Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/AB9730AAA7DD11F1B8E3669D5C11F970.roa
File:                     AB9730AAA7DD11F1B8E3669D5C11F970.roa (raw, json)
Hash identifier:          V0nf8R/JXTCmLmr3evrsoWZqErfhyc7Me8vH9L8neaE=
Subject key identifier:   30:C9:FE:FA:EB:D3:87:F7:72:8B:B2:AB:E3:13:7C:01:91:32:65:FC
Certificate issuer:       /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
Certificate serial:       0CB1
Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/AB9730AAA7DD11F1B8E3669D5C11F970.roa
Signing time:             Thu 03 Sep 2026 21:23:13 +0000
ROA not before:           Thu 03 Sep 2026 21:23:13 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     132692
IP address blocks:        114.23.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl
                          rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 18:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3249 (0xcb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91178F4, serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
        Validity
            Not Before: Sep  3 21:23:13 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a99e541-6449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:20:78:ac:5e:30:38:0d:2f:c9:91:38:46:
                    04:cd:42:38:65:c4:98:9a:f1:d3:4e:d1:b2:b8:ad:
                    19:8f:7b:17:c3:29:c4:ca:a5:4b:fd:cc:44:8f:fe:
                    f5:4b:87:ca:3b:9d:26:90:38:19:b2:8c:1f:81:c2:
                    c1:e4:82:c8:c7:2b:b6:14:20:4c:f1:12:72:18:0f:
                    e4:9b:a1:b7:fa:09:ba:64:05:b5:09:d9:a2:32:b0:
                    07:98:05:3c:d5:74:ff:ab:f2:d6:c1:f9:12:cb:1f:
                    10:52:fb:cc:ef:07:be:06:55:60:49:c2:23:c2:ba:
                    ea:c5:e7:4f:db:ed:3f:f5:ca:8e:3f:ef:06:a6:cd:
                    78:f7:40:39:c5:5e:a2:6b:e9:34:5f:f4:54:d4:8e:
                    03:53:65:e7:c7:6b:c8:4a:bb:da:5f:c3:cf:bd:f7:
                    4f:1f:ff:76:dc:99:d8:1d:ef:21:ff:f9:c9:2c:59:
                    52:d6:9d:47:b6:cd:dd:a4:b0:37:ef:dd:3d:0d:2b:
                    cf:40:5a:84:04:c1:65:a8:5f:fc:a8:1a:c1:45:aa:
                    db:03:b1:d0:78:63:a7:c2:11:7e:24:b5:74:c3:50:
                    f2:62:3d:63:16:6f:48:36:26:4c:7b:7a:0b:fa:e5:
                    ff:da:02:79:89:56:ff:ec:45:db:49:3f:5d:6b:94:
                    04:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C9:FE:FA:EB:D3:87:F7:72:8B:B2:AB:E3:13:7C:01:91:32:65:FC
            X509v3 Authority Key Identifier:
                keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/AB9730AAA7DD11F1B8E3669D5C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.23.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:6f:95:a2:7a:a1:d1:64:7b:cb:fa:47:be:78:a9:22:19:8e:
         e1:ac:1d:0c:a5:f7:cb:b5:e3:8e:ae:91:e4:f0:63:ec:89:bd:
         25:c3:d1:57:50:32:9c:b5:b0:f7:f0:48:56:ef:ef:bc:c1:c5:
         73:86:15:08:75:1c:bb:98:38:95:d3:fb:2b:cc:73:b2:87:30:
         30:69:c4:81:55:5a:8a:31:96:fb:9b:70:e7:04:37:ef:8f:60:
         48:08:8d:79:46:d1:fd:7c:ab:b6:e1:07:b5:07:7a:f5:8d:83:
         04:7d:58:80:e8:3f:14:ff:66:47:1b:a0:0d:0f:6b:a7:0b:c2:
         75:18:ed:d9:f6:2f:b1:9d:7d:a4:0e:00:10:b2:55:54:4f:5a:
         92:82:23:e1:ef:76:48:88:4b:83:6f:07:95:3c:e8:24:c5:d3:
         43:de:9e:2b:44:5d:15:b8:00:24:8c:5c:ac:41:f6:eb:08:6e:
         05:0f:34:40:ac:cb:58:02:16:c4:a2:66:fb:97:08:a6:0d:82:
         6d:b8:ca:59:1f:23:64:28:7a:fa:ac:a8:9a:f0:69:dd:9a:cf:
         71:f5:de:9c:49:19:d2:f3:27:e5:1b:61:b1:6b:6d:9d:7d:6b:
         44:b0:1a:58:ea:bb:7a:c2:a0:f8:5d:49:04:f1:56:68:e4:70:
         5c:af:b3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:58:47 2026 by rpki-client