Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/096864742F4C11EDB0375D6CC4F9AE02.roa
File:                     096864742F4C11EDB0375D6CC4F9AE02.roa (raw, json)
Hash identifier:          q3VCDewUGXnF240w6MnCLAh5CYrtyui1zMbQ0nA6Rco=
Subject key identifier:   8F:D2:4C:D2:79:7B:BC:84:B7:7B:C2:F4:B1:6F:87:B4:6C:31:F5:DF
Certificate issuer:       /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
Certificate serial:       09DA
Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/096864742F4C11EDB0375D6CC4F9AE02.roa
Signing time:             Sun 06 Sep 2026 20:40:30 +0000
ROA not before:           Sun 06 Sep 2026 20:40:30 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     38001
IP address blocks:        111.221.44.0/22 maxlen: 22
                          111.221.44.0/24 maxlen: 24
                          111.221.45.0/24 maxlen: 24
                          111.221.46.0/24 maxlen: 24
                          111.221.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl
                          rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2522 (0x9da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20
        Validity
            Not Before: Sep  6 20:40:30 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9dcfbe-e199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:4e:b9:da:ad:e3:ba:68:d4:04:d7:fe:fd:
                    56:55:ee:33:a9:26:76:81:d8:58:8b:e9:86:d1:76:
                    49:21:ed:bc:8d:3b:42:a8:2d:4e:10:0f:2c:53:9f:
                    7f:2a:0d:51:aa:91:76:20:84:be:e2:89:e2:c3:1a:
                    74:46:49:22:a5:3b:81:04:28:ce:49:91:b9:00:ea:
                    fe:b7:08:d1:17:34:ea:4c:4c:e0:ce:85:3a:4b:06:
                    98:3d:bb:0c:c8:77:a6:6b:a0:4f:45:10:18:ab:09:
                    61:30:98:5e:bb:0c:4c:a4:2f:11:f2:41:9a:9f:59:
                    6a:15:29:6a:ee:10:e1:20:e0:40:d0:7d:ca:15:b4:
                    ab:4c:71:9f:7c:88:de:fb:ac:e9:ae:cc:46:01:97:
                    22:02:63:1b:c0:e7:94:af:44:77:3d:ea:c6:ba:89:
                    4e:06:07:cd:88:1e:1d:07:2a:9d:14:c8:a4:77:d6:
                    4e:0e:e1:e7:93:bf:63:61:b0:87:7c:0d:83:29:f5:
                    3e:dc:66:9e:7c:ac:5f:13:7b:86:16:6f:76:91:d7:
                    a3:f6:69:f8:eb:54:df:00:09:10:11:97:4c:8a:42:
                    c9:d8:73:fd:3a:85:08:e7:7c:10:f3:ef:11:89:61:
                    6b:1d:59:71:bb:92:6d:a0:28:15:2f:69:e1:0b:8b:
                    1d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D2:4C:D2:79:7B:BC:84:B7:7B:C2:F4:B1:6F:87:B4:6C:31:F5:DF
            X509v3 Authority Key Identifier:
                keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/096864742F4C11EDB0375D6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.221.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:10:de:49:77:d0:9b:df:4d:8a:89:7f:c9:72:06:76:8f:b3:
         44:65:6f:3c:b7:be:23:7a:22:a8:19:d8:a8:7c:e7:80:0c:b1:
         c7:99:72:f0:b5:2b:2a:c3:5a:2e:c3:ed:2e:04:45:8b:3a:49:
         7d:19:64:51:b7:5b:84:19:f0:34:1c:04:57:a5:74:c2:4d:43:
         fe:2b:96:6d:96:c5:c1:66:e5:05:b0:bc:3a:61:95:3f:07:c6:
         2f:64:5b:82:c6:9c:f0:22:72:a0:55:05:fa:96:d5:c3:13:b8:
         cb:3f:3b:e2:a0:e1:ce:a8:70:de:a5:ff:39:10:66:5c:68:cc:
         33:9d:5a:51:ac:14:f2:f5:7d:69:3b:2b:7d:07:4b:69:ee:ad:
         4d:b0:b7:d1:ee:0b:7f:a8:3e:2c:30:bc:2f:93:46:9f:75:80:
         25:78:c5:02:30:68:87:f0:b2:dc:50:8a:6d:0e:0a:99:f9:2c:
         2d:54:58:45:60:dd:c3:d5:1f:d8:38:fc:4b:fc:09:fe:69:2e:
         9d:ce:bc:96:9d:dc:95:1e:86:07:96:72:53:9b:f7:cd:cc:8e:
         36:c6:e3:c3:ed:35:d0:41:58:a8:ef:1d:3a:6c:18:42:a7:25:
         69:68:5b:91:e4:eb:d6:94:f4:6d:43:31:ec:c6:04:22:05:24:
         9f:9b:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:10:44 2026 by rpki-client