Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/9F2B6B24974E11F0AA132215C4F9AE02.roa
File:                     9F2B6B24974E11F0AA132215C4F9AE02.roa (raw, json)
Hash identifier:          ZfvKktf+hwWwCAuq5AhCUe7YriSMyUl0dFKV4h5B4U0=
Subject key identifier:   F8:98:13:A4:D4:4B:C9:FB:C3:B0:A6:6D:3F:2E:1C:53:A1:F8:32:BD
Certificate issuer:       /CN=A91EF175/serialNumber=446BACC1F2E81673EAB6F16C9080B5E780769647
Certificate serial:       8C
Authority key identifier: 44:6B:AC:C1:F2:E8:16:73:EA:B6:F1:6C:90:80:B5:E7:80:76:96:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGuswfLoFnPqtvFskIC154B2lkc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/9F2B6B24974E11F0AA132215C4F9AE02.roa
Signing time:             Wed 27 May 2026 05:39:52 +0000
ROA not before:           Wed 27 May 2026 05:39:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137532
IP address blocks:        203.26.240.0/24 maxlen: 24
                          203.26.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.crl
                          rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGuswfLoFnPqtvFskIC154B2lkc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF175, serialNumber=446BACC1F2E81673EAB6F16C9080B5E780769647
        Validity
            Not Before: May 27 05:39:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a1683a7-7f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:b7:bc:05:1d:69:25:be:88:cd:8f:eb:f6:
                    fb:19:36:42:fd:4e:56:58:f1:0b:69:92:3f:26:f4:
                    3d:5f:81:a8:56:f0:0e:55:fa:b6:d0:03:53:27:c5:
                    0b:f9:05:75:4c:7d:c5:7e:dc:aa:5b:01:3f:fb:2e:
                    3a:f6:da:55:fb:40:c6:da:6b:be:91:19:e5:c6:31:
                    6b:a3:15:ac:f6:05:94:61:34:7c:30:ae:ae:c5:52:
                    21:82:a9:24:cc:d6:dd:dd:44:fc:55:98:ec:78:19:
                    ba:2e:f5:5d:3e:60:e3:1d:ab:52:84:ff:bf:4a:46:
                    19:95:d4:05:45:51:d4:11:97:a7:40:aa:ee:8c:25:
                    fb:ff:4e:48:0f:74:08:a3:0c:90:7a:3e:8b:7f:d5:
                    f1:a3:7a:00:47:d5:d0:d7:1e:4a:72:a4:90:19:ba:
                    37:f4:f5:fe:3e:51:79:5f:93:85:ef:06:dd:12:65:
                    22:44:95:38:ba:13:b8:ea:23:6a:4f:24:0b:fe:0e:
                    8e:b6:54:c8:1f:69:64:9a:a2:b8:ad:bb:fe:68:8e:
                    f8:cd:4e:d5:aa:de:45:ce:68:fc:2b:4e:fa:19:cf:
                    81:15:fa:8d:5d:9d:99:17:27:c9:ad:84:99:c0:07:
                    f1:70:c7:6e:43:f3:3c:88:c0:17:19:50:74:23:31:
                    95:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:98:13:A4:D4:4B:C9:FB:C3:B0:A6:6D:3F:2E:1C:53:A1:F8:32:BD
            X509v3 Authority Key Identifier:
