Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/862E552A9BC911F18D38C8025A11F970.roa
File:                     862E552A9BC911F18D38C8025A11F970.roa (raw, json)
Hash identifier:          8na8yVbkSv2r8L3/v2gwJOLTTRp9fQmqAH2HTVZD2cc=
Subject key identifier:   DC:60:2B:FE:F9:F2:C8:9F:4C:E4:B1:C8:87:97:AD:53:36:CE:A4:2F
Certificate issuer:       /CN=A91448CB/serialNumber=B19C324C4679D2E456834389AFFB7504EDF0971E
Certificate serial:       05
Authority key identifier: B1:9C:32:4C:46:79:D2:E4:56:83:43:89:AF:FB:75:04:ED:F0:97:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/862E552A9BC911F18D38C8025A11F970.roa
Signing time:             Wed 19 Aug 2026 12:28:47 +0000
ROA not before:           Wed 19 Aug 2026 12:28:47 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     15570
IP address blocks:        202.9.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.crl
                          rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 09:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91448CB, serialNumber=B19C324C4679D2E456834389AFFB7504EDF0971E
        Validity
            Not Before: Aug 19 12:28:47 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a85a17f-4146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:58:e8:6c:bf:f3:d0:64:e5:c8:09:04:5f:
                    d3:15:0c:94:80:28:3c:9f:3e:c3:9a:5e:f1:2e:1c:
                    d1:0d:82:94:b1:3c:ce:d6:81:93:8a:45:d5:4a:f2:
                    4b:7f:ff:89:cc:a5:c4:21:05:28:12:1c:7b:58:fc:
                    12:a6:46:da:bd:90:2a:07:c1:09:21:14:7a:06:26:
                    f1:44:a8:3a:df:01:cb:20:99:66:35:f8:73:32:72:
                    a6:23:1f:28:f1:6e:d6:ec:34:26:ca:13:63:42:0e:
                    d8:5f:72:06:ba:d5:b2:ca:27:88:64:cb:55:65:50:
                    c8:63:e1:64:c8:9b:e4:04:80:48:44:a7:ec:50:b2:
                    cc:18:e5:ca:59:30:16:73:c7:50:64:3a:5d:11:52:
                    45:b3:5d:9d:69:40:5a:4f:6b:9a:fb:32:ff:46:fb:
                    e7:70:ca:3a:76:9c:8c:60:47:b3:8c:1b:d3:a5:5c:
                    56:1f:ee:3b:30:34:ec:70:e9:b8:c4:26:ae:31:95:
                    e3:37:90:52:f2:38:f2:56:45:51:d1:1a:42:07:30:
                    22:e7:6b:dc:dd:db:85:d9:ab:5e:10:8d:a4:6c:17:
                    44:83:a9:b4:12:87:60:4e:1c:ba:ac:06:a9:54:08:
                    44:fa:7b:86:09:aa:12:58:40:75:5a:7a:3b:d3:77:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:60:2B:FE:F9:F2:C8:9F:4C:E4:B1:C8:87:97:AD:53:36:CE:A4:2F
            X509v3 Authority Key Identifier:
                keyid:B1:9C:32:4C:46:79:D2:E4:56:83:43:89:AF:FB:75:04:ED:F0:97:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/862E552A9BC911F18D38C8025A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:a7:c4:78:e6:f3:ed:a2:cd:f3:07:ed:1d:4a:f5:6c:26:18:
         62:84:f2:0b:cb:51:fa:c3:f9:60:fa:81:02:fb:26:8e:70:6c:
         28:6b:fa:72:01:70:70:00:34:88:01:d0:a1:7b:6d:f2:83:bc:
         72:6b:0a:b5:61:93:8f:7d:06:4c:f6:a2:2d:71:31:13:30:f4:
         d5:ab:20:0e:10:ad:b9:64:a5:64:8a:c3:28:ad:13:f2:46:93:
         68:28:61:3b:4a:93:ee:4a:0c:fd:62:2b:f1:03:97:23:a7:8d:
         05:c7:20:a2:7d:51:b8:70:fe:92:ff:d5:32:5b:78:de:d6:0a:
         a0:76:8a:7f:7b:5b:19:ff:10:1e:81:25:6b:4a:09:ba:5b:ab:
         33:6d:4a:16:62:33:8f:10:70:2b:48:4b:00:12:d7:2a:40:8a:
         43:14:2a:b5:98:de:35:17:23:3f:0f:8f:2c:2d:a5:67:27:b1:
         f0:60:c1:d3:54:15:0d:2e:e1:a1:ae:30:c8:82:07:4e:00:ae:
         6b:63:b7:e6:52:fe:e5:a4:91:cc:ea:30:b7:3c:d5:9d:78:5d:
         71:4b:49:f7:da:25:dc:44:5c:20:fb:fc:31:25:40:53:b1:6c:
         94:45:83:9b:22:39:4f:ee:2d:98:24:e7:a3:c7:09:14:4f:41:
         2d:04:d2:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:46:16 2026 by rpki-client