Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/BCEB94DAA81A11F18448F1EC6E11F970.roa
File:                     BCEB94DAA81A11F18448F1EC6E11F970.roa (raw, json)
Hash identifier:          7Ouv3JUrLICKOKUbAA1JzJHGvf72CwEZSx8VXOX0LQ0=
Subject key identifier:   FB:2B:D1:58:96:F8:9E:85:35:0F:04:A0:14:4E:48:CA:4D:67:62:6B
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       239F
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/BCEB94DAA81A11F18448F1EC6E11F970.roa
Signing time:             Fri 04 Sep 2026 04:40:22 +0000
ROA not before:           Fri 04 Sep 2026 04:40:22 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147281
IP address blocks:        220.158.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9119 (0x239f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Sep  4 04:40:22 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a9a4bb6-f207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:37:33:fb:f7:e2:4a:10:1b:73:48:12:1e:e7:
                    71:20:a2:e5:44:7a:3a:19:fb:b1:72:4a:da:4f:81:
                    25:bc:fa:40:4c:a3:4a:c8:0a:7d:c4:36:6f:43:07:
                    1d:f2:c8:7e:d5:8b:5f:49:43:2d:83:cc:75:92:26:
                    01:9e:31:1e:35:9f:f8:27:88:34:a1:e9:44:ac:bd:
                    f9:d4:dd:2b:3b:60:39:a8:ac:10:ba:7f:ee:49:95:
                    2b:ad:ac:b1:b1:07:8d:ef:65:ea:e5:26:c1:77:9d:
                    15:82:48:55:65:0b:bd:56:3f:d3:0e:b7:76:80:9d:
                    e6:94:3c:ea:c7:1e:17:0e:75:22:82:f7:6b:8f:89:
                    f3:b0:0d:68:af:00:66:2b:a3:9b:f7:0c:d4:32:1e:
                    2d:c0:c0:c0:50:12:ef:5c:a1:17:ff:8d:1c:3e:94:
                    57:21:51:f8:0c:d7:db:15:4e:49:f4:87:40:35:23:
                    90:20:cb:89:e3:7e:8a:b0:63:bc:68:a6:7f:74:6a:
                    56:cd:d1:d6:a9:96:4e:24:67:e0:6b:45:b8:9b:22:
                    9e:be:5d:36:f4:ef:9d:f1:33:de:7a:30:53:e4:c1:
                    33:66:8a:c9:a8:e0:d4:dd:4b:a5:c5:00:6b:ea:93:
                    80:de:88:57:ae:8c:99:39:a9:56:5b:76:3f:cc:25:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2B:D1:58:96:F8:9E:85:35:0F:04:A0:14:4E:48:CA:4D:67:62:6B
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/BCEB94DAA81A11F18448F1EC6E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.158.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:15:ca:88:66:9b:b2:34:1e:04:9d:50:d2:9e:1d:14:89:9b:
         b2:d1:fb:a2:c5:6b:0b:2b:6e:26:4f:7f:10:03:ee:3b:eb:55:
         0c:ab:7a:9e:6a:9e:d0:42:21:ce:ac:33:11:12:af:65:94:84:
         aa:6e:ba:7e:03:ac:0c:6b:16:9d:41:fd:5b:fb:0d:a1:e8:7b:
         7c:3f:3e:d0:45:99:b7:7f:4c:fb:79:53:df:6d:f5:ed:04:30:
         f7:1c:c3:9c:f6:85:53:3e:8e:ee:92:d2:db:ba:4a:fb:99:d5:
         82:05:43:68:31:21:10:65:ef:ee:9d:34:c2:45:72:5e:20:49:
         26:8c:6c:4e:6c:03:20:3f:da:7c:eb:8a:36:8f:69:89:bf:c0:
         e9:72:25:01:12:26:43:57:46:34:43:eb:17:40:2f:bd:8b:f4:
         a2:57:57:e7:46:cd:6d:81:4a:a2:e4:c9:29:8c:0e:40:5b:80:
         2a:1d:e0:ad:0b:4b:c2:e0:c5:b8:da:20:b5:c9:95:43:13:e3:
         d0:9e:0c:e1:cf:50:7a:3e:3e:d4:52:9f:28:07:dc:a4:3d:59:
         d5:86:86:ea:6a:18:ea:b4:4e:ca:72:9e:62:0e:ca:40:80:e8:
         b9:71:c4:bd:f4:99:34:86:83:14:b3:83:e5:43:5c:24:b4:53:
         0a:e8:81:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:36 2026 by rpki-client