Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/764601EE6A7A11EFAF10EC37C4F9AE02.roa
File:                     764601EE6A7A11EFAF10EC37C4F9AE02.roa (raw, json)
Hash identifier:          Ug/gKQfBtiv/suzOx+0oDYakgLI7kxXBIVwaz3qVijk=
Subject key identifier:   6F:B2:E1:82:FB:5D:C3:4F:B7:04:D4:0B:02:F4:93:00:5E:F2:60:BF
Certificate issuer:       /CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
Certificate serial:       26EE
Authority key identifier: 87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/764601EE6A7A11EFAF10EC37C4F9AE02.roa
Signing time:             Tue 28 Jul 2026 16:23:12 +0000
ROA not before:           Tue 28 Jul 2026 16:23:12 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38071
IP address blocks:        58.147.168.0/21 maxlen: 24
                          223.27.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 15:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9966 (0x26ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5030, serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
        Validity
            Not Before: Jul 28 16:23:12 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a68d770-9a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:50:5d:93:e7:18:ae:54:e7:46:19:5e:e2:
                    dc:52:35:6b:4c:8f:bc:29:85:c0:4f:c7:4e:3b:e7:
                    27:3b:17:c5:58:f9:65:03:5b:4c:62:75:de:e5:d9:
                    aa:f6:df:aa:e0:c7:91:47:a1:95:d4:57:3b:74:91:
                    ed:4b:f0:52:a5:0c:0f:b4:2c:53:26:c3:52:6a:ba:
                    58:dc:60:7b:e6:38:6b:ac:03:60:da:73:30:c3:96:
                    10:36:98:8d:ad:17:22:57:d0:4d:32:78:8c:28:32:
                    ae:32:b6:c1:92:19:a4:88:f1:8c:40:2c:70:2b:f4:
                    a0:f2:c8:89:f8:89:1f:31:7c:9d:40:52:eb:44:bd:
                    70:c0:48:48:bb:6a:04:63:99:93:ef:35:46:d5:96:
                    61:5d:75:6a:e1:3f:a0:dc:95:61:39:6a:12:f3:1f:
                    0c:77:5e:16:9c:5b:a6:19:ba:17:aa:08:d9:2c:d0:
                    33:88:de:1e:04:9e:89:4c:8d:a6:50:ac:30:1e:7e:
                    86:d0:21:d0:b3:ea:12:18:c6:27:bc:08:1c:89:ca:
                    28:df:b1:04:c2:e9:a2:67:d5:2a:48:24:31:ac:62:
                    74:4b:c8:3e:c3:b4:8c:07:a9:7c:22:8d:12:f9:4b:
                    b5:1d:f3:20:8c:01:41:23:f6:e0:4d:1a:a5:29:5c:
                    08:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B2:E1:82:FB:5D:C3:4F:B7:04:D4:0B:02:F4:93:00:5E:F2:60:BF
            X509v3 Authority Key Identifier:
                keyid:87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/764601EE6A7A11EFAF10EC37C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.147.168.0/21
                  223.27.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:74:08:46:cc:2a:33:a3:72:7b:25:6c:d3:46:97:54:46:5d:
         47:14:82:d2:35:26:42:cc:16:7c:dc:ed:c0:95:26:62:b3:47:
         94:49:ee:06:28:0f:28:cb:e8:22:84:26:50:ce:83:9f:03:fc:
         ae:2e:1d:63:48:40:1f:96:a4:2d:fb:7c:bb:b1:01:5e:9a:5a:
         06:00:28:05:d5:19:ba:a6:ce:ac:db:38:a5:73:53:83:0b:8f:
         1b:b7:1e:3c:04:65:35:b3:77:94:c3:f7:18:28:0a:09:06:1f:
         4f:81:4c:45:c7:d5:18:4f:93:6b:c9:6c:6c:ea:e9:21:dd:6f:
         52:53:46:1e:79:dc:86:aa:1e:7e:b7:b1:2d:7b:54:62:a1:30:
         f4:28:7a:79:ad:69:cf:79:3d:f9:d2:5c:4e:f4:51:57:6d:9b:
         55:af:0f:3f:45:98:6f:68:a7:d9:5a:26:3f:8e:27:ac:c2:35:
         15:63:f6:3c:a2:44:2f:e9:20:ae:d2:a4:2f:9b:53:00:69:54:
         d2:dc:27:83:4f:a5:00:a3:26:78:52:b1:a1:6e:de:ea:e7:f8:
         e9:ad:3d:ce:57:fb:fb:9c:e2:84:53:cc:38:c0:a2:67:bd:0d:
         d8:21:18:15:07:07:e2:7e:9a:3f:80:69:fa:19:f0:64:1e:86:
         35:e6:76:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:05:05 2026 by rpki-client