Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/9115EA0AB10111F1AE8BBA243D11F970.roa
File:                     9115EA0AB10111F1AE8BBA243D11F970.roa (raw, json)
Hash identifier:          +bjMgtWkNcq3m2g61D0zjiHa0To1HR3zomN7Lm9eiRw=
Subject key identifier:   7D:69:93:DB:A8:ED:EA:CD:57:08:6F:54:F2:FD:4E:99:70:5E:72:29
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       03C7
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/9115EA0AB10111F1AE8BBA243D11F970.roa
Signing time:             Tue 15 Sep 2026 12:32:51 +0000
ROA not before:           Tue 15 Sep 2026 12:32:51 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        202.134.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967 (0x3c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Sep 15 12:32:51 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6aa93af3-a287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:c9:25:94:09:9c:65:c0:b1:fb:ef:d4:b2:
                    fa:1b:d0:16:d4:30:af:65:89:48:94:c0:1d:3c:b4:
                    c4:7c:93:c9:8e:84:b3:0c:9c:44:39:4e:be:c0:7f:
                    50:ed:44:05:3e:fd:a7:eb:ef:b0:a6:e0:32:0b:8a:
                    68:dd:dd:9e:4f:89:38:51:fb:f8:db:1f:e6:5b:73:
                    f8:dc:92:a7:fb:d1:2b:8c:3a:ab:37:69:b2:3b:14:
                    02:bb:d9:d5:87:5c:a0:c5:c6:97:e4:df:cc:03:54:
                    09:ca:37:a4:1d:5a:bc:ca:1c:57:f6:57:0d:a7:a3:
                    93:2b:31:bf:1a:67:ba:ca:e3:d5:77:59:16:18:e7:
                    b8:e8:02:a4:0a:79:d1:a7:1c:91:f1:3e:93:53:1d:
                    5b:91:74:d2:b4:45:b2:75:b6:4b:6f:2b:ea:a2:94:
                    95:75:51:e1:3b:43:b9:78:96:24:40:54:fb:3f:b7:
                    27:8f:3f:70:c0:5f:e7:91:d4:9a:81:dc:d1:8e:5b:
                    04:51:81:75:b8:8b:90:88:b5:9c:bc:a9:12:14:06:
                    fd:8c:67:d5:5c:43:69:c5:4a:2e:e0:cd:1e:23:37:
                    a8:32:22:5f:7e:f4:a1:e0:21:33:f3:85:33:e5:14:
                    4d:9e:a6:0a:cf:e0:f5:bc:bb:00:34:53:e3:97:54:
                    c1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:69:93:DB:A8:ED:EA:CD:57:08:6F:54:F2:FD:4E:99:70:5E:72:29
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/9115EA0AB10111F1AE8BBA243D11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:6f:77:49:9f:bb:6c:fb:c6:b8:fd:8e:5b:99:8b:ec:ec:88:
         82:ff:94:90:ec:28:cc:d7:82:f9:12:0f:1d:a5:ac:81:e7:a2:
         af:bd:39:d7:bb:73:2e:23:00:53:f8:be:9b:a1:a5:e9:11:64:
         55:db:9e:6a:e2:6e:ad:02:70:8d:fa:33:8f:2b:14:55:1f:c2:
         a7:19:4c:4e:cf:05:c1:ac:d9:21:0a:d6:8c:ec:9c:1f:55:7a:
         ef:64:18:90:7d:f8:d6:9d:03:7a:aa:0b:89:e0:60:a4:74:45:
         06:d2:83:db:ef:eb:24:08:7a:d8:d9:0e:6c:39:9f:2e:42:9f:
         5f:fb:f2:40:17:15:22:5f:9e:52:fb:f5:8d:e7:d2:84:01:6f:
         7d:61:9c:ba:19:79:cd:19:7c:b0:79:6d:e3:0e:58:5e:72:dc:
         b4:78:b0:4b:28:27:d0:f8:45:c2:46:49:10:8d:6d:7e:7c:2a:
         3b:50:5d:e4:ac:fe:20:cb:e2:f4:85:45:4b:3a:bc:b5:b0:b3:
         2f:30:a6:4a:62:1c:21:5f:69:b0:03:1d:18:dc:c2:e8:39:07:
         98:b1:3d:5a:e5:7b:94:c1:24:86:cb:36:62:4f:a0:e3:e2:25:
         c2:55:8d:d6:23:a4:e3:6c:cd:9b:7e:26:db:12:39:b0:d3:1e:
         fa:9d:44:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:57 2026 by rpki-client