Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/08347C420BFB11EDA31A0961C4F9AE02.roa
File:                     08347C420BFB11EDA31A0961C4F9AE02.roa (raw, json)
Hash identifier:          PuiDctOuJlf4lt6A2dYZ1tgkERX2Xujv7L8tOvTc9eM=
Subject key identifier:   43:9C:9F:C7:B5:C9:D6:00:E3:44:0D:3F:47:F7:BA:E0:C9:09:B4:24
Certificate issuer:       /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial:       35DA
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/08347C420BFB11EDA31A0961C4F9AE02.roa
Signing time:             Tue 28 Jul 2026 15:16:57 +0000
ROA not before:           Tue 28 Jul 2026 15:16:57 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     9506
IP address blocks:        111.65.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
                          rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13786 (0x35da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
        Validity
            Not Before: Jul 28 15:16:57 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a68c7e9-e382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:49:04:76:5a:7e:5f:d6:5b:51:ec:14:f9:
                    38:20:52:8e:3d:b1:1e:96:95:85:e7:a6:16:0e:54:
                    2a:37:65:a0:b6:92:ca:5d:27:b5:4c:f6:32:a5:91:
                    ac:d0:06:03:62:ce:ae:8d:a1:52:00:7d:e0:7c:e1:
                    0c:04:6f:2f:ce:c3:ab:30:7b:22:1e:80:2a:1e:96:
                    89:ec:7c:f9:4e:64:7e:ce:8e:0c:6a:3e:36:c9:5a:
                    1b:d1:90:13:6e:83:7c:2e:99:fb:92:59:5d:46:76:
                    46:35:56:54:d7:0a:84:be:4f:87:27:f6:60:9f:c8:
                    90:c4:4a:f1:0d:fc:cb:2c:88:0a:bb:05:16:67:55:
                    42:2c:0f:9e:08:1f:a6:0e:49:cb:23:3b:4c:ee:b5:
                    3d:f0:9b:5e:bd:1c:2e:0b:00:57:ef:b2:8b:aa:3a:
                    0e:3e:94:83:9a:1e:21:f7:ec:95:5c:64:dd:fc:e5:
                    bb:2f:06:20:a5:aa:3e:6e:7d:16:15:c8:1f:72:32:
                    fc:e5:7c:c8:0f:e4:27:93:16:fd:54:49:76:bb:be:
                    10:76:c8:c0:c8:d1:26:df:53:6a:fb:a4:0d:3c:df:
                    bf:35:3c:60:dc:99:f2:4f:bb:b4:74:77:3a:57:32:
                    96:bc:47:07:7b:7b:44:5e:8e:a8:66:5a:93:5d:01:
                    ee:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9C:9F:C7:B5:C9:D6:00:E3:44:0D:3F:47:F7:BA:E0:C9:09:B4:24
            X509v3 Authority Key Identifier:
                keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/08347C420BFB11EDA31A0961C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.65.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:58:a3:77:17:b7:d2:6c:9b:16:cc:18:be:ef:94:d0:e1:11:
         f3:c5:9d:40:48:29:66:17:92:84:dc:ec:6f:7f:32:4d:f1:f3:
         ab:5f:5d:22:04:a0:d9:37:fd:a9:6d:34:ce:c2:a1:71:16:32:
         d4:ff:59:c0:82:fb:1b:01:1b:49:0e:95:74:a7:7b:c1:de:21:
         64:22:43:43:f8:20:bc:77:a0:9f:78:6c:db:47:0a:e8:45:33:
         42:22:03:07:83:48:ef:71:6e:eb:26:e3:eb:c4:69:01:99:3c:
         dc:8c:81:0b:75:87:77:aa:99:07:13:61:35:f4:be:84:5b:37:
         63:36:6f:d1:62:24:c1:10:c3:20:2f:16:a5:f9:a4:81:f7:99:
         bd:e5:f4:9a:3c:ce:e8:29:40:ea:42:17:34:c9:cb:48:a2:9a:
         3b:2b:47:9d:81:24:5a:c9:ba:1b:e8:f5:b9:c9:b7:39:4f:d8:
         85:e4:8e:86:09:28:2b:cc:6a:c0:8f:a0:a6:da:d2:23:04:e7:
         60:67:9f:df:fb:26:84:8e:7d:7f:b1:02:65:23:79:2f:03:48:
         1d:54:8b:7c:ee:51:47:fc:a3:fc:2c:4e:09:1d:c9:e1:9d:b8:
         d0:9e:fc:6f:62:e8:d8:82:d1:25:dd:26:90:8e:57:89:30:6b:
         d3:18:27:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:33:30 2026 by rpki-client