Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/78040D1CC38511F1B940358A4211F970.roa
File:                     78040D1CC38511F1B940358A4211F970.roa (raw, json)
Hash identifier:          q7lMHkfc3Kg57FunRBoqrPu8lvqmyZy6KVAf8O0fstk=
Subject key identifier:   A6:DF:A9:DE:95:70:0E:F1:B4:FB:16:9A:99:A2:9F:4A:24:C7:9C:BE
Certificate issuer:       /CN=A91AC70D/serialNumber=1D144CE260195E8CB35F8F288731E2EA08800661
Certificate serial:       16
Authority key identifier: 1D:14:4C:E2:60:19:5E:8C:B3:5F:8F:28:87:31:E2:EA:08:80:06:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/78040D1CC38511F1B940358A4211F970.roa
Signing time:             Fri 09 Oct 2026 02:02:24 +0000
ROA not before:           Fri 09 Oct 2026 02:02:24 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     23602
IP address blocks:        124.40.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.crl
                          rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 10:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC70D, serialNumber=1D144CE260195E8CB35F8F288731E2EA08800661
        Validity
            Not Before: Oct  9 02:02:24 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac84b30-8445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:f2:1e:51:fc:7f:23:60:a0:d3:1a:38:ba:
                    0e:5f:e3:0c:3b:fe:97:43:e5:b1:61:b4:5e:53:7f:
                    42:f9:8a:a2:86:7d:36:18:0f:32:49:87:ed:ad:42:
                    90:e4:7e:9a:e3:2d:fb:87:3f:96:26:51:a2:1c:fd:
                    cc:2e:05:2a:19:df:90:68:ef:07:c9:63:b8:2f:f1:
                    c2:9a:31:52:b0:d7:98:84:d4:6a:37:d0:b0:27:60:
                    b8:52:8d:d8:77:fc:81:ea:ca:39:54:be:a8:28:05:
                    88:a2:c9:43:cd:6f:38:54:89:20:66:97:bb:66:e3:
                    1e:63:d5:f8:89:c7:8d:ad:01:d0:ec:32:b2:97:d9:
                    8c:74:42:d8:7f:7e:28:e8:70:88:d7:de:68:31:aa:
                    8a:dd:53:50:c2:ed:a5:bf:82:8f:a4:87:98:94:fd:
                    4e:d3:49:27:fb:91:80:3b:59:40:29:ce:0d:30:f5:
                    07:32:7b:b7:6b:a6:e9:02:7e:08:cf:e2:0f:cb:90:
                    4c:87:23:08:1c:74:22:ca:0c:c7:4d:ec:fc:e0:17:
                    b8:db:a9:61:7b:85:68:c7:78:3d:d7:7a:43:90:86:
                    2f:2f:5e:9e:c7:5a:eb:03:05:8f:e3:b3:d6:4e:02:
                    a2:06:28:3e:2f:d8:b3:43:c0:25:3b:ca:3d:9d:05:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DF:A9:DE:95:70:0E:F1:B4:FB:16:9A:99:A2:9F:4A:24:C7:9C:BE
            X509v3 Authority Key Identifier:
                keyid:1D:14:4C:E2:60:19:5E:8C:B3:5F:8F:28:87:31:E2:EA:08:80:06:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/78040D1CC38511F1B940358A4211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:7b:af:4c:eb:a1:bb:dc:9e:fb:90:d0:e8:ed:cc:40:fa:7e:
         c0:96:b8:22:e1:9d:b3:32:d2:f9:c8:29:67:31:bd:d3:7d:c2:
         6c:10:bb:98:85:7b:40:75:25:7c:0e:7f:fe:cd:24:39:d9:8d:
         8c:30:be:70:5b:6f:be:f7:1a:cd:6b:ab:de:d4:4a:65:80:36:
         18:c6:1d:e9:ca:cf:1a:3f:b3:3e:08:49:9b:9a:28:a6:85:9e:
         f8:1d:b2:30:1d:7a:5e:4c:41:2e:30:53:7f:c9:f4:a1:e2:48:
         41:6f:7c:fb:e6:ba:39:6f:7a:77:08:5a:af:33:3d:34:39:4f:
         58:23:9a:6c:95:d5:c1:3e:11:7a:16:30:a4:76:96:80:3b:40:
         c5:cc:6a:ed:d8:3d:e6:6d:61:ec:df:49:5e:81:92:ce:63:7e:
         40:67:50:af:52:37:ce:36:91:0e:8d:87:93:a7:fb:ff:1a:27:
         0b:97:5a:c7:38:8e:66:a9:02:a0:c4:34:e7:f7:86:29:a0:2a:
         f0:85:be:09:90:83:22:6f:24:2d:53:1e:c7:ba:da:88:b1:be:
         94:bc:cd:f7:c5:a4:6f:f0:f7:fb:4f:d5:07:e4:7d:91:58:3a:
         c0:29:e4:20:71:91:b9:f8:28:08:bf:62:17:cd:2c:78:30:ea:
         00:c0:54:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 11:30:58 2026 by rpki-client