Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/583C1F6854F611E79DF7E643C4F9AE02.roa
File:                     583C1F6854F611E79DF7E643C4F9AE02.roa (raw, json)
Hash identifier:          +rkvcv94NMaYampI+fYTUB0c8pEWY+GEMSJjHTOiOXE=
Subject key identifier:   C0:97:C1:D5:82:F5:A1:AC:EB:66:27:22:59:51:FB:83:53:E3:E7:E1
Certificate issuer:       /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0
Certificate serial:       3180
Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/583C1F6854F611E79DF7E643C4F9AE02.roa
Signing time:             Tue 22 Sep 2026 16:20:21 +0000
ROA not before:           Tue 22 Sep 2026 16:20:21 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     187
IP address blocks:        203.119.88.0/23 maxlen: 24
                          2001:dd8:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl
                          rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 15:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12672 (0x3180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B80BD, serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0
        Validity
            Not Before: Sep 22 16:20:21 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab2aac5-10b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:be:c7:d4:ca:38:cc:f1:3b:dd:19:e6:66:
                    11:e2:c1:04:a4:b9:ea:13:1a:6c:c4:5f:ae:dc:77:
                    be:c7:a9:4f:81:9a:4d:07:ee:5c:a5:9a:dc:60:36:
                    1c:ab:49:53:9a:b4:3b:58:f6:b1:0b:ce:96:39:b7:
                    af:89:23:b1:09:79:ec:73:02:fc:65:d5:eb:1d:4a:
                    ca:bd:b9:ce:0a:f7:ef:44:44:6f:13:8f:c5:0b:68:
                    6a:c8:ff:72:24:24:8b:a1:6c:b8:72:09:e5:69:55:
                    28:1b:f9:50:cf:da:a0:e5:78:59:7c:5b:59:bb:2c:
                    d8:44:5e:71:53:7c:b7:5b:78:c5:66:5c:15:1e:d7:
                    56:7b:be:30:65:5b:55:27:be:2d:50:ff:2b:b5:fd:
                    a2:68:40:29:77:82:bf:c1:bd:fc:9c:77:50:58:69:
                    6d:61:ec:1c:22:b6:e6:37:5f:be:ef:fa:ea:9b:f4:
                    c0:cf:5c:55:13:5e:8d:17:ea:8c:82:1b:23:8e:2e:
                    26:66:0c:bb:b2:94:42:bc:0e:2f:9e:7b:ba:6c:62:
                    3e:67:a1:87:d9:ae:d8:91:d8:d0:1f:a5:53:4c:93:
                    a6:50:49:b2:6b:ee:a0:f9:bd:10:72:0b:bb:6e:f2:
                    eb:ef:c7:fc:94:1e:d6:5c:65:7d:0c:68:51:5b:f3:
                    85:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:97:C1:D5:82:F5:A1:AC:EB:66:27:22:59:51:FB:83:53:E3:E7:E1
            X509v3 Authority Key Identifier:
                keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/583C1F6854F611E79DF7E643C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.88.0/23
                IPv6:
                  2001:dd8:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:90:49:03:82:21:05:37:fa:6c:da:e5:ab:46:0f:0c:a8:9d:
         d3:2f:fc:8b:4b:01:b5:0e:9a:05:38:1f:78:1b:fa:e2:7d:6b:
         51:64:57:ad:f7:79:8f:96:a1:73:03:a0:24:8c:42:1e:a3:c9:
         28:b2:49:f1:fb:d5:33:51:fe:c9:7a:f9:1c:94:72:65:a1:3e:
         4f:01:81:b5:91:46:fb:29:e7:40:ad:34:ff:c0:59:ed:28:a1:
         64:45:2f:31:a4:5c:d3:61:f9:8c:7c:eb:ed:0a:bf:21:50:32:
         a4:26:65:2b:5b:e9:d7:2b:30:32:92:52:6c:dd:24:a9:30:49:
         05:ba:27:16:5c:b2:e9:c8:45:4a:56:bc:91:80:c3:5c:ef:47:
         8b:29:48:d8:86:4d:42:4e:ed:44:80:b3:4b:0e:f4:62:12:88:
         67:3f:f2:7b:2b:3f:cb:13:7b:68:e4:31:4e:82:bc:1b:55:ce:
         1f:3c:82:87:7a:cf:90:62:32:57:b3:a6:f7:86:8e:00:8f:50:
         3f:79:3e:53:4a:19:e6:69:47:cb:ff:c5:c7:d9:96:c0:4e:fe:
         3e:f5:f7:32:0e:d3:07:58:c0:e0:4b:85:25:f8:af:66:e8:a7:
         43:00:16:3c:c9:ef:af:d9:1c:0c:a2:cf:46:66:4c:71:7d:47:
         ce:8c:5f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:00:02 2026 by rpki-client