Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/EBB7A41AB4DA11EEBD650259C4F9AE02.roa
File:                     EBB7A41AB4DA11EEBD650259C4F9AE02.roa (raw, json)
Hash identifier:          TimfscbEtqoSFacEaEGkYZeTGMgPyD8eb5jQDQJwN+I=
Subject key identifier:   C1:B3:A2:94:1A:DA:D1:45:26:68:DC:0B:0D:B1:5F:F9:BA:B4:E8:B6
Certificate issuer:       /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
Certificate serial:       022B
Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/EBB7A41AB4DA11EEBD650259C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 03:52:34 +0000
ROA not before:           Thu 03 Sep 2026 03:52:34 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     131323
IP address blocks:        202.37.93.0/24 maxlen: 24
                          2001:df0:22d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl
                          rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 03:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8
        Validity
            Not Before: Sep  3 03:52:34 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98ef01-3ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c2:d2:ab:fb:0b:99:82:0d:7b:c3:11:54:5e:
                    aa:26:05:94:d4:54:c8:56:0f:f4:ff:a5:1b:08:06:
                    b7:e8:6d:2d:46:22:85:47:2b:2e:eb:82:08:91:c1:
                    2a:cd:54:f1:9c:93:b5:d8:c5:68:89:bd:04:57:1a:
                    bd:93:40:85:1d:68:f4:b1:9f:84:07:c4:4b:f4:5f:
                    af:a1:b8:79:9c:e1:dc:8e:c3:59:4d:76:e4:92:9e:
                    2e:e2:e5:23:ac:5d:0c:64:70:8b:2b:24:b9:57:76:
                    eb:8b:64:a3:2b:46:8d:45:af:7d:33:b4:ee:7c:5b:
                    d3:44:1a:26:95:ba:3f:db:99:24:aa:73:0f:cb:2e:
                    87:cd:c2:84:dd:a9:45:2a:00:a1:47:a9:c5:67:fd:
                    fd:46:b7:eb:b5:a2:61:5f:ae:c3:a9:db:af:6d:4c:
                    12:a4:3f:44:90:57:6f:98:30:14:ca:73:2a:59:1d:
                    10:03:44:8b:91:7c:59:c5:5d:e2:20:8a:01:73:6b:
                    25:ea:76:81:b0:ab:e8:54:0f:10:56:e0:4b:37:c4:
                    64:6e:41:62:04:5f:fd:1e:56:24:50:72:aa:40:cd:
                    30:a2:71:05:88:74:64:4c:52:f2:cd:0f:14:be:d2:
                    cf:7c:69:f8:38:f2:7b:cf:fe:a4:ef:21:ae:5a:1d:
                    32:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B3:A2:94:1A:DA:D1:45:26:68:DC:0B:0D:B1:5F:F9:BA:B4:E8:B6
            X509v3 Authority Key Identifier:
                keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/EBB7A41AB4DA11EEBD650259C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.93.0/24
                IPv6:
                  2001:df0:22d::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:51:ec:da:b2:27:97:04:42:3e:2b:0f:ab:4a:89:f7:a8:f1:
         79:81:db:72:7f:17:5d:cb:7c:21:9c:57:ed:0e:7c:75:9b:08:
         9b:12:81:df:8d:3a:94:0b:fd:4f:c9:0b:be:c5:ab:8f:35:1d:
         89:0f:a8:1b:07:69:aa:11:77:40:ee:2e:a0:75:fb:90:72:f8:
         be:b4:73:a5:44:08:21:b5:b4:02:3d:9a:ea:cc:45:07:9a:2f:
         68:fb:bc:bf:7c:74:85:8a:9b:85:8b:fa:85:80:e8:85:43:2a:
         29:fb:09:e8:59:96:2f:55:41:67:42:87:d3:07:6b:02:17:c8:
         62:c4:f1:02:24:84:1e:50:13:c6:53:65:cf:a1:48:6b:b3:18:
         a9:23:18:9d:08:dd:87:82:90:6f:de:cc:e1:79:a4:db:61:12:
         ac:44:4e:c1:2f:43:77:76:4d:60:ba:a8:02:f9:36:e8:df:e2:
         37:27:3c:ba:9b:b6:6c:04:70:95:47:a3:4c:34:cc:0a:8f:d9:
         d1:83:39:0e:4b:34:3d:86:35:9e:3c:49:c0:ad:45:ca:af:d3:
         2a:d8:76:e5:28:d7:87:f5:8b:98:2a:e5:a2:63:83:3b:32:1c:
         67:0f:2f:c2:37:c1:5c:7a:12:d2:92:67:fc:de:9b:c8:c8:17:
         06:9b:e5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:09:35 2026 by rpki-client