Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/ABB7CDCC9C1811F1ADB92E767011F970.roa
File:                     ABB7CDCC9C1811F1ADB92E767011F970.roa (raw, json)
Hash identifier:          WqoVvbSiwJn5rj2IxfeamtzmjM8ScyXIZRXq+6IcKl0=
Subject key identifier:   3C:6D:BF:DD:17:3A:EA:B8:A3:29:32:31:50:9C:15:4A:C1:C0:61:77
Certificate issuer:       /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial:       E2
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/ABB7CDCC9C1811F1ADB92E767011F970.roa
Signing time:             Thu 20 Aug 2026 17:42:11 +0000
ROA not before:           Thu 20 Aug 2026 17:42:11 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154173
IP address blocks:        203.174.23.0/24 maxlen: 24
                          2001:df6:90c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
        Validity
            Not Before: Aug 20 17:42:11 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a873c73-00b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:aa:fe:94:75:d1:27:0a:c1:70:22:35:a8:ba:
                    42:82:af:d4:8b:f3:a0:7e:65:cb:1e:41:bf:80:1f:
                    fe:1b:f1:2c:fc:e9:13:f0:c3:c7:6f:82:8c:88:ca:
                    65:6a:28:1b:50:3c:00:31:e2:20:a9:a9:05:63:c7:
                    a9:d1:77:bd:c7:43:fc:23:35:d0:b7:7d:c5:9b:b4:
                    34:4f:c0:4d:a4:f9:42:f9:a5:d9:ec:9f:ee:e7:bb:
                    b3:99:50:d7:16:bf:c7:58:23:ac:ae:58:a3:37:f4:
                    2b:87:7d:3b:58:87:77:40:88:f8:cd:b2:ae:51:90:
                    94:88:56:d2:b9:1f:b0:c6:9a:85:70:ad:80:8c:90:
                    de:3b:3d:00:ee:86:3a:5f:e7:8a:46:69:a7:d5:f8:
                    29:9e:bc:5c:e0:ee:ae:d7:81:0c:c7:7d:ed:62:bb:
                    58:2a:89:ba:2f:5c:91:cb:d8:d1:22:97:b4:91:5a:
                    61:59:32:7f:6c:94:79:58:77:cd:7a:74:5e:bb:50:
                    9d:24:8b:27:f9:a3:4c:fb:a6:a6:94:80:49:1e:9b:
                    2b:c8:45:4e:af:fa:3b:f9:58:28:6b:3b:82:c8:95:
                    44:cc:43:6a:9f:d2:42:0f:8f:23:a7:91:f8:62:26:
                    ce:da:f5:cf:b7:6f:e7:fd:0b:4b:9c:78:cc:d1:66:
                    50:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6D:BF:DD:17:3A:EA:B8:A3:29:32:31:50:9C:15:4A:C1:C0:61:77
            X509v3 Authority Key Identifier:
                keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/ABB7CDCC9C1811F1ADB92E767011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.174.23.0/24
                IPv6:
                  2001:df6:90c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:8f:fe:a0:67:9c:b1:20:e7:ec:40:28:4e:8d:b0:a6:ae:4a:
         ed:ab:cc:15:ff:31:cd:93:f5:af:9d:3a:c2:27:2f:e0:36:d2:
         51:8b:0a:5f:41:e2:d8:57:6d:18:26:74:c0:6d:94:9e:16:42:
         26:20:de:c4:69:f9:18:ad:51:bb:f2:b2:02:d0:b1:11:e0:31:
         e0:f8:22:93:91:05:eb:12:04:d4:50:12:cf:33:d8:8d:b5:b0:
         76:42:83:97:ef:16:19:fe:ae:21:38:65:aa:ba:56:03:ec:e4:
         67:7f:61:b8:45:16:61:c0:4a:fd:20:01:e4:24:61:c5:39:14:
         27:53:3e:0c:d5:d0:93:23:98:68:0b:5c:8c:f9:e8:d3:9a:13:
         81:2e:7d:b1:7a:ac:1b:8e:fa:77:d1:34:c8:e1:4b:8e:2a:17:
         2f:4f:ce:a9:c5:d6:7c:23:6a:39:c4:11:fa:ea:5a:93:9e:43:
         92:2b:14:e0:b1:e4:82:98:87:e9:0b:da:64:6b:4e:8d:72:56:
         be:19:f2:76:c9:42:9e:a0:49:cc:4f:dc:44:b1:5c:df:c0:9d:
         19:03:e5:3e:6a:8c:ed:73:76:f7:1f:c7:14:50:5a:bc:f8:06:
         8e:4b:8a:6b:25:79:ae:aa:90:e2:a2:ab:b0:1e:54:59:7b:a9:
         0a:c2:e1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:23:33 2026 by rpki-client