Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/9920D2E6F7C611EA8B23C30CC4F9AE02.roa
File:                     9920D2E6F7C611EA8B23C30CC4F9AE02.roa (raw, json)
Hash identifier:          co5X0xYdle4KtgZpy9b1L0SQwwVjibc6EJjUGW0ROpI=
Subject key identifier:   AC:04:54:96:D8:78:40:CA:95:1F:60:A9:6B:FF:DC:4C:48:FA:F0:89
Certificate issuer:       /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
Certificate serial:       08C8
Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/9920D2E6F7C611EA8B23C30CC4F9AE02.roa
Signing time:             Mon 14 Sep 2026 20:40:55 +0000
ROA not before:           Mon 14 Sep 2026 20:40:55 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     9884
IP address blocks:        202.189.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl
                          rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248 (0x8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5590, serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
        Validity
            Not Before: Sep 14 20:40:55 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa85bd7-2e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:4d:00:59:bb:a4:0d:95:e9:90:93:45:0f:
                    3b:1a:49:a7:a2:76:c7:9a:b7:ff:ab:d1:d3:51:32:
                    3e:c3:5b:21:a8:28:ac:d5:20:23:b1:03:a7:fe:20:
                    21:ad:ea:e7:11:f6:7b:cf:83:08:a6:cd:8b:66:1d:
                    0b:dc:80:ab:81:a9:0c:e8:d4:73:20:30:b7:35:ab:
                    2d:05:ce:43:df:2d:45:4f:3b:e4:81:7c:58:c3:27:
                    7b:cc:7b:48:02:c2:54:af:89:5f:51:c1:0f:8c:a1:
                    1c:e0:88:5e:22:ee:20:40:09:13:31:d3:d8:c0:e7:
                    48:d3:c7:cf:cd:8c:8f:6f:0a:d1:cd:78:db:98:fb:
                    27:25:5b:a7:83:96:f1:c9:ae:e3:ae:d2:e2:80:5b:
                    12:7b:dc:67:e5:77:c6:a1:9e:25:05:25:81:be:ff:
                    dd:d5:88:71:a1:42:01:89:b3:0b:2b:38:fa:bd:c4:
                    2a:2b:93:4d:ab:ca:63:81:6a:dd:83:21:ff:60:d0:
                    65:ef:a8:83:9a:c1:9c:06:66:d6:84:af:79:67:4b:
                    d7:2a:4f:0c:dd:29:a3:52:a0:27:90:a8:4d:cd:f3:
                    04:a0:ef:74:52:6f:04:52:91:53:4d:b3:db:53:d1:
                    d6:72:eb:a5:5a:0e:49:8d:49:3b:5d:81:58:a3:9f:
                    c0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:04:54:96:D8:78:40:CA:95:1F:60:A9:6B:FF:DC:4C:48:FA:F0:89
            X509v3 Authority Key Identifier:
                keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/9920D2E6F7C611EA8B23C30CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.189.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:31:67:90:0f:5b:5e:ac:a9:04:88:d9:4c:ed:5f:c0:2e:28:
         47:75:da:89:35:98:93:e1:02:6f:ce:24:2f:fb:5d:78:c7:e8:
         5b:6e:2f:11:7a:e7:59:af:fc:f1:8c:85:a7:df:7c:96:1e:61:
         03:10:44:a9:0d:36:65:5d:9e:76:18:55:62:17:9f:23:5c:97:
         4f:37:0b:52:63:47:5c:0b:14:25:7b:e5:e4:ea:ff:23:f1:c9:
         4a:a3:d5:6a:53:2e:44:9f:21:b2:2e:de:10:aa:24:a2:2d:a2:
         e4:12:d2:12:1b:4f:d1:70:90:c6:f3:2b:96:da:83:8b:11:50:
         9d:cb:c3:8a:a2:2c:ee:79:a8:96:68:8c:e6:1f:34:e2:60:f3:
         90:fb:10:18:08:fc:9c:bb:d5:f7:4f:a2:6c:47:45:0f:2b:1c:
         a1:cc:30:3f:fb:a6:00:72:b9:e9:3c:17:62:13:8f:5b:e8:74:
         d4:5d:33:d3:82:55:6f:2e:ec:4c:e0:f2:c6:30:7b:0a:10:11:
         b3:ca:b2:c0:4d:34:7a:40:53:ee:f2:bd:8f:11:77:43:7f:ba:
         fe:5d:d4:5c:43:21:36:ba:dc:87:1e:c7:13:97:ef:33:75:0a:
         5b:03:5f:df:e8:88:b8:fd:70:ab:80:2a:05:a1:ba:6e:67:f4:
         1d:4d:be:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:41:45 2026 by rpki-client