Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/2F09D8DCA03D11F1ACAFAFF83911F970.roa
File:                     2F09D8DCA03D11F1ACAFAFF83911F970.roa (raw, json)
Hash identifier:          iSOyyo5mav1l9HpQwTOIdfMcOvVhaxQGyBb2UEsq09U=
Subject key identifier:   D6:C8:93:4D:CE:F8:82:02:47:76:12:D2:2B:D9:DF:55:81:EE:47:57
Certificate issuer:       /CN=A91E78B5/serialNumber=C73CD1D4A39531BB12CBEBFC1E40E4D4DB05929D
Certificate serial:       03
Authority key identifier: C7:3C:D1:D4:A3:95:31:BB:12:CB:EB:FC:1E:40:E4:D4:DB:05:92:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/2F09D8DCA03D11F1ACAFAFF83911F970.roa
Signing time:             Tue 25 Aug 2026 04:26:47 +0000
ROA not before:           Tue 25 Aug 2026 04:26:47 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154858
IP address blocks:        163.52.44.0/24 maxlen: 24
                          2402:7120::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.crl
                          rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E78B5, serialNumber=C73CD1D4A39531BB12CBEBFC1E40E4D4DB05929D
        Validity
            Not Before: Aug 25 04:26:47 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a8d1987-4591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:fc:2e:11:fa:37:ad:33:51:e0:ec:9d:fc:
                    ba:96:83:92:06:07:62:77:31:e5:94:a2:ba:f7:1d:
                    01:22:e3:a4:a0:c2:fb:41:72:e3:36:0c:76:5e:6f:
                    21:51:3c:ee:63:1b:e3:40:ee:26:8a:49:a3:e3:f6:
                    67:d7:c4:24:b2:7a:7c:e7:8e:6b:f4:b5:d1:55:fb:
                    07:a3:f4:cc:23:e1:99:69:a5:49:71:36:bf:87:00:
                    1d:49:bf:07:05:db:43:a3:71:cb:8d:52:1f:19:15:
                    03:c2:ad:ef:c9:7b:1b:64:7a:25:03:1e:83:99:85:
                    75:6f:8b:29:b9:65:eb:2f:f7:9d:bc:de:70:02:dd:
                    0f:19:42:c6:92:2c:0b:5f:42:a5:3a:f2:bc:45:e2:
                    78:0f:36:61:17:14:1a:0b:25:ac:46:4e:84:6f:b8:
                    22:0f:35:72:9d:4f:a9:a1:f3:31:59:c2:26:6b:12:
                    0b:0b:07:71:fe:1e:85:27:94:52:4d:b6:7b:af:05:
                    3f:46:b5:89:5f:f4:59:6f:6b:f0:e2:b2:1f:46:d8:
                    bd:eb:00:f2:29:11:c8:ba:75:0c:84:c8:08:be:fd:
                    e8:27:52:70:f0:6a:27:78:c9:ce:8a:a4:94:19:1b:
                    b7:c0:8f:6d:80:59:53:4b:b0:b0:12:b4:5b:c2:cf:
                    e6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C8:93:4D:CE:F8:82:02:47:76:12:D2:2B:D9:DF:55:81:EE:47:57
            X509v3 Authority Key Identifier:
                keyid:C7:3C:D1:D4:A3:95:31:BB:12:CB:EB:FC:1E:40:E4:D4:DB:05:92:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/2F09D8DCA03D11F1ACAFAFF83911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.44.0/24
                IPv6:
                  2402:7120::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:91:ab:cd:72:1f:01:71:01:5b:6e:f1:91:33:c1:eb:61:36:
         da:75:a1:73:a9:7c:d7:b2:5b:2d:7b:3e:ad:34:b3:87:1c:48:
         ab:38:28:fb:45:00:21:7b:6d:0b:9b:a8:a1:5e:74:a3:e7:46:
         d5:c1:da:46:ae:80:06:a3:7c:96:60:c5:04:6d:47:c6:72:60:
         d5:57:f6:00:aa:42:d0:7a:64:82:54:aa:25:37:9d:4f:0a:35:
         f8:97:20:46:08:d9:14:0d:f4:60:14:3c:09:58:cb:8d:12:f7:
         15:e7:62:7a:ff:32:d0:5a:23:1d:86:cb:7b:63:82:dc:4d:20:
         7c:8b:13:d4:1c:bf:80:de:d3:2a:52:9e:d4:6c:49:10:ca:4e:
         71:0c:30:68:20:5d:ed:79:8b:5e:37:6e:ba:ed:f5:39:a5:f1:
         92:1f:e3:a7:91:17:0f:d1:c6:4a:82:38:4d:01:7a:32:ee:3e:
         78:cf:d3:2e:d0:a8:57:86:bb:ed:a6:06:44:3c:5c:44:0f:86:
         74:67:04:9d:03:5c:27:0d:9e:f3:fb:fb:89:f0:a9:4a:77:2b:
         35:9d:77:c6:80:b9:7e:d5:b1:97:70:21:9c:5f:1b:e8:86:ff:
         86:b1:ab:e1:34:fe:56:2f:63:97:45:a1:ea:2f:11:0a:27:88:
         53:4f:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:54:31 2026 by rpki-client