Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/268B977AA0B211F18E86806D5E11F970.roa
File:                     268B977AA0B211F18E86806D5E11F970.roa (raw, json)
Hash identifier:          q6uS83KtWRB+S8CNlYFejf8nUtq//hKO3iV9xGtCJh4=
Subject key identifier:   C1:FA:FA:FA:8A:FA:2B:F5:BB:2D:6F:7F:B3:AE:40:6F:CE:A8:FB:EB
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       2362
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/268B977AA0B211F18E86806D5E11F970.roa
Signing time:             Tue 25 Aug 2026 18:24:04 +0000
ROA not before:           Tue 25 Aug 2026 18:24:04 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     142240
IP address blocks:        220.158.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9058 (0x2362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Aug 25 18:24:04 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a8dddc3-fca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:07:52:c1:ae:bd:82:4d:31:62:b9:8c:9a:
                    08:6a:c1:ab:70:4c:94:21:af:28:98:e9:0a:38:1e:
                    e0:35:4f:b8:63:e5:2e:da:68:f1:29:aa:68:41:23:
                    b5:3c:c1:34:63:6f:08:0e:90:60:18:96:4a:c9:de:
                    08:72:80:35:38:df:43:e1:ea:47:f7:c0:67:07:4d:
                    74:a9:8f:f3:38:4a:52:38:3e:0a:a9:87:c5:4d:b7:
                    11:a1:a7:5c:5e:f1:00:2a:b0:66:54:71:6a:75:65:
                    43:00:11:50:04:8f:52:d1:f9:14:78:a3:8d:2a:fd:
                    2f:e3:b9:7d:81:63:ee:10:8b:59:d7:84:e1:64:b2:
                    f7:46:e5:47:74:e9:e8:8b:9d:b6:ee:56:e3:49:6a:
                    f1:d2:84:a4:1f:27:90:3b:0f:e5:b5:8d:07:96:71:
                    ef:60:6d:97:86:a2:1b:42:55:d6:73:c8:5d:cd:34:
                    88:c8:c0:6c:16:b2:0c:48:b3:dd:9e:55:77:2c:93:
                    6f:56:7e:be:cd:bd:8e:8e:fa:28:b4:e3:ca:d6:35:
                    4a:3a:df:0d:12:e4:91:7d:04:ac:97:8d:18:7d:16:
                    85:52:f1:c0:90:33:1c:d1:fa:27:20:2d:3a:73:ae:
                    57:68:60:99:cc:26:da:8d:6b:a9:63:5d:79:83:0a:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FA:FA:FA:8A:FA:2B:F5:BB:2D:6F:7F:B3:AE:40:6F:CE:A8:FB:EB
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/268B977AA0B211F18E86806D5E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.158.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:99:f3:d6:b4:34:ca:01:b4:4b:e3:ae:e3:17:e3:30:7a:dc:
         81:f7:43:83:60:64:e6:d5:2e:01:cc:65:24:05:e6:48:5c:8a:
         7d:1f:95:c1:36:2b:ec:d0:24:8a:1c:35:b2:a0:a8:66:3e:c8:
         ea:74:ea:c2:e5:7f:77:d8:76:5b:76:d2:26:61:2c:ef:61:c0:
         22:be:66:51:e1:3a:e2:a3:ee:9f:f7:06:dc:42:c6:75:83:78:
         56:9e:1b:9a:1e:5d:0a:ed:2f:8e:3a:da:19:48:c1:89:91:91:
         2a:ef:94:64:2b:55:e0:02:ce:51:41:6f:03:f9:ba:cd:a9:c4:
         0a:e0:09:78:1f:c1:c2:5b:76:8e:f7:bf:d9:62:d5:e5:1f:10:
         aa:ec:38:87:1a:0e:9c:90:ca:88:8c:eb:57:6a:12:79:90:8c:
         74:58:54:07:64:34:81:8d:c6:f5:0a:ee:09:f2:95:27:3b:00:
         15:0b:56:ff:a3:96:fb:71:aa:b5:4a:37:35:c4:ce:a0:0d:cb:
         97:c5:b1:a5:87:23:3c:2f:7a:f1:ff:ea:cd:5a:65:9f:18:c0:
         18:ee:05:ad:6e:65:61:d1:60:ee:5f:b9:ed:1f:51:51:b6:f4:
         49:17:90:06:ff:24:21:2a:8a:96:0b:2c:0e:bd:c0:cb:1a:76:
         8a:3a:04:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:05:42 2026 by rpki-client