Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/21CF5E6C7AF111EF8BC4E684C4F9AE02.roa
File:                     21CF5E6C7AF111EF8BC4E684C4F9AE02.roa (raw, json)
Hash identifier:          CfHWZYgOb2hVFX3BPz+agdH43bTlnpYAOS7Dyk5S+dw=
Subject key identifier:   FE:3E:D5:D5:DB:B8:F7:FB:76:16:B8:E6:E8:8D:1B:0C:CE:99:17:7A
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       0887
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/21CF5E6C7AF111EF8BC4E684C4F9AE02.roa
Signing time:             Thu 02 Apr 2026 21:27:35 +0000
ROA not before:           Thu 02 Apr 2026 21:27:35 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     132794
IP address blocks:        202.92.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183 (0x887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Apr  2 21:27:35 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=69cedf47-34fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:e8:6e:e7:73:55:a7:be:b2:96:90:11:e9:
                    fa:44:b9:dc:ac:87:a4:b9:ef:56:61:c8:14:f0:76:
                    b2:1a:4f:99:42:f0:1c:11:d1:19:77:05:fd:89:2b:
                    ab:a5:74:9e:4e:7d:08:f7:f9:41:4a:59:ed:58:63:
                    85:6c:dc:3c:d1:77:74:0e:f1:a3:bf:b6:a4:7f:cf:
                    8c:d7:46:6e:52:a9:3c:8b:e7:88:29:3f:16:bb:69:
                    f8:95:4e:88:f2:2a:8f:44:13:5d:34:b1:98:cd:5b:
                    04:10:aa:2f:51:f0:b1:ad:0c:eb:ab:1b:aa:a3:22:
                    dd:a5:18:26:27:81:44:f6:01:16:15:40:d0:af:e3:
                    91:31:5d:e7:b8:94:06:3e:77:71:8b:df:86:c9:51:
                    89:69:32:2b:47:48:50:ea:ff:32:a1:6e:33:cc:f5:
                    b9:ad:02:36:fc:5b:1e:8d:80:bd:40:b4:04:4b:05:
                    a6:0c:c9:76:75:97:6f:19:4d:dd:06:33:12:93:b0:
                    04:5a:77:4d:08:8f:67:7e:77:ed:09:b9:af:5f:ba:
                    77:e1:6a:20:61:dc:6b:11:24:4b:f6:53:11:52:9d:
                    14:05:46:3f:56:28:c6:63:be:97:d2:dc:ba:54:71:
                    68:cf:c8:e0:07:5f:ee:45:5d:03:0f:29:c6:3d:cb:
                    7c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3E:D5:D5:DB:B8:F7:FB:76:16:B8:E6:E8:8D:1B:0C:CE:99:17:7A
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/21CF5E6C7AF111EF8BC4E684C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d9:18:91:51:45:9e:94:0c:f5:df:dd:63:34:6a:51:0f:9a:
         c8:e8:4b:fd:85:19:f7:6e:98:6e:e0:fe:85:98:7e:68:34:fc:
         36:60:c1:f0:56:40:7b:e2:a2:7d:94:65:61:ef:09:cc:ff:2f:
         23:65:43:de:72:c8:15:81:ae:6a:6b:28:f9:89:d5:1f:82:e7:
         79:26:8e:e6:82:b6:06:70:01:6b:f4:22:74:7a:8c:1d:90:c1:
         a3:be:26:62:43:b6:23:ea:15:b6:c7:c5:47:df:d1:20:33:b5:
         a7:24:58:48:f4:b3:44:93:69:ba:e5:2b:db:9d:3b:06:54:d5:
         c0:e3:eb:f1:0a:25:78:24:d1:92:9a:6a:aa:05:27:74:0c:0c:
         54:f0:8e:6b:ec:74:7d:41:4a:ab:0b:94:1f:d1:e9:fb:63:7a:
         3a:44:c3:c3:cf:7d:81:43:3b:47:4d:ab:45:66:7f:5a:c9:2e:
         10:1a:ae:9e:5f:46:a6:9c:c9:2a:e9:bd:70:2d:45:78:8c:19:
         52:44:1b:4f:9c:9e:14:97:1c:4a:58:45:0d:67:06:a1:1f:4a:
         74:11:c3:b2:a6:25:43:2a:0a:13:20:14:c4:c1:17:36:cc:cb:
         3f:e9:9f:48:15:67:d9:8e:1b:6c:e3:65:1c:7e:f6:db:4d:e2:
         b0:af:0f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:27:07 2026 by rpki-client