Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/96C1C6A0782111F0A5880F87C4F9AE02.roa
File:                     96C1C6A0782111F0A5880F87C4F9AE02.roa (raw, json)
Hash identifier:          Cpj2rnPMgYM5VqySWqHdCDB+CGxD+l6btMfOp3kgYVw=
Subject key identifier:   67:2C:3A:BC:48:85:1C:62:8E:47:F7:B8:2D:E9:70:54:DC:7F:1B:D5
Certificate issuer:       /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
Certificate serial:       02CB
Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/96C1C6A0782111F0A5880F87C4F9AE02.roa
Signing time:             Wed 12 Aug 2026 19:39:27 +0000
ROA not before:           Wed 12 Aug 2026 19:39:27 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134227
IP address blocks:        192.107.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl
                          rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
        Validity
            Not Before: Aug 12 19:39:27 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7ccbef-6135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:37:31:98:6a:52:de:6e:3e:d4:01:4c:d3:c0:
                    27:2a:cc:78:19:ee:3c:8e:d4:63:e2:54:f8:a3:51:
                    7b:f6:a6:98:37:ca:5b:af:1d:0e:73:ea:c5:6f:82:
                    6b:55:85:9c:e8:18:f3:30:d4:b5:0f:e7:3c:16:b2:
                    5f:e9:1d:c6:17:d1:c8:68:b5:f9:95:e5:9f:71:42:
                    5a:99:f7:ea:1b:fe:d1:10:2b:b6:94:a2:1b:e2:99:
                    48:0e:33:f3:8a:b6:c1:70:d0:b0:27:9d:55:fe:18:
                    19:d8:24:25:68:06:52:ab:bb:ff:8b:50:4e:64:58:
                    35:2c:17:63:05:86:3c:4b:54:85:c3:ac:eb:9d:4e:
                    cc:a1:5c:b1:61:d9:e0:68:51:8d:a1:ae:eb:f0:e7:
                    6b:ef:3f:30:1c:a3:e7:2d:1d:bd:63:6c:f7:0c:47:
                    b7:17:b9:19:f9:df:a8:e8:c3:04:94:a5:e9:4d:d1:
                    25:68:e5:41:99:aa:7b:85:70:1d:35:75:15:b7:dc:
                    1d:40:bc:ed:a6:57:18:09:e6:49:b2:2c:ad:51:43:
                    04:e9:61:a1:c5:b2:94:9a:d0:79:ec:89:4d:84:de:
                    a1:51:06:d1:81:51:2d:c9:c2:a2:46:13:9d:f7:d3:
                    5c:e1:18:47:46:59:fd:d9:7c:e2:e2:b9:94:2e:f9:
                    d1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2C:3A:BC:48:85:1C:62:8E:47:F7:B8:2D:E9:70:54:DC:7F:1B:D5
            X509v3 Authority Key Identifier:
                keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/96C1C6A0782111F0A5880F87C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.107.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:9c:03:3a:6e:4e:00:35:c4:57:51:3d:4f:62:ef:66:25:be:
         6f:a9:1b:5a:64:ac:89:a4:3a:ef:48:bf:38:ed:8e:24:bf:44:
         9a:91:2d:df:81:d3:dc:10:dc:c5:47:d6:00:8d:43:f1:24:7d:
         12:dd:92:cd:fa:6c:cc:8a:1d:c7:ab:27:f9:72:0a:06:7f:5f:
         a6:61:b5:aa:37:4a:15:e8:15:d0:c4:ee:46:6f:20:86:93:f6:
         b7:f0:37:a5:a4:81:5f:01:87:6c:8c:39:b9:e7:9b:3b:87:18:
         02:fd:21:16:84:35:98:bf:73:d4:7f:a6:c0:db:a4:39:38:a6:
         c0:9f:60:0e:94:2a:72:51:f8:35:b9:0e:5b:3e:30:c2:5c:25:
         ca:74:75:5d:db:45:72:b2:10:6c:0e:77:1f:b5:21:1f:f5:e7:
         12:c1:46:cf:ea:41:80:84:f4:43:8b:31:bb:85:23:b4:80:eb:
         07:99:46:6a:9f:46:00:d6:de:d1:f6:b2:d9:11:1a:a9:dc:c5:
         35:50:14:14:98:5d:13:53:3a:9b:ef:dc:73:b2:e2:97:41:12:
         a5:c1:ba:4b:f3:cf:eb:99:5a:9c:43:fa:3c:49:35:5d:71:bc:
         4b:6f:98:ba:ae:f9:bc:d3:c0:45:b0:a3:02:ae:3e:60:51:bf:
         5d:55:54:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 22:14:19 2026 by rpki-client