Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/B643C13464D111F1AEDC7C0F6A47A888.roa
File:                     B643C13464D111F1AEDC7C0F6A47A888.roa (raw, json)
Hash identifier:          5hrXD8FvQIBDK27nv5xrgLxOE5V57p0m29HMAxji75I=
Subject key identifier:   A9:39:36:64:C1:B0:49:8D:91:1C:B7:7E:1F:5A:50:09:01:49:76:AB
Certificate issuer:       /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Certificate serial:       2278
Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/B643C13464D111F1AEDC7C0F6A47A888.roa
Signing time:             Wed 10 Jun 2026 13:38:49 +0000
ROA not before:           Wed 10 Jun 2026 13:38:49 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     46606
IP address blocks:        112.109.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
                          rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8824 (0x2278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
        Validity
            Not Before: Jun 10 13:38:49 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a2968e9-db5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:48:81:ec:09:9f:ef:d3:fd:07:99:2d:9f:27:
                    34:ac:61:43:e0:59:ea:fe:20:2b:23:6f:06:e2:a1:
                    e1:9b:f2:93:f8:ee:f9:ec:83:f3:31:00:0b:51:40:
                    e3:ad:46:5d:35:a1:f6:e1:3e:2a:bf:c3:94:44:4d:
                    74:23:14:43:60:59:6a:6e:9e:72:8d:42:e1:99:66:
                    55:3b:66:a6:86:c8:b9:19:f8:4e:6f:3e:58:65:f9:
                    10:b2:5f:6e:6b:28:75:73:20:ef:51:f8:c5:7a:f0:
                    f5:45:ff:9d:b9:2d:18:08:fe:0b:f2:6c:5b:61:44:
                    1a:20:d5:e2:3d:0e:10:ac:fd:53:80:10:bc:68:b1:
                    52:42:78:b4:57:a1:07:11:78:7d:57:3c:62:38:cf:
                    2f:f2:d8:56:6b:22:70:8d:9e:c3:93:f7:7a:19:e0:
                    66:9b:8a:61:65:0f:90:c0:ce:2b:77:10:3a:d8:f8:
                    5a:92:10:02:e1:42:5c:be:08:e4:20:20:db:32:5e:
                    1d:6f:85:b4:29:09:4a:19:95:05:c0:be:e1:4d:ea:
                    93:ae:1c:36:90:40:52:bd:26:c3:cd:03:7d:cb:ff:
                    64:44:63:17:b7:8e:0b:ea:f5:9a:d1:d7:b1:87:c3:
                    9a:a1:98:65:bf:05:83:ef:b9:af:34:64:49:a4:f2:
                    b3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:39:36:64:C1:B0:49:8D:91:1C:B7:7E:1F:5A:50:09:01:49:76:AB
            X509v3 Authority Key Identifier:
                keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/B643C13464D111F1AEDC7C0F6A47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.109.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:63:7c:b7:99:ea:08:b7:09:43:1a:fb:17:de:ff:1a:19:29:
         ff:da:bb:90:b0:60:47:18:50:61:52:62:0b:37:50:31:49:b3:
         5a:0a:ee:d4:41:bf:10:57:c8:2f:b4:65:5b:03:16:f1:9e:17:
         b5:71:1c:ae:7a:83:fb:ac:78:e8:af:b8:19:4f:23:6b:61:bd:
         b7:80:79:73:d2:1e:4f:b0:79:e1:b1:5e:76:49:96:1f:73:17:
         61:de:8a:c1:a2:0b:3d:2d:f0:83:ca:fa:ce:94:4e:53:11:62:
         a3:53:93:b6:e3:3d:b8:fe:79:25:5b:21:51:af:68:f3:dd:d2:
         65:9d:4d:19:d9:57:74:d3:b9:c9:ef:a9:dc:3e:15:f9:21:d4:
         6f:d8:09:3f:9b:09:0d:e7:f6:ce:2e:19:12:71:c3:ec:41:a6:
         3e:83:eb:72:d9:08:d5:49:54:03:75:7c:a6:35:da:ee:af:0b:
         4f:b9:3a:55:3d:3a:3e:75:e3:b6:9c:32:3e:34:2c:cc:fb:8f:
         0c:79:39:eb:8a:d0:05:b6:2b:7d:ba:02:c5:ae:6f:b4:7c:ac:
         59:50:da:73:4a:52:15:57:f4:cd:86:5c:2b:dd:77:91:8b:5a:
         ca:89:c9:14:d8:31:2d:ab:c5:19:38:ee:3b:c7:54:09:45:f1:
         50:05:58:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:56 2026 by rpki-client