Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/09F2AE3EF36811F0BB995E0C666F56BC.roa
File:                     09F2AE3EF36811F0BB995E0C666F56BC.roa (raw, json)
Hash identifier:          v8t9bmHpqZn0wuxiofvRlA2MMIdpOLvcB//haxyBf5U=
Subject key identifier:   40:DC:24:C6:65:85:92:35:B8:DF:89:8B:AF:D9:CE:5B:A4:9E:04:3D
Certificate issuer:       /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial:       01AD
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/09F2AE3EF36811F0BB995E0C666F56BC.roa
Signing time:             Thu 27 Aug 2026 04:55:41 +0000
ROA not before:           Thu 27 Aug 2026 04:55:41 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     4755
IP address blocks:        192.8.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 04:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
        Validity
            Not Before: Aug 27 04:55:41 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8fc34d-7a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f8:66:cb:4f:92:34:6e:a1:6e:f1:5c:24:3f:
                    29:57:59:75:4f:77:88:29:94:f2:00:ae:53:fe:9e:
                    69:21:7f:76:f1:f7:c9:30:e0:f5:10:0b:32:61:30:
                    47:7f:4f:5b:3a:d5:f9:bf:c7:43:27:7f:bc:ec:49:
                    16:4e:b7:fb:f4:eb:1b:3a:36:91:1a:5c:2f:85:79:
                    4a:f5:65:54:c0:70:95:4a:33:19:75:54:0c:a3:d5:
                    c8:fd:7d:8c:56:08:6b:21:3b:cd:03:42:72:d5:70:
                    28:ed:7c:af:6e:95:6b:a7:18:9e:02:d3:e4:47:3b:
                    41:e2:b8:43:65:04:c9:9e:a8:af:8b:eb:26:39:32:
                    50:d3:45:3a:68:4c:5c:3c:70:f4:29:e8:15:60:fd:
                    57:26:cc:e6:ac:ee:40:de:aa:57:a4:d7:d5:86:96:
                    d5:0c:ce:d7:be:67:c1:31:ab:48:ba:bd:60:eb:e1:
                    6c:54:46:35:39:c0:bf:65:a4:89:88:22:e8:cc:f9:
                    f5:a0:80:88:89:f3:93:d8:70:f5:15:a2:08:5b:aa:
                    b9:ba:31:79:8b:19:dd:c2:17:32:e3:04:47:5a:b2:
                    56:38:03:42:e0:20:b0:e3:3c:61:18:e6:1f:88:dd:
                    98:cc:73:05:62:2f:c5:74:73:32:72:3c:95:0c:d6:
                    0a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DC:24:C6:65:85:92:35:B8:DF:89:8B:AF:D9:CE:5B:A4:9E:04:3D
            X509v3 Authority Key Identifier:
                keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/09F2AE3EF36811F0BB995E0C666F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.8.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:fa:8f:b1:60:50:5b:4b:fc:15:62:4d:5a:fd:c8:f7:dd:6a:
         84:e1:ac:cd:1c:8c:97:10:95:91:2b:e1:6b:a5:59:bc:7c:53:
         85:0b:1b:0c:69:f4:c2:46:a8:d0:3a:d8:02:a2:6a:ee:fb:79:
         1b:ff:58:66:e5:4a:75:9b:31:c4:e3:5b:c9:e9:5a:38:8c:e5:
         37:f5:36:57:91:fe:17:2f:23:c9:4e:75:29:04:77:49:09:d1:
         e3:95:dc:82:32:9f:24:bf:ff:3b:ef:68:1d:95:ec:c4:ee:93:
         64:3e:46:1e:8d:89:56:68:0f:58:ca:d0:fd:87:e6:64:59:81:
         2a:cf:93:7e:52:c4:6b:37:0c:bb:92:39:33:4c:d3:0b:a7:53:
         25:e7:85:f2:97:d6:22:8f:15:03:17:a2:a1:92:92:2c:f2:0b:
         ab:bd:fc:8a:e0:70:cd:2d:3f:5a:b7:b8:2d:7c:8e:17:7f:07:
         4d:38:af:12:de:40:2b:1a:32:3e:00:ed:77:30:63:6c:59:8e:
         fa:22:3c:97:8b:19:6f:6d:40:3f:c9:85:2d:09:0d:8b:92:5a:
         9f:2f:a7:2e:00:40:97:d9:2e:56:67:d1:c7:f9:be:80:a4:7f:
         85:7e:73:5d:b9:24:69:ad:de:e5:83:a4:b7:45:f8:93:0a:4c:
         70:1c:66:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:57:30 2026 by rpki-client