Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa
File:                     F7078BC4B73511EF8537DE81C4F9AE02.roa (raw, json)
Hash identifier:          dczQHHZaw7r89KG59F29Q8rg/ZO4zvKmGMns/aKZFto=
Subject key identifier:   22:C8:2B:E7:2D:B6:19:3D:E6:75:D0:D8:8C:67:BF:2A:AE:77:5F:40
Certificate issuer:       /CN=A91394E7/serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
Certificate serial:       016D
Authority key identifier: 89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa
Signing time:             Fri 09 Oct 2026 05:54:56 +0000
ROA not before:           Fri 09 Oct 2026 05:54:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     23921
IP address blocks:        202.38.157.0/24 maxlen: 24
                          203.31.183.0/24 maxlen: 24
                          203.92.27.0/24 maxlen: 24
                          203.190.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl
                          rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 05:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91394E7, serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
        Validity
            Not Before: Oct  9 05:54:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ac881b0-7900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:c3:39:82:c4:b4:f9:28:92:2c:19:c9:e5:
                    4b:54:74:1f:60:66:a3:f7:4a:8b:f1:b7:e9:e4:9c:
                    be:f4:c5:ff:9c:e1:25:3f:21:df:43:01:8d:cd:33:
                    e5:48:96:ff:16:7d:3c:20:f6:c0:5a:af:75:33:6e:
                    d9:d9:c2:7b:af:58:3b:c2:02:91:f9:43:56:ce:28:
                    50:eb:3b:a6:d4:a6:c4:ca:32:e8:f7:4c:31:24:01:
                    d8:d3:d4:10:12:3a:5b:25:04:95:25:0a:bc:87:a4:
                    b2:f6:70:f4:bc:5a:6e:a6:8c:d3:28:04:04:ba:a0:
                    39:f2:b2:d0:90:5d:08:58:d3:e1:48:3a:d3:e9:10:
                    f7:17:be:0a:5b:ec:7b:96:0b:13:34:9a:7d:68:e1:
                    a0:16:f5:43:35:77:e8:11:87:68:87:6b:1e:4e:58:
                    94:6a:33:36:23:35:86:5d:a3:ae:2d:09:a5:3b:cd:
                    97:36:c6:3f:32:5c:a4:76:59:8e:48:3f:6d:e1:76:
                    79:43:9b:a6:1b:1b:7c:27:df:a2:8d:40:06:2c:78:
                    a6:9d:f8:a8:81:b5:ad:18:eb:d1:86:84:dd:78:0d:
                    b6:0e:c2:65:bf:32:c5:0c:bb:04:de:f4:f5:2d:83:
                    b9:d1:5c:1a:6e:47:66:a7:bf:e5:4e:91:73:52:ad:
                    8b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C8:2B:E7:2D:B6:19:3D:E6:75:D0:D8:8C:67:BF:2A:AE:77:5F:40
            X509v3 Authority Key Identifier:
                keyid:89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.38.157.0/24
                  203.31.183.0/24
                  203.92.27.0/24
                  203.190.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:b6:0d:30:db:87:ca:f0:a2:e6:ae:79:91:ea:eb:fc:c6:74:
         c5:2a:94:14:9f:29:77:8a:bc:a4:1f:9e:e2:1e:89:e6:53:57:
         cf:ec:3c:22:af:2b:ba:8b:1f:e1:43:b5:84:ff:69:9f:bf:94:
         dd:96:66:98:b6:95:a3:94:66:d9:b2:05:b4:e7:86:48:7f:bd:
         3d:01:94:ed:c9:78:db:90:12:29:e2:e9:4b:c7:4e:76:c3:7c:
         e7:13:9c:10:1d:ec:c6:d8:f2:0e:0b:14:53:a6:73:88:0c:df:
         c3:e6:62:17:ba:ed:cf:be:ea:a4:45:ce:cd:8f:5b:48:ed:32:
         13:9a:49:d3:84:fe:9d:4f:b2:c0:c8:8d:04:24:37:9b:66:da:
         bb:b3:de:bf:d5:56:85:2d:bb:87:03:34:43:39:a5:94:8d:e7:
         fd:53:ec:df:fe:58:54:f4:9c:c1:45:f7:65:ee:de:e2:2c:c9:
         c8:29:66:59:9e:5d:56:9e:e2:fa:a0:55:b3:be:2b:bb:37:93:
         ab:91:5a:2f:d0:74:4a:6a:64:48:e7:58:a6:14:21:f3:43:62:
         34:52:26:4d:0a:1e:6c:b2:76:65:2f:c0:3a:90:36:78:63:30:
         ad:08:21:00:2a:80:8d:69:d2:b3:2f:aa:4f:f9:4d:7b:1a:c6:
         a0:8e:90:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:18 2026 by rpki-client