Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/F9424C6C80FA11ED9B35954DC4F9AE02.roa
File:                     F9424C6C80FA11ED9B35954DC4F9AE02.roa (raw, json)
Hash identifier:          Ip48cdazW4hM6iIWRAVgf+gNfgujxIpBb+M6ahRdDTA=
Subject key identifier:   C4:27:C4:ED:7F:21:39:53:78:29:A6:3A:7D:BB:3C:3D:47:CC:07:AC
Certificate issuer:       /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
Certificate serial:       0325
Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/F9424C6C80FA11ED9B35954DC4F9AE02.roa
Signing time:             Sat 05 Sep 2026 00:50:34 +0000
ROA not before:           Sat 05 Sep 2026 00:50:33 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     7575
IP address blocks:        138.80.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl
                          rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805 (0x325)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B
        Validity
            Not Before: Sep  5 00:50:33 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9b6759-cf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:ed:18:0c:47:f0:5a:51:ca:c2:6c:ed:db:
                    ff:b5:67:5c:9a:c7:37:32:b8:2b:d6:aa:37:ec:7b:
                    45:ab:35:61:7d:c7:a9:92:9a:3d:a7:eb:cd:ea:2a:
                    12:22:df:e9:19:b0:74:20:ec:4e:d1:d9:cb:9f:96:
                    cd:b8:02:32:33:10:45:30:72:0d:a7:6f:8f:4f:16:
                    dc:ad:a9:e5:de:76:6e:77:0e:e6:55:cf:28:75:59:
                    44:ae:b2:f0:ed:c0:39:2d:27:19:9e:cd:6d:02:3c:
                    36:a3:75:b6:2f:46:88:ad:91:70:94:89:97:de:33:
                    fe:e5:e0:4d:49:87:0d:48:3c:97:90:4a:c4:99:7c:
                    49:ef:33:9d:28:a4:51:61:01:f1:a2:61:0c:7e:96:
                    69:83:18:15:56:32:fa:4e:b3:5f:31:44:3d:e5:bd:
                    53:4c:e7:99:72:34:0f:f5:fd:e1:ac:af:72:d0:78:
                    85:0b:cc:f7:a4:d2:2a:2f:05:f6:c6:b7:b9:3a:04:
                    ac:b1:6a:3c:b6:6b:a1:4a:c1:c5:c6:16:20:1e:83:
                    2f:69:be:24:aa:74:28:71:c5:5c:8b:b5:47:fe:9a:
                    21:5a:d3:d8:4b:88:13:6e:5b:b8:57:28:83:45:3c:
                    c1:23:90:6c:8b:a8:de:68:9b:56:1f:c7:b0:11:7c:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:27:C4:ED:7F:21:39:53:78:29:A6:3A:7D:BB:3C:3D:47:CC:07:AC
            X509v3 Authority Key Identifier:
                keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/F9424C6C80FA11ED9B35954DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.80.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         79:23:ec:f5:0c:59:d7:a1:2f:7c:38:5e:93:32:81:cd:a7:37:
         15:4e:c2:02:54:e9:65:1a:c7:45:cc:12:d1:d9:ab:b4:0c:32:
         3f:95:c4:ef:fb:3f:34:e4:5e:d8:3d:16:ee:b2:21:25:0a:7e:
         41:22:7f:9b:3c:da:03:24:cf:06:88:de:1f:2c:5b:ea:5f:fc:
         61:99:21:06:f1:5e:ef:0e:00:05:39:c1:d4:72:b0:06:bc:25:
         21:ca:a0:0b:df:e7:44:68:a4:d5:9f:4d:00:19:a9:84:d4:bb:
         95:00:77:df:1e:fe:92:14:36:e9:5f:4b:e3:10:f3:78:d4:49:
         ee:2a:17:ab:6b:73:9f:b5:9c:67:59:42:6b:b0:8b:ee:0b:e0:
         5c:d2:a9:03:7e:49:d9:70:39:f7:ea:3a:fc:2b:9b:e1:31:16:
         1e:11:87:f1:ba:4d:6e:dd:18:42:62:da:b2:61:dc:51:68:13:
         94:67:fb:bd:94:50:6e:f3:47:3e:4c:7a:d7:76:49:22:1e:d9:
         34:66:41:a8:5e:fa:52:63:b0:30:2c:da:0e:de:94:b3:2b:f0:
         00:7b:ff:e3:a8:0a:07:5f:2d:3b:2d:e2:67:0e:9e:1a:d7:b6:
         0e:74:d0:82:17:e1:8b:7b:e2:51:e4:c6:a5:1d:90:7f:1d:b2:
         e4:34:f9:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:12:04 2026 by rpki-client