Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/0E2711E6830711ECB472CA0AC4F9AE02.roa
File:                     0E2711E6830711ECB472CA0AC4F9AE02.roa (raw, json)
Hash identifier:          WguzFNpnFOiKG7d1mZy9kPuySEP+TVOdHsdPXP/TGHU=
Subject key identifier:   A3:75:02:9B:F3:27:19:D3:97:4A:69:10:C0:CC:8A:79:00:36:16:08
Certificate issuer:       /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
Certificate serial:       06EA
Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/0E2711E6830711ECB472CA0AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:42:25 +0000
ROA not before:           Thu 12 Feb 2026 22:19:06 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        203.175.0.0/24 maxlen: 24
                          203.175.1.0/24 maxlen: 24
                          203.175.2.0/24 maxlen: 24
                          203.175.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl
                          rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1770 (0x6ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32
        Validity
            Not Before: Feb 12 22:19:06 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a47a81-be70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:f3:cd:9a:36:6c:93:44:01:1a:8e:da:61:
                    8d:c2:80:84:fd:33:9f:56:7d:d5:09:cc:61:1b:34:
                    e6:ab:79:88:99:a4:93:00:6c:a8:d2:4e:ca:c0:55:
                    57:60:6d:14:75:53:27:e6:51:68:74:3a:f4:1a:1b:
                    25:bd:cc:d5:4f:e9:66:23:af:a7:e8:88:28:98:10:
                    dc:bd:2f:2c:98:ff:97:88:d6:c9:9d:05:99:d0:be:
                    c5:b4:44:17:6e:e6:0d:83:a2:44:56:f7:56:09:3a:
                    5d:7c:65:31:a4:6c:39:79:88:bb:67:be:1d:23:cc:
                    33:97:94:99:1b:a3:53:fe:93:bb:3b:f6:22:49:92:
                    f8:c7:57:15:ee:12:ae:b5:14:2a:57:f6:e6:92:c7:
                    07:c0:3c:90:92:d3:f9:51:bc:fa:82:f8:f8:0e:5e:
                    0f:e3:c9:31:0a:b2:22:ad:39:4c:f3:52:22:a2:7e:
                    bd:ef:4d:83:9e:46:3c:7c:c4:6e:c1:e5:f3:bc:ab:
                    08:a4:2c:ed:a0:07:2b:53:28:84:f0:e5:76:3d:7e:
                    1d:64:5f:8e:1e:75:e0:4f:a8:4b:12:d1:f5:b0:72:
                    7e:45:b4:9c:16:59:db:9a:50:d9:94:18:7c:da:20:
                    2e:50:d8:8d:31:12:7a:35:4b:be:a1:f3:18:de:7b:
                    f8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:75:02:9B:F3:27:19:D3:97:4A:69:10:C0:CC:8A:79:00:36:16:08
            X509v3 Authority Key Identifier:
                keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/0E2711E6830711ECB472CA0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:cc:93:99:a7:50:31:d4:81:25:6a:d3:62:94:6e:93:0d:3d:
         72:eb:af:27:e0:ab:81:07:22:73:79:9f:2a:1a:72:4c:f6:d1:
         8a:ae:ce:55:7f:6c:3a:d1:85:e5:4a:10:a7:97:b9:d2:5b:aa:
         61:09:b1:18:fd:b1:82:22:93:f3:3a:16:63:38:1b:ec:92:f7:
         de:0e:be:70:3e:78:48:0e:b0:31:f9:26:5b:c6:85:0d:27:7d:
         90:24:a3:49:4a:bc:43:fa:a8:a3:62:78:05:22:34:0b:b8:ae:
         fb:98:d9:e6:ef:ac:ce:cc:a1:5f:fa:cc:4a:c7:ef:cd:1a:78:
         6b:66:8b:d9:ca:c7:25:94:1e:9e:44:5b:62:ae:f6:a7:1f:5e:
         1b:59:c4:c8:0a:99:3c:f5:6a:79:ce:f0:88:ab:82:b5:c4:87:
         0b:45:7b:6d:34:f3:2d:e8:9c:0e:58:bd:28:58:ae:d1:2a:65:
         c7:62:0f:ec:73:63:0b:2d:19:0b:e4:be:aa:99:1d:77:db:06:
         dd:6f:7a:4b:37:f3:bc:78:b2:11:48:e5:9e:42:2b:f5:ac:ab:
         33:88:95:57:b0:61:9f:6a:38:dc:48:fc:fc:21:96:8e:11:a1:
         f4:1c:ff:a6:a7:57:c5:cf:65:c3:a0:c7:9a:ec:ca:5b:53:c9:
         35:b1:4c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:10 2026 by rpki-client