Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/80BFC9C0A69B11F19B5CE4323411F970.roa
File:                     80BFC9C0A69B11F19B5CE4323411F970.roa (raw, json)
Hash identifier:          hSBb6yOl3I7oLDTq8wvA9Qk9AO6CNu5FP3RGDVCavF0=
Subject key identifier:   3F:C8:37:28:A6:46:2C:E2:FE:19:26:EF:7C:BA:AE:D1:27:FD:AE:91
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       2399
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/80BFC9C0A69B11F19B5CE4323411F970.roa
Signing time:             Wed 02 Sep 2026 06:57:04 +0000
ROA not before:           Wed 02 Sep 2026 06:57:04 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     834
IP address blocks:        180.210.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9113 (0x2399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Sep  2 06:57:04 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a97c8bf-dbb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:d2:03:80:58:2c:15:ec:41:87:9f:d1:a0:
                    31:7c:46:64:b6:d6:3b:a9:b7:7b:a2:b7:54:78:80:
                    af:bf:33:4f:5f:88:d7:50:80:e3:a5:89:32:44:ff:
                    87:4c:c9:1d:9d:35:d5:d4:f6:ef:7d:ce:fd:4f:37:
                    b2:16:e1:5f:72:09:1c:75:a5:ab:e2:42:08:28:f6:
                    ab:c5:7d:09:38:71:21:28:24:dd:70:44:0a:f2:1a:
                    cb:7c:bf:bf:d9:44:23:85:f0:1d:d7:ed:56:10:85:
                    97:d6:0f:87:6c:9b:38:1e:25:57:87:b9:ab:76:1b:
                    2d:9d:bf:7d:c5:16:a3:f2:d6:bd:13:2f:ab:54:b4:
                    cc:63:7c:6e:11:8d:0c:c0:17:b6:00:eb:fc:f5:2b:
                    7c:c2:c1:9e:2b:b2:75:35:5b:6a:e6:80:90:b5:46:
                    73:b1:88:95:06:1f:6c:fd:d7:5b:ad:74:82:49:7e:
                    f6:2c:fc:0f:df:5d:5d:ea:9e:59:7e:b0:6d:6e:c0:
                    7f:d7:5f:71:76:d9:a0:68:26:f8:9e:2a:00:87:47:
                    8b:17:63:6b:f8:af:5c:8b:1d:d3:97:25:bb:03:1c:
                    2b:81:fc:33:85:c3:f3:4a:90:e8:d1:16:37:84:be:
                    bc:a3:11:2f:af:73:f5:25:fb:a7:21:1c:e6:e4:65:
                    0e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C8:37:28:A6:46:2C:E2:FE:19:26:EF:7C:BA:AE:D1:27:FD:AE:91
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/80BFC9C0A69B11F19B5CE4323411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.210.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:22:fe:be:fe:58:11:61:43:9d:bc:48:e2:ce:b9:c6:ff:3a:
         11:a5:cb:e2:61:d7:99:23:06:02:08:12:b6:cb:83:bd:ff:56:
         25:9e:42:5f:ca:89:8e:97:22:ff:56:20:eb:14:06:2a:ae:3b:
         49:e0:df:21:e9:95:ce:94:32:e9:7b:fa:2c:8e:bb:e2:bd:02:
         57:46:3c:cc:58:f5:1a:ba:88:f0:59:f1:f1:fa:36:c9:20:65:
         c0:8b:b9:41:e6:e0:47:80:59:3a:7e:13:44:3a:34:9e:5c:88:
         63:2c:58:ac:95:06:14:2a:8a:cf:93:0f:69:f5:04:91:a4:dc:
         c3:93:10:58:12:c4:4b:03:87:31:02:1a:7d:0b:3b:36:9e:55:
         31:10:d8:a2:ed:b8:50:c9:e7:0f:0e:10:01:d0:21:4b:04:f0:
         c2:89:77:77:2b:99:a1:35:e6:97:71:3c:9c:95:ae:4c:53:d7:
         73:2b:dd:30:fd:fe:8a:08:e9:b5:a8:ee:a6:61:98:06:40:78:
         d4:c2:49:f5:e9:89:7c:9d:05:dc:6a:de:5a:5f:60:b8:85:86:
         cf:a3:3d:07:45:89:3c:13:21:8d:ab:01:72:0c:9e:31:26:a8:
         b9:1d:e3:fa:79:1b:d3:0a:01:58:48:47:84:05:b8:29:e6:c6:
         f8:4e:b2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:29:52 2026 by rpki-client