Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/08B79AD09C4111F0A9483031C4F9AE02.roa
File:                     08B79AD09C4111F0A9483031C4F9AE02.roa (raw, json)
Hash identifier:          fnlmor83f4zOs/e32/aecWKfxIQo6ta8eCmsFjhtaQ8=
Subject key identifier:   67:A1:0C:BC:98:BF:94:D4:24:58:6C:5D:91:40:09:31:ED:66:FE:42
Certificate issuer:       /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
Certificate serial:       F0
Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/08B79AD09C4111F0A9483031C4F9AE02.roa
Signing time:             Thu 01 Oct 2026 08:56:23 +0000
ROA not before:           Thu 01 Oct 2026 08:56:23 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     17728
IP address blocks:        203.28.195.0/24 maxlen: 24
                          203.32.55.0/24 maxlen: 24
                          203.34.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl
                          rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF
        Validity
            Not Before: Oct  1 08:56:23 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abe2037-5b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f4:2e:55:2f:62:60:35:2f:22:a0:13:a3:1f:
                    4a:5a:9d:8a:b1:e8:d9:f6:f4:8a:db:3b:e9:02:fc:
                    0c:64:6c:39:b2:b7:61:58:66:73:95:bb:05:a4:a1:
                    3b:fd:a1:c3:f2:b7:f2:ce:08:9d:a2:6b:d9:b6:81:
                    c5:65:f4:f8:90:cf:6d:19:80:5f:30:34:31:a4:8e:
                    b0:11:9e:3e:89:de:d2:9c:af:bb:3a:dc:2c:6a:b5:
                    e5:c2:05:2c:c4:a1:70:d0:5d:89:45:a6:cc:9f:47:
                    5a:1f:c3:fa:fb:1a:91:8d:18:88:52:c7:ca:83:d7:
                    87:1f:c4:80:33:b0:17:77:59:8f:b8:7c:0e:1c:ba:
                    0d:03:ff:c8:ef:0a:f4:82:3b:c0:bd:b4:32:61:4d:
                    e2:84:ac:b9:74:bd:30:05:1b:c6:f6:c6:ff:ae:60:
                    0e:69:b2:5f:6d:6d:67:95:d1:56:22:0c:a7:28:63:
                    fa:6f:4a:33:1b:eb:ea:0c:c3:b7:92:30:1e:1b:13:
                    e1:9a:e7:fc:7e:e9:f0:71:b5:2b:a5:a3:66:72:a9:
                    91:d7:31:66:f7:f5:4c:df:d7:ba:b4:dd:55:d3:54:
                    24:c1:b8:46:a3:dd:f8:09:29:5f:b5:fd:e6:96:92:
                    32:3a:19:25:82:2e:a0:7e:d3:84:ee:b8:1e:3a:72:
                    c4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A1:0C:BC:98:BF:94:D4:24:58:6C:5D:91:40:09:31:ED:66:FE:42
            X509v3 Authority Key Identifier:
                keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/08B79AD09C4111F0A9483031C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.28.195.0/24
                  203.32.55.0/24
                  203.34.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:e8:9a:84:73:52:5e:80:95:62:00:79:c6:ae:6c:94:41:c8:
         d8:b3:2d:b5:84:d2:fb:e0:bd:ef:71:ef:ae:0c:22:b5:81:aa:
         66:61:73:b0:86:5a:c6:be:2e:ea:f1:94:a0:2d:36:39:2f:84:
         40:f4:d9:94:79:c8:87:5b:40:fd:93:ac:26:31:a5:85:3a:b2:
         ed:2d:ac:f0:64:00:48:2a:0d:26:0c:fa:d8:dc:67:93:bc:d3:
         72:59:2a:2e:9b:93:2d:97:6a:da:d8:61:f8:3f:b9:45:1b:bf:
         49:4c:bd:79:97:45:7e:4b:be:75:b5:27:9b:47:f3:b2:73:4c:
         8c:19:2a:87:a1:31:3c:7e:1f:0b:d4:ec:16:ae:29:26:fd:88:
         f9:05:fe:94:aa:b0:0f:7e:43:fe:26:d1:0a:66:3f:5d:5c:21:
         55:74:f0:40:33:38:9d:6d:a7:a1:33:29:ac:99:40:99:7b:dd:
         18:6c:fe:78:33:b4:69:0b:38:7d:75:95:2d:48:4e:0a:8a:21:
         19:28:01:98:6b:53:0b:46:c7:28:1e:6c:7b:5f:91:cc:08:23:
         54:38:41:d2:2d:0c:bf:af:a5:24:22:22:cf:85:a2:a6:ab:86:
         4b:ec:76:26:a1:1f:8a:b1:ff:46:9a:47:59:af:f1:17:bc:b2:
         72:72:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:04:43 2026 by rpki-client