Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/A18C330A055611F1B80F1E722C3D8C67.roa
File:                     A18C330A055611F1B80F1E722C3D8C67.roa (raw, json)
Hash identifier:          BX80cDVzZBpalgIyEiFZUq6L3s4iGC1yQ7gUj1TwOQ8=
Subject key identifier:   AE:E3:FD:45:90:6F:EE:A6:2B:4A:D3:61:F1:9A:72:3F:AE:4E:09:BF
Certificate issuer:       /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
Certificate serial:       0623
Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/A18C330A055611F1B80F1E722C3D8C67.roa
Signing time:             Sun 01 Mar 2026 18:44:48 +0000
ROA not before:           Mon 09 Feb 2026 01:28:26 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     401362
IP address blocks:        202.170.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl
                          rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1571 (0x623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
        Validity
            Not Before: Feb  9 01:28:26 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4891f-39aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:fc:ff:05:f4:90:93:e7:4e:19:4c:7c:15:fe:
                    c0:50:49:e0:6c:e1:f3:f4:07:3c:8b:6e:3d:ff:19:
                    9c:5b:6c:1e:46:c6:36:21:b6:74:53:21:39:a5:b2:
                    d7:4b:81:ff:05:ff:27:30:bc:f1:ba:0e:47:4a:c9:
                    6d:94:84:2c:d0:76:2e:05:f0:a3:97:bf:1e:f4:ea:
                    54:8e:fe:93:4d:a6:cb:b0:56:dc:89:50:81:90:99:
                    20:50:18:1e:60:20:29:df:b7:63:df:04:3f:9d:df:
                    8f:95:d6:37:f0:f7:b1:df:8c:6a:65:df:0c:10:58:
                    5c:72:1d:30:65:c7:db:48:56:f8:55:b7:c7:2d:78:
                    d5:de:9d:42:cf:5b:c8:df:12:0c:2a:38:a5:b6:ea:
                    93:77:cf:d6:bd:9f:6c:7b:36:b7:d8:ab:aa:22:0b:
                    f9:d1:27:b9:74:2c:4e:cf:ad:ac:0e:9b:39:6c:42:
                    92:c3:70:aa:5f:d4:65:5e:ed:95:22:8f:25:f5:95:
                    34:af:16:b2:26:e8:ce:b1:f1:ad:38:3e:a9:bf:b6:
                    a1:7c:0c:93:de:3a:fe:de:33:a1:70:bc:e7:f3:f8:
                    1a:a2:fe:22:f6:8f:12:03:b1:2d:37:96:56:d8:88:
                    c8:f6:ad:f9:91:96:05:80:43:24:55:94:26:33:38:
                    92:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E3:FD:45:90:6F:EE:A6:2B:4A:D3:61:F1:9A:72:3F:AE:4E:09:BF
            X509v3 Authority Key Identifier:
                keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/A18C330A055611F1B80F1E722C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.170.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:0f:83:2a:23:29:4b:eb:eb:49:60:ad:05:8e:9d:1a:0c:a8:
         38:c7:a2:3b:8f:31:e2:72:52:c2:d1:e5:e4:e3:26:e6:fd:3f:
         69:69:0b:01:49:e3:4a:d1:7d:a1:56:da:b0:1f:49:f1:89:b1:
         8a:22:16:d5:17:93:94:a0:7e:bf:27:08:13:31:f0:03:e1:cd:
         fe:ea:c2:00:88:d2:3c:38:1b:fc:4e:9b:a0:2e:4a:58:c3:3c:
         56:e2:15:4f:da:c2:9a:b1:d5:c1:70:dd:36:1d:70:42:ec:e4:
         88:5e:e9:6a:0c:56:a8:b9:a5:df:f7:d8:0e:8c:18:77:14:d6:
         a3:dc:66:eb:74:2f:98:fd:5e:2e:7a:f8:7e:d0:77:9a:fa:af:
         b1:96:b9:73:c9:dd:33:21:de:48:62:04:65:41:e1:3e:48:f0:
         50:03:0c:e6:39:2b:2e:09:3a:16:d2:ec:18:44:72:78:27:c1:
         4d:ee:75:1f:52:b3:ce:cf:7e:43:55:eb:27:68:e0:20:a0:3f:
         53:d0:90:3c:7f:ca:af:e2:ea:61:3b:6a:f3:da:fc:e6:b9:7f:
         d5:cb:8a:d3:1a:c2:40:54:72:0b:e2:6f:2e:9c:dd:6b:44:d4:
         6d:40:38:42:6a:fc:2e:cf:c0:59:fa:75:63:4d:d7:3e:2c:c1:
         27:3d:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:20:02 2026 by rpki-client