Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/F84FF96A493911ED805EB686C4F9AE02.roa
File:                     F84FF96A493911ED805EB686C4F9AE02.roa (raw, json)
Hash identifier:          w7KG/J1TWQ+E1Y4LjZmHHZjsfxjI1eg2+nxK+rAoyBg=
Subject key identifier:   A9:56:2A:7E:7C:18:27:21:DA:2D:AB:8B:7E:31:66:B9:5D:B3:9B:3D
Certificate issuer:       /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
Certificate serial:       0370
Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/F84FF96A493911ED805EB686C4F9AE02.roa
Signing time:             Mon 15 Jun 2026 01:30:20 +0000
ROA not before:           Mon 15 Jun 2026 01:30:20 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     32787
IP address blocks:        140.168.240.0/24 maxlen: 24
                          140.168.241.0/24 maxlen: 24
                          140.168.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 02:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
        Validity
            Not Before: Jun 15 01:30:20 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2f55ac-c2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:a3:0f:e4:71:c3:ba:59:e5:98:84:7e:c3:
                    6f:25:65:42:1f:f5:ed:97:bf:03:c8:b6:b9:88:c9:
                    c9:34:71:8d:0d:0e:0e:16:d4:a1:ab:83:e8:01:5b:
                    25:ef:73:07:73:ab:ee:fe:31:de:50:f9:b0:cf:29:
                    d6:ed:c2:02:1d:1f:ef:97:e1:1d:b3:90:ef:da:f6:
                    2e:2c:35:a5:79:bd:ce:d7:70:d5:4e:94:d4:4b:f9:
                    f5:03:1b:a9:92:da:75:e0:69:d0:f1:66:d0:bd:43:
                    4d:a1:d2:f2:71:61:65:c7:53:dc:cc:38:6f:0c:4d:
                    c5:75:d4:52:da:6c:8c:98:72:f9:d2:52:d6:b3:80:
                    5d:29:5d:41:0d:75:43:93:65:0f:06:ba:6f:47:15:
                    17:b5:0a:dc:e9:e7:70:57:ee:9b:0f:53:80:92:1f:
                    5f:77:51:6a:94:66:ca:20:08:e4:b8:b1:cb:fd:3c:
                    0d:85:94:9d:58:99:e3:38:a7:86:7f:a1:ae:a2:8c:
                    86:ff:aa:99:04:97:8f:30:6c:c6:be:c2:e5:99:a0:
                    bc:65:50:10:63:50:b9:b7:08:d4:62:95:fc:e3:49:
                    58:f0:c3:ef:4f:db:46:7d:57:44:91:30:73:5e:c9:
                    3c:fe:5a:af:3c:11:0a:5e:63:db:6c:91:e0:c6:98:
                    d4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:56:2A:7E:7C:18:27:21:DA:2D:AB:8B:7E:31:66:B9:5D:B3:9B:3D
            X509v3 Authority Key Identifier:
                keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/F84FF96A493911ED805EB686C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.168.240.0/23
                  140.168.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:28:e0:06:15:d8:3c:aa:72:74:92:1f:57:fb:32:28:62:8a:
         76:72:12:16:bf:bd:8c:6d:ff:44:19:ed:8c:e4:39:50:9e:c3:
         15:84:bb:bc:9d:07:d8:84:46:c3:11:81:57:71:90:85:0f:c5:
         d3:9a:aa:69:ef:06:e7:07:5d:19:d3:d7:7e:e5:84:84:12:9c:
         11:29:e7:78:8b:f9:86:04:87:a5:b9:b1:2d:b7:c6:93:97:32:
         d8:d4:87:b9:c0:06:f0:c4:f9:38:a2:3c:f8:fe:f8:d0:dc:3e:
         9c:6f:0c:d4:f0:45:aa:a1:a3:80:da:fc:e6:41:67:35:7a:67:
         52:39:54:db:6b:ed:9d:b6:44:6d:4e:99:b1:9e:7d:0e:73:e7:
         a7:18:0e:41:d0:f6:7e:e4:b5:c6:d9:06:19:cd:2f:e1:e4:8f:
         87:2b:96:2b:b4:76:fd:e7:2e:ab:67:80:46:b6:b5:3f:0c:3f:
         db:3a:1f:e6:9f:6e:e3:44:55:54:8f:d2:93:da:1b:c5:1a:bf:
         68:3b:01:38:96:6c:23:85:a1:a2:ae:2c:01:3a:39:50:8a:e4:
         25:38:3c:78:24:3d:41:35:fa:68:82:4f:6d:3f:26:cd:30:d0:
         6b:50:2e:c9:75:4c:2d:93:0a:04:d8:22:4d:85:58:ff:20:3e:
         41:c2:21:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:21:02 2026 by rpki-client