Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/0BD593E6136D11F09F542C81C4F9AE02.roa
File:                     0BD593E6136D11F09F542C81C4F9AE02.roa (raw, json)
Hash identifier:          vDtAe0YTSyL7kgoQAACefENkKxeqw/YNxKaiQNIECVo=
Subject key identifier:   BE:38:C4:8A:82:8E:09:5B:18:56:17:DD:68:BC:EB:9E:8A:7D:B0:5B
Certificate issuer:       /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Certificate serial:       BC
Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/0BD593E6136D11F09F542C81C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:21:03 +0000
ROA not before:           Sun 09 Nov 2025 04:51:57 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     153526
IP address blocks:        203.77.168.0/21 maxlen: 21
                          2401:e9a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB
        Validity
            Not Before: Nov  9 04:51:57 2025 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a58ebe-e152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:81:da:61:73:ba:81:d4:fd:e3:98:68:b2:
                    d0:77:35:dd:74:0e:82:05:be:fa:fe:72:3d:d7:f3:
                    5d:35:86:61:42:fd:bb:50:72:42:f6:9e:a7:f2:96:
                    a0:3c:8c:9a:fb:6b:80:5e:92:a1:07:a1:82:08:2d:
                    ca:83:09:8b:04:f2:7b:89:66:42:b8:bc:aa:6f:d5:
                    b8:20:fc:b5:16:5f:01:c2:ea:a1:d5:cf:9f:8d:b5:
                    e4:24:24:d7:44:55:2f:13:a5:05:2a:c8:cd:7a:aa:
                    4b:ce:f2:2c:dd:a8:59:36:a4:92:18:dd:09:8a:2a:
                    b6:3f:6d:fb:bd:24:d0:29:47:80:36:84:85:38:16:
                    02:e1:82:d7:21:64:14:e0:bc:99:63:37:b8:f6:56:
                    99:8b:bb:c6:f3:79:66:40:22:ac:51:e4:22:4f:b5:
                    63:b3:6b:48:a7:29:03:c9:ba:fb:1f:1e:1e:0e:9a:
                    e3:83:15:fc:00:b3:74:a8:28:03:c4:0f:ee:a3:6a:
                    a0:38:c9:44:d8:c7:45:88:63:12:9d:0c:6f:e9:aa:
                    17:ab:eb:ec:47:5f:7a:0d:74:dc:8c:08:85:87:19:
                    41:a3:c6:a8:df:ab:1f:ef:3d:58:dd:de:ab:66:83:
                    ba:6e:dd:72:a3:ab:be:6a:c8:5c:88:a0:eb:d2:6e:
                    74:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:38:C4:8A:82:8E:09:5B:18:56:17:DD:68:BC:EB:9E:8A:7D:B0:5B
            X509v3 Authority Key Identifier:
                keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/0BD593E6136D11F09F542C81C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.168.0/21
                IPv6:
                  2401:e9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:5b:26:f5:0f:be:d4:1d:5d:a1:a9:f2:38:8b:71:88:37:6e:
         6b:5e:4e:86:19:43:98:7b:fe:21:3b:35:bf:a3:7c:dd:37:60:
         0c:11:58:d7:fc:3f:39:4c:ca:ff:9c:f3:b1:33:63:b9:8b:8f:
         6d:2c:d4:aa:0f:32:af:d3:d1:3f:1d:a9:9b:49:79:31:2e:31:
         f3:0c:25:61:09:33:01:55:9e:44:09:fb:33:91:91:53:7d:e4:
         01:66:a3:c5:c4:40:89:fc:03:88:de:bf:d4:43:cb:2a:e7:37:
         2d:71:dc:8c:94:11:4e:99:e8:c2:1c:18:5f:55:42:16:fb:29:
         50:21:1e:8c:50:89:85:82:bc:53:fd:3a:4b:18:00:37:f6:34:
         ce:99:3b:cf:24:6e:6c:5f:4d:94:7b:67:56:66:94:f6:7f:46:
         d3:df:c6:33:76:0c:b5:21:6c:60:0c:a1:01:bb:5a:be:7b:c9:
         ae:09:d6:f6:9d:9f:07:dd:e1:d8:57:a8:04:68:d5:ca:e3:29:
         b8:c6:cf:11:42:4a:2a:23:d1:31:31:6b:ad:12:26:70:c2:51:
         5e:b2:eb:a1:7b:5a:a2:19:57:dd:c3:13:48:47:2d:bc:90:f1:
         b7:d9:55:d7:5f:af:02:96:0f:d8:2a:b5:db:04:8c:99:a3:a0:
         0a:6f:e9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:28 2026 by rpki-client