Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/81F4D4289D0111F1865FC6F93911F970.roa
File:                     81F4D4289D0111F1865FC6F93911F970.roa (raw, json)
Hash identifier:          +Obbk/i35qfgXMkraKdF4BrFoiJbPpjnBEU4bhGvwKs=
Subject key identifier:   06:25:99:7D:9F:EC:D6:3B:1A:D5:39:AE:44:E4:27:05:2B:01:18:5D
Certificate issuer:       /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Certificate serial:       0C28
Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/81F4D4289D0111F1865FC6F93911F970.roa
Signing time:             Wed 02 Sep 2026 19:38:39 +0000
ROA not before:           Wed 02 Sep 2026 19:38:39 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        203.78.132.0/24 maxlen: 24
                          203.78.133.0/24 maxlen: 24
                          203.78.134.0/24 maxlen: 24
                          203.78.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
                          rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3112 (0xc28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED2BB, serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
        Validity
            Not Before: Sep  2 19:38:39 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a987b3f-2cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:13:c0:b2:92:8f:5f:cf:42:61:32:5f:3b:3f:
                    f0:ca:71:53:9c:ba:de:b9:e6:90:95:e7:17:99:01:
                    4f:be:94:6c:32:54:83:38:2b:83:71:e5:7f:9f:04:
                    13:68:54:f4:57:96:a8:c0:29:64:76:6c:58:37:bb:
                    f2:1d:23:c5:a1:d5:a6:0e:e0:57:58:13:6d:12:0a:
                    5a:06:c5:07:c9:a9:36:08:70:40:ae:64:0e:b1:47:
                    cf:dd:de:55:35:00:d9:0c:e4:0b:8d:bb:a9:91:e4:
                    cb:e3:a0:3e:15:3b:89:50:d5:46:b5:c1:72:c9:9d:
                    8d:8c:e6:ca:6a:1f:ed:44:1d:8b:6d:bb:ca:ae:2b:
                    e3:c0:44:e6:f8:75:a3:3f:84:5d:53:bb:d6:ae:57:
                    3c:51:04:d3:eb:82:25:26:9d:da:16:e9:67:1b:28:
                    f7:fc:22:3a:33:a2:78:b6:47:a4:6c:c7:b4:4f:e9:
                    4c:c2:6e:b1:c2:b5:a1:3a:20:e7:4e:6e:84:53:b6:
                    67:0b:b2:09:85:45:cd:94:b1:b4:87:d4:bd:70:75:
                    bb:37:54:e3:c9:df:e1:2c:d2:d7:0a:21:77:47:20:
                    cb:10:c7:da:87:1d:b3:b2:6e:f3:63:ba:20:2b:48:
                    25:ea:84:55:03:4d:57:29:e8:2b:e4:da:c1:84:e4:
                    39:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:25:99:7D:9F:EC:D6:3B:1A:D5:39:AE:44:E4:27:05:2B:01:18:5D
            X509v3 Authority Key Identifier:
                keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/81F4D4289D0111F1865FC6F93911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.78.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:d8:63:00:ff:66:24:22:2c:58:a5:75:a7:e1:cc:3e:e5:59:
         33:f6:73:54:eb:bb:13:3a:1a:91:ac:a7:9c:cb:60:1e:c3:7c:
         18:99:a3:7d:10:18:24:93:d9:59:b0:ef:09:51:4f:ee:d3:f3:
         0f:ac:fb:63:5b:1c:5d:49:8a:a2:10:0d:88:4c:84:01:d3:5f:
         de:87:8f:e2:1c:e5:8d:cc:15:39:6c:86:ae:ae:72:9a:00:e8:
         73:b9:1e:75:52:b5:6a:59:6e:59:f7:b6:cf:7f:69:c1:f1:2b:
         d3:2e:cb:6b:7b:09:97:76:bb:4f:38:23:00:96:8b:26:5b:19:
         d3:ce:03:8d:20:8d:94:58:02:50:c3:57:28:24:19:1f:2e:32:
         5d:52:2b:de:51:3e:fc:be:45:08:59:29:fe:f3:7d:8c:c4:9a:
         ed:b0:57:bc:6a:ca:c3:e2:cd:34:b1:3b:2f:cc:a6:05:33:ab:
         ba:84:62:d7:38:74:63:af:e9:c9:29:f2:83:9a:ce:5b:03:b2:
         7c:18:a8:8b:14:a5:0c:c1:c9:0f:09:0b:63:0e:ab:59:8e:f6:
         a9:00:f8:80:f6:39:3b:32:43:b8:19:92:ba:90:3d:b5:d2:52:
         79:61:95:2d:af:74:9a:e8:89:19:c1:59:ba:4c:83:56:0b:81:
         95:ab:27:9e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQyQkIxMTAvBgNVBAUTKEE2RkYzODFBMkFFQkVBNkRDQ0ZFMERFNjVENDE5NjA0
MDI3MUZFOTQwHhcNMjYwOTAyMTkzODM5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4N2IzZi0yY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6RPAspKPX89CYTJfOz/wynFTnLreueaQlecXmQFPvpRsMlSDOCuDceV/nwQT
aFT0V5aowClkdmxYN7vyHSPFodWmDuBXWBNtEgpaBsUHyak2CHBArmQOsUfP3d5V
NQDZDOQLjbupkeTL46A+FTuJUNVGtcFyyZ2NjObKah/tRB2LbbvKrivjwETm+HWj
P4RdU7vWrlc8UQTT64IlJp3aFulnGyj3/CI6M6J4tkekbMe0T+lMwm6xwrWhOiDn
Tm6EU7ZnC7IJhUXNlLG0h9S9cHW7N1Tjyd/hLNLXCiF3RyDLEMfahx2zsm7zY7og
K0gl6oRVA01XKegr5NrBhOQ5VwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAYlmX2f
7NY7GtU5rkTkJwUrARhdMB8GA1UdIwQYMBaAFKb/OBoq6+ptzP4N5l1BlgQCcf6U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDJCQi81N0Q2NDdGQTQx
NzExMUVBOTE0OTVCNkJDNEY5QUUwMi9wdjg0R2lycjZtM01fZzNtWFVHV0JBSnhf
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3B2ODRHaXJyNm0zTV9nM21YVUdXQkFKeF9wUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUQyQkIvNTdENjQ3RkE0MTcxMTFFQTkxNDk1QjZCQzRGOUFFMDIvODFGNEQ0Mjg5
RDAxMTFGMTg2NUZDNkY5MzkxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCy06EMA0GCSqGSIb3DQEBCwUAA4IBAQBL2GMA/2YkIixYpXWn4cw+
5Vkz9nNU67sTOhqRrKecy2Aew3wYmaN9EBgkk9lZsO8JUU/u0/MPrPtjWxxdSYqi
EA2ITIQB01/eh4/iHOWNzBU5bIaurnKaAOhzuR51UrVqWW5Z97bPf2nB8SvTLstr
ewmXdrtPOCMAlosmWxnTzgONII2UWAJQw1coJBkfLjJdUiveUT78vkUIWSn+832M
xJrtsFe8asrD4s00sTsvzKYFM6u6hGLXOHRjr+nJKfKDms5bA7J8GKiLFKUMwckP
CQtjDqtZjvapAPiA9jk7MkO4GZK6kD210lJ5YZUtr3Sa6IkZwVm6TINWC4GVqyee
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:22:10 2026 by rpki-client