Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/31E9004E9A0F11F0BC057E7DC4F9AE02.roa
File:                     31E9004E9A0F11F0BC057E7DC4F9AE02.roa (raw, json)
Hash identifier:          tljjskEzluOLyfM+jOhLD+OSuutF6Ym7Br+LWf9TkKY=
Subject key identifier:   C5:8F:83:BB:8B:48:5C:71:F9:D7:5C:0E:30:20:62:6F:5D:1E:3C:2B
Certificate issuer:       /CN=A91491CC/serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95
Certificate serial:       A6
Authority key identifier: 9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/31E9004E9A0F11F0BC057E7DC4F9AE02.roa
Signing time:             Wed 05 Aug 2026 08:57:11 +0000
ROA not before:           Wed 05 Aug 2026 08:57:11 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154084
IP address blocks:        192.51.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl
                          rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:55:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91491CC, serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95
        Validity
            Not Before: Aug  5 08:57:11 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a72fae7-d693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:23:a8:e1:98:e6:79:c4:dc:93:ed:30:e5:
                    43:cb:3b:b0:f8:85:51:4d:16:f2:2d:b9:f9:5b:16:
                    68:0f:82:fc:b9:f1:50:8e:6d:26:4f:7c:2d:6c:32:
                    98:41:20:cf:2b:2c:f1:ac:e8:4c:5e:0d:a6:cd:6f:
                    b5:74:e3:d9:c0:6e:db:c1:87:64:ae:cf:56:33:8a:
                    a5:00:8e:70:54:81:6d:22:72:c5:37:8e:21:b6:a2:
                    bf:b1:63:08:d9:3c:fd:d7:08:2f:21:e6:1b:a3:cf:
                    a8:29:a5:9c:de:03:d4:c2:6d:05:a8:59:4e:de:f8:
                    86:5d:5e:2f:c0:ab:53:6a:ec:32:91:d7:3b:2d:ea:
                    32:18:74:c2:a0:35:10:d4:59:94:66:52:8f:cd:f3:
                    de:10:5e:8d:bc:8e:a1:a8:0c:46:25:7d:a1:72:8f:
                    86:7d:1e:ff:de:a1:76:92:c7:c9:9f:c5:37:10:5b:
                    ee:eb:4e:6e:d5:6f:6b:d1:9f:b8:21:68:e6:ac:31:
                    eb:37:77:45:18:90:ea:16:d7:3d:86:d9:3f:0f:d5:
                    ca:e8:d8:46:16:23:ad:8d:24:f0:ff:31:bc:48:a6:
                    bf:3f:51:9e:5b:e9:54:cb:90:54:b9:ae:61:4e:80:
                    e2:3b:98:b9:81:3a:d3:8c:e5:5b:39:9c:c9:02:73:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8F:83:BB:8B:48:5C:71:F9:D7:5C:0E:30:20:62:6F:5D:1E:3C:2B
            X509v3 Authority Key Identifier:
                keyid:9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/31E9004E9A0F11F0BC057E7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.51.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:aa:2c:ed:fd:7a:a1:9a:b1:53:a5:03:99:69:79:d6:62:47:
         3c:00:06:b7:8e:47:69:9d:2b:8d:17:c2:b9:69:48:67:0a:e3:
         83:9a:7d:e7:a1:a6:b4:e0:dc:cf:b0:4f:4d:e3:a2:f5:60:d7:
         58:94:39:93:39:b5:39:af:58:28:57:00:12:b4:e9:3c:0c:d7:
         fc:8e:53:8b:df:d9:e9:b4:93:42:cf:a4:f8:79:5b:47:ee:73:
         fb:5b:c0:2c:b5:79:88:65:6b:1e:e6:45:d9:56:a9:67:86:9f:
         6d:9d:0e:3d:f6:0f:c2:c0:f1:48:48:ff:98:cf:6e:d4:96:1f:
         b1:9e:4e:c2:21:04:47:f8:e8:08:7d:ee:d0:f6:b3:80:9c:08:
         62:11:e7:dd:22:b1:e1:41:71:0c:99:54:b8:c0:2f:77:df:4c:
         f4:d0:d5:39:77:a0:8d:53:1f:d8:8a:01:80:7c:cb:ad:44:ee:
         b8:54:8a:9e:5d:a4:f9:64:65:88:3a:2f:23:b5:3b:f4:f9:b7:
         78:6b:3d:ef:87:74:6d:37:f4:1b:34:bc:c9:94:09:54:22:a1:
         b1:f2:aa:05:cd:f4:01:a8:ee:ad:9d:9b:84:24:d7:31:81:43:
         de:4d:da:7c:4e:51:ca:2c:d2:c9:36:37:2f:ed:cb:5f:46:fe:
         ee:75:88:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:33:11 2026 by rpki-client