Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/51753C88351911EDA9A3C95CC4F9AE02.roa
File:                     51753C88351911EDA9A3C95CC4F9AE02.roa (raw, json)
Hash identifier:          8jcsquYAg0iJ79n70S+K8+0xg3/+UhaT+AbxubHPFHk=
Subject key identifier:   40:D9:09:42:C8:4D:6C:69:20:4D:9D:BB:67:11:4F:F6:BA:29:B4:0B
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F0D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/51753C88351911EDA9A3C95CC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:35:45 +0000
ROA not before:           Fri 02 Oct 2026 15:35:45 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45541
IP address blocks:        203.201.56.0/24 maxlen: 24
                          203.201.57.0/24 maxlen: 24
                          203.201.58.0/24 maxlen: 24
                          203.201.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 15:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28429 (0x6f0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:35:45 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcf51-c764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:86:52:f1:5d:0f:75:1f:9f:29:37:77:52:
                    3a:9a:46:ca:98:40:6c:bf:53:97:ac:0b:6d:54:a7:
                    40:6f:a4:02:45:b3:d4:83:47:47:54:5d:03:92:66:
                    15:e8:cb:32:c9:cd:56:ff:06:1a:aa:74:d3:94:6f:
                    b0:6a:6f:d0:9e:df:02:6d:14:e5:e1:4f:c9:85:39:
                    c8:6d:94:ce:1c:34:6a:7b:cf:e8:af:01:2e:e7:92:
                    47:f9:87:8c:00:3a:35:b8:75:f2:dd:88:c1:c7:a0:
                    2a:3b:22:55:2c:0e:aa:85:7a:bb:66:e3:49:dc:e3:
                    4c:7b:ca:51:4f:35:e8:ef:fd:cd:dc:3b:96:50:fa:
                    77:16:a2:78:c9:f5:9b:4e:af:95:a9:96:95:a0:75:
                    f6:84:e8:7e:b2:b9:53:57:54:0c:15:cb:70:95:26:
                    19:3d:06:e8:7d:45:3c:2b:f5:c7:bd:b8:e0:7e:1e:
                    b6:47:3a:11:76:80:25:88:2e:a3:4e:88:9a:e0:e9:
                    e0:07:0f:1e:17:16:a5:f1:c4:a9:e2:72:67:c2:bf:
                    0f:e1:f5:ca:56:e1:a1:dc:d1:b8:05:2c:73:85:8a:
                    20:c9:9e:93:b2:16:ec:6a:4c:85:5f:f0:f2:17:9f:
                    eb:82:d5:76:4b:cd:5b:2b:0a:4c:e2:2e:4b:93:d3:
                    03:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D9:09:42:C8:4D:6C:69:20:4D:9D:BB:67:11:4F:F6:BA:29:B4:0B
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/51753C88351911EDA9A3C95CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.201.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:83:97:ef:6c:d3:b2:aa:2e:93:c1:b7:e0:bd:ef:8d:36:f9:
         ec:0a:b0:3a:cd:93:cc:10:92:ca:99:55:fc:fd:84:5b:85:38:
         7a:a6:01:87:01:3e:08:87:41:2a:ee:e9:51:ff:c5:13:1c:79:
         6c:5a:07:49:13:f7:21:99:60:70:27:56:f4:a1:94:c6:b5:b5:
         33:77:65:aa:48:ed:42:78:b5:8a:d8:57:d3:4b:9a:c6:e0:21:
         6a:00:a0:ce:ea:74:db:9a:08:a9:79:0f:22:29:56:96:d1:38:
         57:c2:04:b1:49:c0:28:e3:b8:05:33:fe:c4:17:47:d2:3a:b8:
         29:62:07:30:0a:17:ce:27:1f:c0:b0:6d:dc:df:e1:5b:82:d8:
         b9:d4:b1:a8:0c:8a:e1:c7:b2:32:9a:b5:f2:15:53:28:ae:d4:
         c6:d3:78:cd:de:55:0c:bd:8e:6b:eb:47:a1:00:d5:62:62:7b:
         d1:b6:87:34:9e:f9:fb:14:06:93:5b:e4:6d:cb:ce:91:1d:03:
         6c:ea:ba:1d:d9:08:0f:1e:0a:6d:5b:33:42:af:3d:56:ca:a5:
         55:55:4d:a0:05:b6:d9:9a:fa:96:7e:21:6d:95:d4:cc:00:21:
         14:b5:d4:15:f2:c2:89:cd:c4:8c:50:e9:28:63:a5:95:3a:1f:
         ac:e3:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:48:12 2026 by rpki-client