Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/39926F626DB211F0AC1D0420C4F9AE02.roa
File:                     39926F626DB211F0AC1D0420C4F9AE02.roa (raw, json)
Hash identifier:          7SJ1ORslsA+v/W3McAZxGP+GfP6rTmlULhaLVUpn64U=
Subject key identifier:   67:B3:66:47:28:2F:6D:FC:A8:B5:AC:65:B3:61:DF:21:D2:1E:60:13
Certificate issuer:       /CN=A91FD6A0/serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC
Certificate serial:       DC
Authority key identifier: D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/39926F626DB211F0AC1D0420C4F9AE02.roa
Signing time:             Thu 17 Sep 2026 07:57:13 +0000
ROA not before:           Thu 17 Sep 2026 07:57:13 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154099
IP address blocks:        202.1.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl
                          rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD6A0, serialNumber=D18D445D2657EAFDD4A66E75B0FBD60303F025FC
        Validity
            Not Before: Sep 17 07:57:13 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aab9d59-4094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:94:23:73:e3:51:82:1a:a6:41:07:d7:70:
                    8b:22:5a:8a:c6:51:ea:20:c0:5c:73:b8:ed:d4:d1:
                    19:c5:95:34:f1:dd:14:81:99:96:8e:28:fc:a3:99:
                    0c:d3:49:7a:0a:42:86:6d:87:ae:91:49:17:a2:17:
                    44:ea:eb:f6:31:86:e1:73:09:20:c9:19:d0:b9:95:
                    d3:10:e5:b1:08:46:3f:9a:ca:f2:9b:9e:fb:08:9d:
                    7c:2a:36:36:98:e7:20:39:9b:d8:a5:67:aa:b4:1b:
                    8c:aa:44:91:a0:37:ea:ab:b4:4c:75:5e:d3:75:61:
                    0c:42:38:12:ac:1b:9e:a3:a7:f5:40:ea:d7:f0:5a:
                    1e:9a:cb:6e:23:8a:f5:4b:53:23:a6:16:36:36:80:
                    c6:67:ac:41:30:ec:c4:ce:9d:00:67:0d:cb:10:bb:
                    d5:87:1d:ba:f0:11:f0:e1:d2:54:b6:c5:48:77:d5:
                    b0:0c:45:cf:48:13:79:10:df:23:73:a6:ae:98:49:
                    11:13:23:7b:50:ab:99:83:50:32:5f:3f:6e:a2:d9:
                    05:bd:b6:1d:47:2f:d7:bf:0f:bf:98:9f:45:15:23:
                    f2:07:38:5d:4c:20:db:84:1f:65:97:ff:ba:22:62:
                    4f:56:83:2a:25:89:96:10:b8:13:b7:6d:97:23:e5:
                    0b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B3:66:47:28:2F:6D:FC:A8:B5:AC:65:B3:61:DF:21:D2:1E:60:13
            X509v3 Authority Key Identifier:
                keyid:D1:8D:44:5D:26:57:EA:FD:D4:A6:6E:75:B0:FB:D6:03:03:F0:25:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/0Y1EXSZX6v3Upm51sPvWAwPwJfw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y1EXSZX6v3Upm51sPvWAwPwJfw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6A0/78DF607C6DB111F0AD4B5E5AC4F9AE02/39926F626DB211F0AC1D0420C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.1.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:27:fa:b0:1f:3f:97:3e:cc:da:45:5f:06:12:01:78:b0:10:
