Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/D470449E0E4411ED9C0F5B45C4F9AE02.roa
File:                     D470449E0E4411ED9C0F5B45C4F9AE02.roa (raw, json)
Hash identifier:          95MXEPd3XWfhWFM2kZfvjKE+kkcge5QqhzEgDRS8E0s=
Subject key identifier:   8C:74:21:13:7B:D9:C9:0E:A7:93:27:DE:D3:37:69:04:9A:93:6A:25
Certificate issuer:       /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190
Certificate serial:       0358
Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/D470449E0E4411ED9C0F5B45C4F9AE02.roa
Signing time:             Tue 21 Jul 2026 02:27:16 +0000
ROA not before:           Tue 21 Jul 2026 02:27:16 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     3661
IP address blocks:        43.230.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl
                          rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856 (0x358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A78A7, serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190
        Validity
            Not Before: Jul 21 02:27:16 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5ed904-b9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:b1:03:60:f4:2a:4d:b5:78:5d:94:de:c1:
                    29:de:ac:64:8e:93:8f:4e:64:db:7a:92:80:78:02:
                    49:39:76:d4:40:3b:8d:59:18:74:ee:4e:78:14:70:
                    eb:f8:ed:7c:48:8a:94:9b:08:00:c6:14:28:50:39:
                    e3:c6:7f:f6:c3:e2:c8:69:d0:5a:df:95:90:76:98:
                    00:3e:43:88:a8:a0:94:43:36:bf:f4:5f:6a:9d:59:
                    fe:06:88:1d:71:0a:73:6d:a0:ca:08:c5:2b:4b:81:
                    db:de:4a:11:59:1c:de:cb:90:a0:82:91:80:dc:51:
                    18:79:e5:8d:f2:87:81:6e:be:74:79:6d:f9:ab:6d:
                    73:88:4c:0b:0d:47:b0:04:73:a0:c9:5c:3b:8a:68:
                    e8:ed:43:6f:6d:ff:f4:0a:34:65:32:0e:c5:84:b6:
                    63:13:86:d1:60:99:28:25:68:f8:93:14:06:c4:b6:
                    f5:d6:fd:bd:c6:77:7f:79:8c:dc:a0:95:5a:8a:e5:
                    f1:43:72:c2:58:0b:48:f7:51:64:19:a6:2c:26:4f:
                    02:7e:64:4b:10:b7:fd:12:9a:e3:97:70:ab:35:fe:
                    e3:21:50:93:58:36:a1:f2:71:7a:be:dc:f9:11:25:
                    64:f9:11:6e:d9:74:b7:2e:90:4a:69:50:83:78:56:
                    3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:74:21:13:7B:D9:C9:0E:A7:93:27:DE:D3:37:69:04:9A:93:6A:25
            X509v3 Authority Key Identifier:
                keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/D470449E0E4411ED9C0F5B45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:d0:50:61:27:f5:b9:3e:e0:f8:76:06:94:70:74:a8:48:60:
         93:ab:cb:b5:59:6e:3e:db:67:c6:2b:99:e8:69:f2:b5:b6:a5:
         8a:55:66:96:a4:e6:24:76:9f:e3:f2:1f:03:3e:3a:7e:a6:5a:
         fa:79:18:64:35:8b:8a:18:a7:7f:f8:5f:67:ec:62:1c:f3:b1:
         e2:9c:13:50:76:98:49:d2:24:0c:29:8a:3e:05:9f:ce:d7:de:
         b4:ae:30:49:38:ed:10:2a:cc:9b:15:73:3d:65:eb:1a:47:51:
         87:ad:8c:87:0c:b4:c0:28:da:4e:9e:9b:b2:0a:12:0d:04:eb:
         0d:22:b6:85:15:1c:aa:86:9e:5a:71:3a:65:eb:93:34:ba:06:
         0e:23:3d:50:9c:82:1e:77:eb:56:91:9d:b2:8e:46:dc:33:4c:
         dc:c9:4e:11:b0:95:0c:f6:fb:de:24:6a:10:9e:5e:ee:9a:70:
         df:0a:8d:cf:a9:de:7f:03:51:f4:df:10:59:8d:61:fa:f2:25:
         73:ef:61:c4:5a:3e:02:26:8f:f2:18:9f:4a:80:35:85:8b:e6:
         3b:e4:97:fa:e3:c8:df:fa:0c:80:b7:62:08:00:dd:52:95:6b:
         c2:44:39:6d:a4:e7:8c:3f:f9:a0:e4:95:3d:a7:f1:7b:5e:5c:
         90:1a:d2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:31:33 2026 by rpki-client