:80:22:b0:64:dd:95:e7:8c:44:af:b7:8f:
                    22:3e:a8:c0:0b:a2:cb:d2:2e:22:df:85:ed:ba:b1:
                    8f:6a:2f:0f:28:e8:32:2f:4a:7b:6c:2d:b2:74:81:
                    5c:3d:68:b9:34:b7:57:11:f8:50:b7:28:37:a1:41:
                    4c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:40:46:D9:45:A2:2F:17:51:7F:E9:1F:9A:B4:89:45:FC:B7:4B:10
            X509v3 Authority Key Identifier:
                keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/93D86AAED76611EF9C982924C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.55.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:32:74:24:9d:b0:6a:77:37:46:5e:72:33:84:f3:64:4f:bf:
         d1:91:54:30:48:58:81:c7:ca:b5:93:0c:47:89:00:57:bd:35:
         ad:4b:eb:01:1f:64:96:64:c0:2a:33:4d:a2:5c:d8:68:fe:d9:
         9c:ba:b4:c0:af:33:f4:04:8e:91:31:06:f9:79:93:f0:72:e8:
         67:b2:a6:68:93:95:51:69:82:f9:12:5b:a6:76:06:eb:92:7f:
         95:ae:88:c3:93:6f:c2:5c:82:fd:26:13:dd:f8:38:53:44:65:
         e0:27:ae:4d:f9:f3:11:32:a0:8e:b8:d4:b8:57:9f:a6:00:91:
         8f:df:b8:29:11:8b:10:5a:ef:d5:23:d0:1c:2d:b0:ed:11:3d:
         d6:6b:70:1a:df:ce:c4:2c:cf:92:09:77:2e:ac:3d:1a:14:7a:
         8d:5b:94:1c:e9:9f:73:26:38:2b:3b:0b:41:9c:8c:50:26:48:
         f8:04:b7:6c:e2:6c:9a:a9:c0:01:fe:54:9b:05:20:1e:e9:cc:
         91:9b:c5:fb:17:0e:a9:1c:b5:f5:3f:cd:b1:21:ce:1b:cc:33:
         03:9a:f3:77:1d:18:76:c2:ca:a9:de:b9:47:0e:3a:fe:9c:eb:
         8c:79:c0:39:39:65:94:c2:b8:27:34:eb:67:d3:dd:8b:91:07:
         af:04:c8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:06:50 2026 by rpki-client