         de:5a:0f:e1:52:70:3f:1c:72:df:88:4d:69:c3:6a:f8:b1:59:
         8c:31:18:fd:ec:4a:e1:1d:b2:1f:2d:23:40:ca:39:29:fe:7a:
         67:2f:1e:50:78:32:cd:ef:48:b5:95:3d:ed:78:59:45:4b:a2:
         32:0d:9d:09:fe:0d:a0:40:3f:34:9c:56:6e:5e:e5:24:1a:1e:
         61:b0:dc:8c:1d:99:53:cf:39:2d:2a:4d:05:b6:45:52:00:5b:
         b7:39:a8:77:99:9c:0e:90:14:28:8e:87:56:85:15:2e:6d:5b:
         34:7f:1e:ff:c7:84:11:b6:4c:fa:90:1b:43:8c:37:9f:b7:92:
         2f:fd:fb:3c:2f:57:56:e2:15:f4:15:e6:e2:3b:9d:10:c6:02:
         23:be:be:32:0f:45:5c:a7:bd:f8:fa:23:c2:a0:33:9a:b0:10:
         cc:27:b1:74:2a:20:42:ee:56:92:c6:6e:ae:11:f9:71:84:3f:
         3e:25:bc:51:fa:d1:02:52:27:f0:44:f9:cb:f3:a6:a5:60:ae:
         a9:17:63:61:2d:6e:2c:4d:db:b1:e3:50:dc:01:33:eb:65:01:
         2c:ff:91:96:49:4e:6f:4f:f2:5d:04:1f:c4:52:f1:b3:a3:c7:
         ed:a8:1e:f9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ2QTAxMTAvBgNVBAUTKEQxOEQ0NDVEMjY1N0VBRkRENEE2NkU3NUIwRkJENjAz
MDNGMDI1RkMwHhcNMjYwOTE3MDc1NzEzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFiOWQ1OS00MDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn+SUI3PjUYIapkEH13CLIlqKxlHqIMBcc7jt1NEZxZU08d0UgZmWjij8o5kM
00l6CkKGbYeukUkXohdE6uv2MYbhcwkgyRnQuZXTEOWxCEY/msrym577CJ18KjY2
mOcgOZvYpWeqtBuMqkSRoDfqq7RMdV7TdWEMQjgSrBueo6f1QOrX8FoemstuI4r1
S1MjphY2NoDGZ6xBMOzEzp0AZw3LELvVhx268BHw4dJUtsVId9WwDEXPSBN5EN8j
c6aumEkREyN7UKuZg1AyXz9uotkFvbYdRy/Xvw+/mJ9FFSPyBzhdTCDbhB9ll/+6
ImJPVoMqJYmWELgTt22XI+ULsQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGezZkco
L238qLWsZbNh3yHSHmATMB8GA1UdIwQYMBaAFNGNRF0mV+r91KZudbD71gMD8CX8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDZBMC83OERGNjA3QzZE
QjExMUYwQUQ0QjVFNUFDNEY5QUUwMi8wWTFFWFNaWDZ2M1VwbTUxc1B2V0F3UHdK
ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBZMUVYU1pYNnYzVXBtNTFzUHZXQXdQd0pmdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkQ2QTAvNzhERjYwN0M2REIxMTFGMEFENEI1RTVBQzRGOUFFMDIvMzk5MjZGNjI2
REIyMTFGMEFDMUQwNDIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBygEaMA0GCSqGSIb3DQEBCwUAA4IBAQACJ/qwHz+XPszaRV8GEgF4
sBDeWg/hUnA/HHLfiE1pw2r4sVmMMRj97ErhHbIfLSNAyjkp/npnLx5QeDLN70i1
lT3teFlFS6IyDZ0J/g2gQD80nFZuXuUkGh5hsNyMHZlTzzktKk0FtkVSAFu3Oah3
mZwOkBQojodWhRUubVs0fx7/x4QRtkz6kBtDjDeft5Iv/fs8L1dW4hX0FebiO50Q
xgIjvr4yD0Vcp734+iPCoDOasBDMJ7F0KiBC7laSxm6uEflxhD8+JbxR+tECUifw
RPnL86alYK6pF2NhLW4sTdux41DcATPrZQEs/5GWSU5vT/JdBB/EUvGzo8ftqB75
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:20:29 2026 by rpki-client