                keyid:44:6B:AC:C1:F2:E8:16:73:EA:B6:F1:6C:90:80:B5:E7:80:76:96:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGuswfLoFnPqtvFskIC154B2lkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/9F2B6B24974E11F0AA132215C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.26.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:f8:af:ea:e9:b7:c5:09:8b:8a:9d:f8:63:98:a9:6f:22:
         74:5c:96:64:99:86:98:12:92:75:d3:b8:df:20:fc:c1:4a:4b:
         cb:c0:55:26:e6:5f:74:0a:02:b5:70:e5:b1:a8:8b:63:05:1e:
         20:66:53:67:60:b2:cc:9e:f3:e0:29:3e:25:27:99:b5:8c:bd:
         dd:b9:c8:6b:04:87:d9:a4:89:ab:33:a1:99:de:69:5d:b5:5f:
         1e:ee:68:aa:6e:74:34:9e:ac:e7:18:4a:66:5c:b3:34:e2:b5:
         90:bd:57:f1:c4:87:e0:38:85:af:51:c0:2f:50:a2:3e:5d:91:
         a4:83:c9:38:70:24:53:da:05:66:bd:41:52:4f:86:3e:2c:01:
         57:d2:b7:84:fa:dd:dc:27:7a:7a:30:b2:75:2b:00:e1:86:47:
         72:b5:6a:fd:ee:d7:48:66:58:a5:61:6e:1f:e9:3b:36:16:04:
         d5:70:a0:73:4c:f9:87:3d:e7:5b:be:43:66:92:5b:ee:6f:b6:
         cb:aa:f9:09:8f:42:65:1b:f4:0e:a7:92:f4:b2:7d:d3:f0:20:
         c1:93:7f:32:4a:71:5f:54:70:67:da:c6:d4:b6:d0:76:4a:7c:
         41:27:bc:57:7a:21:c3:b6:e5:1a:ca:c1:41:23:43:65:7c:54:
         19:28:32:ff
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYxNzUxMTAvBgNVBAUTKDQ0NkJBQ0MxRjJFODE2NzNFQUI2RjE2QzkwODBCNUU3
ODA3Njk2NDcwHhcNMjYwNTI3MDUzOTUyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE2ODNhNy03ZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApLO3vAUdaSW+iM2P6/b7GTZC/U5WWPELaZI/JvQ9X4GoVvAOVfq20ANTJ8UL
+QV1TH3FftyqWwE/+y469tpV+0DG2mu+kRnlxjFroxWs9gWUYTR8MK6uxVIhgqkk
zNbd3UT8VZjseBm6LvVdPmDjHatShP+/SkYZldQFRVHUEZenQKrujCX7/05ID3QI
owyQej6Lf9Xxo3oAR9XQ1x5KcqSQGbo39PX+PlF5X5OF7wbdEmUiRJU4uhO46iNq
TyQL/g6OtlTIH2lkmqK4rbv+aI74zU7Vqt5Fzmj8K076Gc+BFfqNXZ2ZFyfJrYSZ
wAfxcMduQ/M8iMAXGVB0IzGVOwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPiYE6TU
S8n7w7CmbT8uHFOh+DK9MB8GA1UdIwQYMBaAFERrrMHy6BZz6rbxbJCAteeAdpZH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3NS8wNDYwQUExOEZC
RkIxMUVFQTFFRUFGMUZDNEY5QUUwMi9SR3Vzd2ZMb0ZuUHF0dkZza0lDMTU0QjJs
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JHdXN3ZkxvRm5QcXR2RnNrSUMxNTRCMmxrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUYxNzUvMDQ2MEFBMThGQkZCMTFFRUExRUVBRjFGQzRGOUFFMDIvOUYyQjZCMjQ5
NzRFMTFGMEFBMTMyMjE1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQByxrwMA0GCSqGSIb3DQEBCwUAA4IBAQB+Qviv6um3xQmLip34Y5ip
byJ0XJZkmYaYEpJ107jfIPzBSkvLwFUm5l90CgK1cOWxqItjBR4gZlNnYLLMnvPg
KT4lJ5m1jL3duchrBIfZpImrM6GZ3mldtV8e7miqbnQ0nqznGEpmXLM04rWQvVfx
xIfgOIWvUcAvUKI+XZGkg8k4cCRT2gVmvUFST4Y+LAFX0reE+t3cJ3p6MLJ1KwDh
hkdytWr97tdIZlilYW4f6Ts2FgTVcKBzTPmHPedbvkNmklvub7bLqvkJj0JlG/QO
p5L0sn3T8CDBk38ySnFfVHBn2sbUttB2SnxBJ7xXeiHDtuUaysFBI0NlfFQZKDL/
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:34 2026 by rpki-client