Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/96F5D26CFD5A11EEA0731E55C4F9AE02.roa
File:                     96F5D26CFD5A11EEA0731E55C4F9AE02.roa (raw, json)
Hash identifier:          Ti9PlBRZuakBk1+DVxnhOg3U/C4AJTP/aQFIX6lbwWg=
Subject key identifier:   0F:EB:64:C3:C5:DA:C2:4B:53:5F:B9:25:51:47:5E:8B:E4:79:57:58
Certificate issuer:       /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Certificate serial:       0236
Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/96F5D26CFD5A11EEA0731E55C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 03:33:55 +0000
ROA not before:           Fri 05 Jun 2026 03:33:55 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152687
IP address blocks:        202.37.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
                          rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC86F, serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
        Validity
            Not Before: Jun  5 03:33:55 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a2243a3-13f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:85:11:e2:42:12:be:bd:d9:d8:f9:f6:a2:
                    96:1e:59:46:0a:64:62:c7:4e:11:aa:40:c1:41:80:
                    1e:81:2a:fc:04:4e:94:09:dc:b2:c0:ec:7f:9e:c8:
                    d0:5b:33:c3:53:8f:cd:b2:a2:35:cf:7e:9e:af:c2:
                    27:cd:05:52:c3:1d:8e:d1:56:c1:c2:30:5e:53:5b:
                    af:5a:0e:00:61:09:6b:d4:b6:b4:2e:7c:95:5c:21:
                    01:0c:b4:c6:45:09:40:c0:ad:f7:7e:92:32:d8:7e:
                    1f:c2:cd:6e:35:c2:36:fd:bd:75:ba:0b:a8:1a:51:
                    dc:39:2e:56:73:d8:ae:bd:00:8d:d9:84:08:bb:b3:
                    8a:5d:bd:48:04:32:80:05:f1:25:09:b8:0f:cf:e6:
                    0e:65:d8:78:32:42:ed:5a:a1:03:9a:31:73:8a:38:
                    2b:89:44:7b:10:a0:dc:96:83:bd:61:b1:c3:df:5a:
                    ec:df:ff:bf:e3:83:cc:f1:0f:6b:35:90:34:11:e6:
                    e7:58:0e:0c:d4:d4:4c:ee:fa:f5:a1:be:b4:c4:f6:
                    23:0a:41:16:58:ef:8d:04:03:b1:f4:28:0e:dc:7c:
                    21:a3:9e:13:a3:b2:b0:c9:6f:1e:f2:45:9a:18:aa:
                    b5:8e:3f:aa:a8:61:71:fe:4a:29:09:4a:c5:b8:28:
                    70:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EB:64:C3:C5:DA:C2:4B:53:5F:B9:25:51:47:5E:8B:E4:79:57:58
            X509v3 Authority Key Identifier:
                keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/96F5D26CFD5A11EEA0731E55C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.37.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:fe:88:e6:27:a0:23:87:fb:8b:82:07:d2:c3:bc:bd:a4:f7:
         fa:06:9f:3d:95:3e:a5:56:df:11:cc:bd:18:86:f4:96:a6:e2:
         88:51:bd:b2:d7:1f:81:37:5d:89:20:e9:d2:1a:ff:04:6c:1c:
         d0:04:21:28:a6:54:22:41:44:e3:8e:10:a1:2c:9f:bf:1d:3c:
         08:40:de:38:c9:65:1a:d3:ca:71:0d:d8:ae:15:0a:1c:17:04:
         79:dc:00:0d:df:99:07:25:3e:aa:c5:67:78:ed:78:b0:f4:71:
         ca:4e:69:95:22:ec:90:c0:e9:21:ff:2b:6e:e6:79:43:dc:96:
         e2:00:46:62:23:53:b5:01:13:8a:98:cb:38:e9:a4:3f:41:08:
         04:c5:d4:32:ac:0b:69:fb:6c:22:7e:5a:69:3c:99:6b:14:ab:
         0d:90:5b:2a:1f:17:e3:d0:48:11:11:74:90:69:32:c2:a2:a2:
         76:99:30:84:6e:ea:43:fc:32:a0:52:3f:82:49:92:55:ab:0c:
         55:72:9c:b0:45:c7:52:86:de:7a:fd:b0:c3:dc:1a:54:28:23:
         31:96:89:8f:57:72:5c:8d:d3:e9:4c:c8:71:9b:53:07:c2:26:
         bd:96:49:b9:7f:ba:b1:af:c0:b2:72:3f:f6:4b:17:ac:1a:44:
         42:fa:79:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:15:27 2026 by rpki-client