Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/787672F09CBE11F195AB7B4F6511F970.roa
File:                     787672F09CBE11F195AB7B4F6511F970.roa (raw, json)
Hash identifier:          BIwKs+tYnh5S+dj3qZ4MAv9TQim7so69Av7yFw5+2Eg=
Subject key identifier:   7C:9D:20:0C:9C:CA:A6:61:17:12:53:9E:91:7E:31:56:AF:CB:7D:55
Certificate issuer:       /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial:       E1
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/787672F09CBE11F195AB7B4F6511F970.roa
Signing time:             Thu 20 Aug 2026 17:42:10 +0000
ROA not before:           Thu 20 Aug 2026 17:42:10 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     142244
IP address blocks:        203.174.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
        Validity
            Not Before: Aug 20 17:42:10 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a873c72-bc16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2f:cc:6a:b5:ab:51:63:93:6f:95:79:d3:fb:
                    cc:1a:44:8d:4b:02:77:c7:da:2c:3f:f4:44:a8:3f:
                    c8:7a:94:e6:ef:f6:53:07:fe:0d:c3:ce:df:54:58:
                    12:23:72:02:55:ee:24:9c:23:0e:b5:bd:cc:60:ae:
                    4c:6f:dd:69:70:81:f5:7c:bf:c1:98:f7:45:38:f7:
                    f9:bf:ef:b3:72:58:f3:04:00:c2:4f:80:93:76:f8:
                    ba:45:f2:e9:14:74:f4:10:db:40:db:01:ed:42:f9:
                    ea:74:8e:4c:b4:13:05:91:5e:ac:2a:be:da:32:a5:
                    e3:12:b0:d5:4b:4b:2c:81:58:9e:c3:a5:55:c9:08:
                    6d:a9:8b:ba:2b:38:e6:5a:0a:8a:ea:65:f7:f6:fb:
                    10:2f:1c:d4:d5:9e:49:2c:87:05:46:fc:80:f0:ef:
                    57:5a:f3:50:85:2e:4c:20:fa:73:36:46:eb:eb:f4:
                    65:c6:a3:be:25:6b:e6:ee:17:09:1a:a9:90:b7:3d:
                    26:71:82:4f:fc:6d:d6:8c:e0:6b:da:77:30:93:1b:
                    30:a7:79:d4:71:74:70:e9:5b:2b:a8:33:0b:97:a4:
                    57:7a:c8:6b:23:7f:29:5b:24:c4:b4:d6:97:d3:6f:
                    67:15:3c:44:e9:40:d6:9d:94:4a:1b:b0:f5:01:8f:
                    a1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9D:20:0C:9C:CA:A6:61:17:12:53:9E:91:7E:31:56:AF:CB:7D:55
            X509v3 Authority Key Identifier:
                keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/787672F09CBE11F195AB7B4F6511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.174.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:ed:dd:14:f3:1c:cc:ae:2b:28:2a:2d:2e:ad:0e:7f:05:f5:
         78:e9:64:05:7b:cb:e7:ee:72:ab:28:2c:48:43:b4:08:3b:11:
         4b:ce:32:d7:0c:56:56:09:34:32:86:ec:b2:75:dc:7b:b3:60:
         5c:a1:96:23:79:f5:bb:8a:38:18:20:56:f5:69:ae:d1:fa:ea:
         ff:d4:8b:42:eb:41:b3:82:a3:14:20:c8:13:83:a2:bc:ae:85:
         f8:01:56:5b:32:5f:9c:cc:2e:9e:83:29:ab:92:4a:e4:7a:ef:
         b7:c8:22:1f:87:f2:4e:40:e8:5c:4e:69:1d:8b:9b:7d:0f:63:
         13:fd:26:eb:5e:a4:67:06:fd:59:cc:42:bb:76:42:e6:1c:54:
         c7:7c:52:72:4e:bc:f8:49:ab:06:15:c2:05:e5:f2:8d:3c:98:
         5a:e0:c7:f0:ee:3e:97:1a:55:2c:79:bc:fd:95:47:6b:b7:03:
         a3:dd:60:4d:0c:b3:d4:e0:df:8d:3b:1c:43:1e:d5:ad:e0:a0:
         f6:36:56:e8:8b:c1:85:75:85:09:38:41:fb:c6:15:6c:2e:db:
         df:bf:89:45:ea:70:f1:ab:e5:55:30:c3:b1:bb:36:ed:c9:20:
         4a:58:c1:dc:0c:e4:a0:66:09:96:d6:ce:21:c5:22:64:68:ad:
         67:a4:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:10:47 2026 by rpki-client