Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa
File:                     9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa (raw, json)
Hash identifier:          jIrHOyH1QDZvv2If2z5/HwQNB+UGwuoFURWKMIbprA4=
Subject key identifier:   C4:73:70:C6:FF:00:D6:62:B0:38:36:64:D2:A0:10:29:B3:D7:5E:FF
Certificate issuer:       /CN=A91116E6/serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A
Certificate serial:       0194
Authority key identifier: 32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa
Signing time:             Mon 27 Jul 2026 06:54:30 +0000
ROA not before:           Mon 27 Jul 2026 06:54:30 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     55422
IP address blocks:        182.23.212.0/24 maxlen: 24
                          182.23.213.0/24 maxlen: 24
                          182.23.214.0/24 maxlen: 24
                          182.23.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl
                          rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91116E6, serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A
        Validity
            Not Before: Jul 27 06:54:30 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6700a6-7661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:31:c6:c0:1e:ae:23:67:f7:9e:e0:a0:fe:
                    67:f6:31:bd:3f:de:97:ec:2a:d7:f6:c5:6b:89:29:
                    c0:5f:2c:1b:d7:27:d4:79:c1:d2:98:33:65:ea:dc:
                    93:06:b2:a2:31:21:4c:be:3a:0a:9d:34:ee:78:83:
                    93:0e:45:51:12:55:45:3b:63:47:ac:30:19:c7:53:
                    26:58:7c:93:b6:0f:69:a4:25:dd:66:c2:9a:85:ff:
                    8c:3c:53:0d:47:24:cb:49:1e:78:cf:af:a4:27:65:
                    13:98:f4:da:b3:cf:a5:36:7c:10:83:27:86:26:4b:
                    ff:97:87:8c:a7:50:e4:61:e1:46:62:e4:2d:e7:ee:
                    a8:65:a2:49:c6:b2:b5:4c:77:0b:89:ef:c1:2e:f1:
                    7b:ff:2e:8b:35:c6:13:dc:a0:67:9d:e8:e8:58:15:
                    5d:c4:1c:66:40:f2:4a:94:36:c2:ed:9d:cd:fd:2c:
                    72:5f:92:a8:cd:b7:c5:5f:13:6b:6d:68:ae:8c:c4:
                    05:ec:be:14:a1:1a:9c:a2:b2:b2:1e:20:0a:b8:18:
                    72:c8:b4:ac:7d:1f:ad:78:8c:4d:3f:af:9a:17:1b:
                    f4:1e:16:8f:e7:f9:ba:a3:8c:47:d3:93:79:22:56:
                    da:b0:c8:fc:93:04:2c:4a:3f:41:07:a9:e3:c3:38:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:73:70:C6:FF:00:D6:62:B0:38:36:64:D2:A0:10:29:B3:D7:5E:FF
            X509v3 Authority Key Identifier:
                keyid:32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:31:ad:22:3a:67:27:39:b7:97:76:81:c3:b2:d4:9c:ee:1f:
         32:12:90:23:ba:98:32:c3:1a:c6:72:05:8a:c3:7e:a1:f6:fd:
         4c:46:46:5c:53:0b:1d:40:27:d0:a7:90:a3:fa:84:b9:a1:09:
         0d:e6:07:8b:cc:a4:f9:b4:2f:1a:31:5d:98:88:22:4d:ea:65:
         c6:10:1d:24:27:d4:00:cf:b0:60:4f:79:dc:25:c3:7b:ca:d2:
         7a:6c:fe:3d:8e:97:1f:be:59:56:38:21:ca:4d:7b:e9:6e:41:
         4f:5c:20:05:4e:ea:44:74:c6:c0:a8:ea:b8:3f:2d:ce:d6:79:
         7f:25:a5:18:60:d4:8b:93:d8:e4:87:60:f9:8c:ca:36:18:21:
         24:32:90:46:6f:3f:27:a9:2f:ef:82:c3:d2:77:32:5d:94:bd:
         29:8b:7f:de:fa:4b:38:26:a3:1e:53:80:18:66:79:f3:eb:3e:
         dd:ee:d6:5d:a8:10:48:02:c9:7f:b2:79:0e:50:58:f8:fb:1c:
         ca:78:1e:d7:f5:df:68:07:de:b0:01:14:52:1d:5b:1c:20:6e:
         1b:35:a4:1c:11:a8:56:ed:67:8f:f8:5a:64:b8:a0:fc:1a:e4:
         d4:ef:33:3a:93:c8:67:31:56:3d:48:e7:db:66:f6:a7:bb:24:
         66:c3:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:24:21 2026 by rpki-client