Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/DA005346B44811F1BDFAF9214B11F970.roa
File:                     DA005346B44811F1BDFAF9214B11F970.roa (raw, json)
Hash identifier:          Lut7JweVcMwFQnTAU9m2ttsawFzJYVRxrtD577Tvi5Q=
Subject key identifier:   F9:53:CF:23:AF:CC:65:D5:6B:8F:97:A6:90:48:39:91:57:99:13:86
Certificate issuer:       /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Certificate serial:       024B
Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/DA005346B44811F1BDFAF9214B11F970.roa
Signing time:             Sat 19 Sep 2026 16:40:41 +0000
ROA not before:           Sat 19 Sep 2026 16:40:41 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133645
IP address blocks:        113.192.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl
                          rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
        Validity
            Not Before: Sep 19 16:40:41 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6aaebb09-9cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2d:d6:33:39:8d:3e:ba:75:1e:2d:9f:23:d1:
                    d1:1d:c4:96:71:de:0b:bd:9d:db:ba:9e:51:c3:58:
                    55:82:97:e3:4b:36:77:90:54:02:52:1e:a7:74:4a:
                    2c:f7:cd:6d:0c:d7:a1:9b:58:23:6f:9d:10:4a:09:
                    fe:39:9c:f7:aa:a4:09:39:fd:88:b6:4d:a7:f6:62:
                    bf:ad:cc:61:46:c4:aa:bc:67:7d:41:7f:e0:df:47:
                    fd:be:f6:4f:c5:87:31:65:5f:fe:f4:dd:21:d9:23:
                    d6:ad:bf:76:da:cd:8c:35:38:01:be:06:54:05:be:
                    70:98:d9:14:4d:1f:70:6f:bd:9f:7d:e1:ea:be:f5:
                    e5:fd:f2:c5:eb:6c:f3:72:2f:11:83:f3:84:3d:15:
                    15:79:a8:dd:b0:d6:4b:d8:38:8d:fd:84:e0:06:37:
                    34:eb:82:69:13:af:d0:35:1c:3b:46:0f:3d:7b:8e:
                    4a:36:af:93:d7:0c:e8:c4:a7:a8:81:e3:70:58:15:
                    35:0e:4c:fa:3b:e2:8e:5e:2c:c0:85:86:36:3f:88:
                    00:7f:10:25:66:6a:27:44:b9:e7:2b:3c:74:8c:02:
                    0a:e5:db:90:14:75:1b:2b:a4:47:1f:3b:5b:3e:9f:
                    4a:9d:04:32:e4:55:8a:47:46:7c:a2:22:8d:5c:f7:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:53:CF:23:AF:CC:65:D5:6B:8F:97:A6:90:48:39:91:57:99:13:86
            X509v3 Authority Key Identifier:
                keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/DA005346B44811F1BDFAF9214B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:9d:1c:b5:4b:84:30:f2:65:ca:e1:d4:75:3d:7f:95:10:7c:
         3e:5a:80:f5:a0:ff:e3:66:81:c1:66:fb:58:ee:57:39:6f:95:
         f3:47:0d:02:26:86:64:dd:97:9b:ae:35:da:03:44:e2:d0:d8:
         41:8e:4f:7e:e0:1d:e8:46:1e:b2:4b:fd:cb:27:fe:96:54:9d:
         b4:9c:d4:ce:73:ca:07:1e:96:c1:ac:08:3a:69:7c:36:7b:f6:
         a3:9e:84:f7:05:cf:aa:f6:2e:aa:0e:ad:6c:0f:a9:c2:f5:f5:
         c6:5b:fa:fe:7d:ca:35:57:6e:e1:38:b3:f2:1c:c6:d9:80:e8:
         ee:f6:08:22:c7:6f:45:82:a8:81:9e:09:90:cf:a6:ab:ab:22:
         48:5f:6e:44:54:07:e1:d8:88:7d:be:90:d2:48:dc:34:9d:73:
         f6:ac:fb:ce:3c:3a:b9:8b:28:18:23:08:8a:2f:9b:c9:c7:e5:
         ca:cf:49:5d:83:bd:b7:2c:77:32:70:5f:31:b4:3b:c8:3c:92:
         77:61:11:9c:44:93:b6:f3:ce:c9:51:5c:a6:a3:dd:22:5b:df:
         4e:49:b2:ae:86:d3:73:fb:1a:71:ad:b4:72:15:81:15:d7:67:
         b2:4b:e3:0b:57:d0:34:4d:c7:94:37:80:d8:d7:52:0a:c8:3e:
         ec:65:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:25:52 2026 by rpki-client