Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/71A9485224D311F1BAC6A199AA833773.roa
File:                     71A9485224D311F1BAC6A199AA833773.roa (raw, json)
Hash identifier:          YplJkElj+wTMuvLaT6qEqUoRVs6FwFRdfKKxyCyC/nM=
Subject key identifier:   34:3F:40:9F:C0:95:56:36:04:76:C4:86:99:84:69:2C:12:0D:5F:42
Certificate issuer:       /CN=A91F8949/serialNumber=7D3836CD42A7EFB35AB464A500E2625715D5CEA3
Certificate serial:       06
Authority key identifier: 7D:38:36:CD:42:A7:EF:B3:5A:B4:64:A5:00:E2:62:57:15:D5:CE:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/71A9485224D311F1BAC6A199AA833773.roa
Signing time:             Sat 21 Mar 2026 03:11:54 +0000
ROA not before:           Sat 21 Mar 2026 03:11:54 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     133139
IP address blocks:        45.126.148.0/22 maxlen: 24
                          110.34.56.0/21 maxlen: 24
                          123.108.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.crl
                          rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8949, serialNumber=7D3836CD42A7EFB35AB464A500E2625715D5CEA3
        Validity
            Not Before: Mar 21 03:11:54 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69be0c7a-7ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:98:5a:86:67:fd:0b:7a:18:86:5b:84:da:
                    00:a9:70:7f:a5:ca:1c:c8:a2:6e:0f:87:8f:d5:19:
                    c9:32:c1:51:f5:82:88:e2:21:66:ad:09:66:76:3f:
                    35:e2:bb:90:c4:ec:bf:e5:e9:b1:07:6c:4c:07:b0:
                    02:8a:e5:28:e7:6b:bd:51:a5:2f:d9:a3:b8:ce:47:
                    7e:7d:42:45:0f:04:8e:ba:d3:80:5e:bf:cf:73:8c:
                    0a:28:de:86:09:fe:f9:12:bd:39:ca:ff:a0:33:1c:
                    e5:10:af:e4:f0:11:08:99:70:12:a4:62:ed:02:c9:
                    0c:17:30:eb:63:36:c8:59:0d:40:de:41:88:c5:08:
                    b0:33:80:21:0c:29:e1:4d:db:50:06:6a:1e:ec:14:
                    c3:07:66:86:78:ed:44:72:81:9f:a6:4b:e6:41:6f:
                    64:ea:7c:b8:54:61:1e:dd:27:05:3c:e2:43:f1:45:
                    3c:87:a0:5c:6b:d0:5b:1a:b4:73:a5:94:05:27:c9:
                    e9:16:ce:8d:6d:4f:77:80:5a:ba:19:ec:16:d2:67:
                    f6:f6:7e:4b:ad:ba:1a:b0:78:36:c3:34:ed:25:16:
                    4e:86:53:99:53:ab:e7:e1:0e:4f:26:3c:45:6b:60:
                    ca:ba:ed:f3:dd:8f:bf:28:5d:30:59:59:a3:17:ed:
                    02:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3F:40:9F:C0:95:56:36:04:76:C4:86:99:84:69:2C:12:0D:5F:42
            X509v3 Authority Key Identifier:
                keyid:7D:38:36:CD:42:A7:EF:B3:5A:B4:64:A5:00:E2:62:57:15:D5:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/71A9485224D311F1BAC6A199AA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.148.0/22
                  110.34.56.0/21
                  123.108.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:42:2b:5d:ef:aa:54:82:88:29:d3:16:43:f7:71:ee:b4:c2:
         1e:10:51:bb:bb:cc:83:80:f4:de:5f:1a:b0:0d:4d:8b:9e:fa:
         2a:9e:09:53:14:49:52:0f:bd:0b:b1:95:a0:8c:82:99:24:9a:
         79:94:ad:a0:56:4f:fc:da:0a:57:fd:99:3f:6a:8f:f2:2a:d1:
         5e:9b:b7:32:b7:67:3d:16:bb:d3:f6:6f:e6:5b:74:15:cf:88:
         d0:0d:84:53:1d:f1:57:5d:11:63:90:ed:f2:b4:f8:34:81:10:
         bd:3f:f6:af:ae:65:64:4a:9b:64:78:92:88:b4:57:5f:fb:39:
         2e:ef:8d:7a:9c:2d:46:07:11:42:b1:dd:43:62:d4:82:b2:e7:
         93:24:03:4f:f1:03:09:77:d6:62:37:17:7b:29:c2:c1:16:ee:
         44:78:76:d3:d8:98:4c:aa:2a:bb:33:3f:1e:89:61:5c:1b:0e:
         54:13:47:5b:4a:9b:47:d4:fa:1c:70:b7:60:01:05:f0:11:1c:
         3f:8b:3d:c2:8d:a0:ea:5f:6d:52:1f:51:b9:ed:8a:57:cb:be:
         34:bd:a8:1b:1d:aa:ee:b5:fb:2b:8e:b0:f9:8d:ab:67:39:93:
         ee:98:88:ab:38:75:6d:f8:59:89:15:32:a8:e3:ff:01:b3:dc:
         9e:35:af:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:33:12 2026 by rpki-client