Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8CD1AEC62E9511E9896EFA1DC4F9AE02.roa
File:                     8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (raw, json)
Hash identifier:          R3UXvxLGuAsLaHQCcYjq4jsLIsHsiVoo5zau0vUpLOo=
Subject key identifier:   C1:51:00:EF:2B:1F:0E:E1:78:E1:FC:10:F9:00:6A:09:E6:E4:F8:47
Certificate issuer:       /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial:       11D1
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8CD1AEC62E9511E9896EFA1DC4F9AE02.roa
Signing time:             Tue 26 May 2026 17:26:22 +0000
ROA not before:           Tue 26 May 2026 17:26:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132716
IP address blocks:        202.78.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
                          rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4561 (0x11d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
        Validity
            Not Before: May 26 17:26:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a15d7be-d900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:0d:51:e8:c2:73:94:9f:3d:25:c9:b6:a8:
                    18:35:b0:83:45:fc:49:8c:ed:eb:8d:7f:42:e5:97:
                    67:ec:a0:8f:e2:1c:26:ec:d9:17:42:6f:ec:49:b9:
                    99:fa:2f:5d:73:09:91:ab:f8:12:93:2b:0d:bf:57:
                    9f:96:b4:5e:8d:26:d1:8b:31:4f:2c:94:87:3c:fe:
                    2a:23:19:4c:f9:4d:b2:2f:ba:2a:00:3c:30:9f:48:
                    0d:59:68:f9:64:90:89:8e:df:5a:67:ed:7a:5f:7f:
                    c4:cc:f0:e2:bd:51:4f:37:61:9b:5b:5e:c1:8b:f7:
                    27:26:ad:65:e2:80:66:4b:d7:e7:14:f7:b1:84:70:
                    68:a1:72:87:b4:a2:23:08:0d:a4:65:4a:0e:2e:a1:
                    2f:7d:1a:0e:5a:67:dd:48:e9:fd:78:5a:38:58:5f:
                    9b:4f:f4:bc:c9:b7:94:6b:dd:8f:85:d9:cf:72:38:
                    48:1a:bb:56:05:3d:38:4c:d4:2e:80:78:de:11:6b:
                    38:a6:84:e7:98:42:32:f4:4b:13:06:a2:f8:b0:d4:
                    56:2f:05:02:76:bf:aa:ae:36:62:68:0f:44:7f:54:
                    89:1a:97:79:81:96:57:4b:e9:e2:44:69:f8:5a:7c:
                    ca:82:f3:d8:c9:2f:1b:c4:14:46:2a:32:d1:fa:0a:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:51:00:EF:2B:1F:0E:E1:78:E1:FC:10:F9:00:6A:09:E6:E4:F8:47
            X509v3 Authority Key Identifier:
                keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8CD1AEC62E9511E9896EFA1DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:67:df:cb:d0:a3:cb:8a:ad:16:56:7c:5e:92:38:f3:29:63:
         8d:13:12:a4:83:d6:b1:e3:95:70:4f:be:3a:eb:b5:0d:c4:7d:
         40:17:70:6f:48:34:95:4d:78:e6:e2:11:b5:32:1a:e9:0e:85:
         10:8c:53:c0:6d:8e:ca:bc:59:f6:12:a2:92:cc:41:33:2b:b8:
         81:5b:29:98:20:83:c0:7c:32:db:9c:04:e4:fc:dd:1f:e1:63:
         b2:af:97:13:1a:85:82:1a:d3:d1:86:0a:22:54:6e:d4:29:61:
         19:a9:e8:1e:84:12:25:88:a6:26:41:3d:5c:68:dd:ba:66:51:
         6c:1b:4c:97:80:1e:d8:28:04:76:08:77:88:7e:32:42:8f:c0:
         dc:3c:70:c3:6a:cf:38:69:9f:57:2c:1a:78:7f:6b:01:0d:56:
         34:9f:d5:ca:38:fc:b5:d6:bf:21:51:52:75:94:bd:41:4f:b5:
         2e:7d:74:3b:73:72:c3:52:18:75:97:b6:5e:f8:b1:98:9a:86:
         9d:ac:d1:7f:e3:35:76:6c:49:9b:8b:d8:ba:c0:f9:48:85:0f:
         52:73:68:7f:4c:2a:32:bb:e6:72:8a:7b:2e:24:1d:53:39:a2:
         4d:5d:b6:14:72:f5:71:13:71:b9:7c:71:4d:63:bc:b1:95:c3:
         d0:52:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:18 2026 by rpki-client