Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/FA957D0A80FA11ED9B35954DC4F9AE02.roa
File:                     FA957D0A80FA11ED9B35954DC4F9AE02.roa (raw, json)
Hash identifier:          WwNN5yiX17Hff/LWCCJhPsAOtcMIwoaI7KVP5Zs7sOo=
Subject key identifier:   DB:D7:79:D0:8E:67:1B:5B:CD:AB:64:40:AD:91:54:CB:1F:56:06:77
Certificate issuer:       /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Certificate serial:       0325
Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/FA957D0A80FA11ED9B35954DC4F9AE02.roa
Signing time:             Sat 05 Sep 2026 00:50:38 +0000
ROA not before:           Sat 05 Sep 2026 00:50:38 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     7575
IP address blocks:        203.28.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
                          rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805 (0x325)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81AD, serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
        Validity
            Not Before: Sep  5 00:50:38 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9b675e-1e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:26:4a:a3:4e:27:ad:2b:ee:7b:0f:e6:ad:18:
                    32:44:04:ab:0b:37:a6:37:ae:b7:2d:c9:09:ab:17:
                    9f:4a:a1:be:46:45:47:a6:45:62:dc:c3:24:e3:82:
                    9b:25:c4:06:eb:1e:5b:cf:d0:f2:16:80:1a:9b:d0:
                    68:6a:4d:26:63:e9:b3:ae:e4:e1:bc:9f:19:d6:a3:
                    a5:30:97:b6:93:60:2f:ba:41:95:56:6a:07:70:ae:
                    bf:63:cb:af:a3:ce:5c:63:64:c7:64:ae:9b:68:6d:
                    47:c8:b4:34:47:77:cb:e8:11:f7:73:a8:a6:aa:e2:
                    d1:4f:35:a7:f4:84:42:e7:98:f7:af:06:5c:e5:53:
                    3e:9f:c8:c7:01:59:e4:07:63:c9:ac:94:4d:4a:2c:
                    5d:a7:1a:cd:dd:22:87:14:6d:27:e6:de:4d:1f:71:
                    d9:f7:ef:06:e5:53:c9:42:bd:b2:27:2b:e6:15:93:
                    ec:33:cc:af:16:33:38:e7:48:75:8f:15:ce:cc:8f:
                    ea:4c:c6:84:1a:cb:31:b1:b2:fa:f0:f3:11:b1:48:
                    3d:17:63:91:5b:94:2d:55:9d:7e:d6:4b:45:2a:c2:
                    e8:59:38:97:12:81:8b:ea:7f:2b:f2:68:f8:8b:bb:
                    cf:34:e6:47:b6:79:24:87:38:f4:94:65:1b:54:ac:
                    47:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D7:79:D0:8E:67:1B:5B:CD:AB:64:40:AD:91:54:CB:1F:56:06:77
            X509v3 Authority Key Identifier:
                keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/FA957D0A80FA11ED9B35954DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.28.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:80:0e:e0:b6:4b:8e:37:99:32:a0:02:3c:86:ec:0e:19:e0:
         65:f7:2a:b3:9c:b2:df:3c:eb:09:00:20:60:74:1f:70:47:1b:
         f9:61:f7:4a:dd:51:da:c2:3d:32:06:26:45:96:5f:54:fb:48:
         24:e5:ac:74:5b:8f:72:e0:88:f5:95:14:8b:fc:cf:de:37:cf:
         79:76:f9:25:84:49:7a:87:c5:51:a1:43:31:e1:81:ba:20:ca:
         92:74:4a:cc:a5:7d:4c:98:53:40:2b:d4:73:a8:2e:97:33:28:
         cc:cd:3e:55:49:4e:90:50:22:0c:8d:a2:0c:0e:d0:13:e0:56:
         5f:aa:df:96:db:41:f7:91:c9:06:f2:aa:0f:c2:d6:ec:4f:b5:
         bb:c5:82:4d:33:c8:fd:e8:d4:52:b0:10:ed:1d:63:23:22:15:
         3a:46:83:f5:a4:ac:1a:ac:3f:d0:91:7a:4b:4a:3a:59:0e:e0:
         e6:9d:d5:d0:fc:09:63:0d:7e:45:46:e7:d9:ea:59:09:6b:a2:
         93:1d:e0:4b:3a:13:9b:a7:fb:ce:2d:0d:0b:8b:a4:fd:9c:f2:
         91:e7:20:b7:46:d9:e2:c7:90:d5:54:52:7e:4c:45:55:b7:8e:
         8e:bd:b1:71:a5:ce:89:5f:60:27:5a:89:16:fe:b2:3b:13:7f:
         b5:e3:76:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:47:33 2026 by rpki-client