Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/87758D3C2DAF11F1B56D9FADA5833773.roa
File:                     87758D3C2DAF11F1B56D9FADA5833773.roa (raw, json)
Hash identifier:          a6qcX85tfGR7GPMLmJuOEhU1jvT5cr2M6V6HLw3vIyQ=
Subject key identifier:   EE:8A:8F:9C:57:7E:E0:42:0A:3A:03:12:F2:4F:C9:23:F3:54:BB:73
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       B9
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/87758D3C2DAF11F1B56D9FADA5833773.roa
Signing time:             Wed 01 Apr 2026 09:45:34 +0000
ROA not before:           Wed 01 Apr 2026 09:45:34 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     135391
IP address blocks:        206.161.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Apr  1 09:45:34 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69cce93e-8984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a6:69:1f:fd:27:ae:36:d7:98:b4:b2:71:42:
                    42:fb:28:06:62:55:f1:14:f4:3a:23:4f:d9:df:16:
                    04:3a:f6:5c:ea:35:3d:f0:18:ab:9c:fd:5f:bc:fa:
                    81:d6:9c:45:2a:85:8c:00:68:dd:da:0c:1f:97:fe:
                    e8:02:87:e5:56:e0:c8:45:b2:7a:56:6c:6c:6f:14:
                    f9:02:a7:e6:29:ed:09:85:85:5a:4f:e4:f4:9d:80:
                    4d:8a:3f:df:84:64:79:c3:06:c2:8c:d9:4f:8f:54:
                    d1:c2:87:56:d5:bc:30:03:86:49:61:4f:d5:98:d3:
                    96:92:83:12:11:2a:a3:58:7f:de:39:67:2b:8a:a4:
                    65:a8:f2:80:81:8b:f1:36:35:79:02:d1:2a:90:68:
                    06:58:f8:bb:ff:0a:e8:32:e2:20:e0:69:4e:b1:31:
                    f2:b9:79:16:af:b9:b6:98:4a:ac:a6:72:d9:2f:a6:
                    2b:55:90:6d:48:4d:22:fe:f2:22:d4:2f:35:b8:ed:
                    70:4b:ee:9f:84:e6:7d:97:8b:e6:e0:e5:51:36:3a:
                    fe:b2:0f:83:b9:fa:cd:8f:34:7a:79:68:b3:40:c5:
                    51:f5:bd:e2:53:05:00:ca:74:cb:51:98:eb:bd:1b:
                    5a:a0:e0:ff:75:cc:94:7c:58:36:c7:75:f3:5a:a9:
                    fd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8A:8F:9C:57:7E:E0:42:0A:3A:03:12:F2:4F:C9:23:F3:54:BB:73
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/87758D3C2DAF11F1B56D9FADA5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.161.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:be:38:52:63:4c:2d:36:80:21:6d:12:85:07:fa:cb:34:dd:
         58:a8:90:7d:9b:a6:ef:73:48:cf:fd:7c:49:a5:5e:8c:b3:58:
         fe:2a:0e:b4:9c:84:a5:ef:61:64:7d:6a:6e:90:26:8a:79:61:
         72:13:6f:9f:7c:5b:86:84:58:e1:da:3e:53:94:47:b6:24:0e:
         4b:2d:87:38:c4:a3:83:ef:fc:1e:0e:5d:a5:82:01:9f:2e:f9:
         3a:1e:41:af:4a:6d:b3:8f:3f:e9:74:03:da:5b:56:94:0c:8f:
         b6:5a:b5:bc:72:1c:fd:cb:03:4e:14:08:de:6c:db:45:e8:7d:
         19:58:92:f1:db:a3:05:ea:0f:05:af:6f:a1:32:d8:28:57:70:
         f7:5d:63:55:c8:ce:bc:60:30:8b:18:a2:17:71:ef:12:a4:ca:
         79:40:2d:a4:fb:15:67:38:26:b5:3f:00:26:aa:39:dd:04:6c:
         17:65:c7:66:39:37:b0:8f:30:b0:cd:32:a3:e2:65:dc:c7:c4:
         27:d0:63:4f:aa:85:05:aa:2f:4c:e9:82:fd:a4:d2:27:e7:97:
         30:dc:54:48:6f:a5:e9:27:b1:d5:07:6e:ad:47:0f:d8:ea:b0:
         1d:f6:5e:05:5e:6d:15:0e:ae:a2:a2:b7:21:18:c4:29:39:e8:
         ab:01:f6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:27:31 2026 by rpki-client