Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/532313EE89FB11F1A2C97EB45E11F970.roa
File:                     532313EE89FB11F1A2C97EB45E11F970.roa (raw, json)
Hash identifier:          MqilWzifWvqEYGq5ohMc8R4PUuURagvs92LzzjmSjnw=
Subject key identifier:   DC:BE:7A:C9:34:70:08:42:0D:1E:96:9E:64:A2:0C:72:3B:EF:FA:EF
Certificate issuer:       /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF
Certificate serial:       3578
Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/532313EE89FB11F1A2C97EB45E11F970.roa
Signing time:             Mon 27 Jul 2026 20:39:55 +0000
ROA not before:           Mon 27 Jul 2026 20:39:55 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     23838
IP address blocks:        202.14.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl
                          rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13688 (0x3578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF
        Validity
            Not Before: Jul 27 20:39:55 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a67c21b-da21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5b:4b:6f:47:88:90:3d:7e:e1:14:ed:bb:cc:
                    eb:39:92:7b:59:8a:73:33:cb:2e:6f:01:35:2a:0e:
                    31:c1:2e:fe:e4:9b:a0:80:a5:5b:18:7d:91:5c:f8:
                    de:db:27:dd:dc:9b:18:c6:4e:cd:d5:1a:ee:d1:29:
                    78:99:af:fb:a7:c2:c4:e9:56:e6:06:ca:33:a1:33:
                    12:62:0a:11:6c:98:8f:04:ea:2b:04:8d:06:95:b0:
                    77:7d:30:c0:a0:3d:60:6c:f4:a3:5f:55:42:d5:c9:
                    a1:fe:95:fd:8f:c0:51:fc:a2:02:ee:0b:22:a5:52:
                    34:19:e8:79:74:c2:5f:e4:ba:6a:c1:cf:8a:6b:62:
                    d3:3b:ff:95:92:9b:32:bf:a5:b2:85:46:52:6d:da:
                    ef:25:a1:cf:88:75:bc:1e:34:1a:a5:25:49:3a:ae:
                    ee:2f:19:2f:9c:44:bb:3c:a0:76:34:a1:16:8d:e2:
                    cc:cc:64:3b:35:df:9e:4b:f8:72:bd:74:40:83:a3:
                    2e:9a:1c:9c:11:e7:f8:b2:11:b8:06:8a:f0:af:72:
                    28:c8:ae:87:6b:11:ff:3b:11:f6:1b:c3:25:d2:b0:
                    1a:74:ff:14:47:9e:b7:8b:8f:c1:7c:8f:11:b5:69:
                    84:64:d7:82:f8:df:a8:63:a2:da:d4:ab:6c:a8:4a:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BE:7A:C9:34:70:08:42:0D:1E:96:9E:64:A2:0C:72:3B:EF:FA:EF
            X509v3 Authority Key Identifier:
                keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/532313EE89FB11F1A2C97EB45E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.14.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:d5:35:c0:14:94:69:07:c9:cc:e4:ad:00:61:13:f6:fd:d5:
         3f:f2:ea:6f:82:a9:ba:5b:e1:a7:6b:d1:84:a3:1d:4b:01:cc:
         af:3f:2d:35:dc:4e:1b:3a:35:64:c6:92:71:4b:3f:97:48:0f:
         d6:e4:48:6b:9d:09:78:ad:26:16:46:bc:2e:d0:b0:ff:c0:fc:
         b5:b6:76:68:a8:7a:0c:58:e0:1d:1c:c9:65:80:1f:4c:d3:bf:
         6c:94:56:74:3e:e5:e4:d3:89:37:9e:ea:63:85:c5:cc:92:dc:
         88:cf:35:9e:68:a0:4d:29:01:6c:f8:2f:90:b2:6a:26:f4:4b:
         a5:00:05:10:99:4f:d6:3b:16:34:69:94:81:f1:98:77:27:5a:
         b8:f4:92:5b:82:7d:0c:29:dd:e4:d2:3c:76:3d:65:41:4f:08:
         b5:f5:d8:bf:e5:4e:69:e8:a8:cb:a9:5e:91:cb:1f:40:a7:3d:
         02:7f:6f:1e:af:e5:4a:bf:97:ff:37:9c:ff:2c:72:45:56:3d:
         86:f6:3f:16:83:b5:ee:e5:88:32:8e:8b:e3:5e:ec:eb:2b:fe:
         da:c5:c4:5f:c9:45:13:06:9a:7e:9e:47:f5:6d:d0:40:b0:7a:
         69:05:26:9c:f9:8d:1a:49:ca:a2:76:32:1e:72:18:f1:b3:45:
         73:b7:b2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:51:08 2026 by rpki-client