Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/E6B3F23C041E11EA8A736F7EC4F9AE02.roa
File:                     E6B3F23C041E11EA8A736F7EC4F9AE02.roa (raw, json)
Hash identifier:          fTuJUUVzD+d0d26Lncx62w7FdBUAf3cVQ68FCHXRUbk=
Subject key identifier:   26:DC:2D:B2:6B:BE:9C:4E:CC:41:54:4D:A5:E0:43:A4:82:D0:8B:D8
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       1445
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/E6B3F23C041E11EA8A736F7EC4F9AE02.roa
Signing time:             Thu 06 Aug 2026 17:33:48 +0000
ROA not before:           Thu 06 Aug 2026 17:33:48 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     19551
IP address blocks:        122.11.196.0/24 maxlen: 24
                          203.117.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 17:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5189 (0x1445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Aug  6 17:33:48 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a74c57c-72ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:d3:fd:7d:ea:37:fb:b4:49:e5:7e:c0:81:
                    4b:01:14:7c:c9:e0:f5:64:39:d5:87:e6:aa:2d:d8:
                    27:88:4d:90:8b:99:f7:2f:16:a4:32:fa:01:22:9c:
                    ed:68:c9:ff:ab:ca:93:3d:d5:0f:d1:20:88:7b:4a:
                    ae:3f:5c:79:00:a3:b9:43:bd:91:36:82:0c:ec:38:
                    53:e5:8e:b2:c4:f9:a4:7f:27:86:50:54:16:00:d7:
                    38:76:cc:c1:f6:28:91:35:f1:c0:bb:73:65:79:4a:
                    a5:2e:ff:33:3f:6e:52:d7:d0:0a:26:d1:4d:45:d5:
                    0d:92:13:a4:8c:99:61:0d:2c:c3:a9:a9:f4:cf:43:
                    3d:89:b9:7f:0d:50:fb:73:ff:42:d4:6b:21:d6:60:
                    a8:8d:bc:6b:ed:4c:3d:fc:59:61:8f:fd:41:73:38:
                    f9:d1:96:a4:43:54:47:eb:42:d0:80:1a:af:4e:15:
                    b5:1d:a6:65:67:87:76:db:c8:0b:3d:36:75:d3:30:
                    8e:0d:ae:15:16:4d:d4:69:69:11:f0:7c:b6:7c:59:
                    89:22:9e:00:ae:9b:dc:63:b2:7f:5f:a5:73:4b:77:
                    ee:3c:90:08:4a:1c:d3:f1:27:6f:b1:b1:a0:9e:19:
                    05:5e:6f:8d:3c:3d:bf:b9:b3:6e:7e:25:a6:9d:b4:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DC:2D:B2:6B:BE:9C:4E:CC:41:54:4D:A5:E0:43:A4:82:D0:8B:D8
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/E6B3F23C041E11EA8A736F7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.11.196.0/24
                  203.117.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:55:25:89:0c:44:ab:12:80:25:a3:74:81:dc:6d:5c:ac:64:
         1f:1d:3f:25:35:57:cc:19:c0:2b:ac:04:63:9a:fc:ea:83:2d:
         03:35:6c:87:9e:e9:65:5f:e5:95:f2:08:2e:82:87:ea:6d:7e:
         64:57:a1:38:98:e0:fb:e4:ad:1b:8c:f7:fe:79:2b:c1:be:65:
         75:ab:cc:b3:5a:0b:16:8b:ef:42:05:9f:5a:82:be:cd:92:67:
         a5:02:f3:83:2f:09:80:45:19:d3:aa:fb:17:3d:9d:31:75:b5:
         4d:9f:bf:fe:b3:5b:30:47:b0:57:b6:d2:12:8a:e9:91:ec:a3:
         a6:ae:49:53:52:4b:dc:ab:49:a3:ed:72:ab:e6:c4:bd:be:8b:
         c4:3f:84:39:6a:5a:43:2c:c9:1b:a7:20:63:19:58:68:c2:37:
         75:3b:5c:df:8f:3c:ce:10:9c:4e:3d:c8:16:fe:b4:5b:6c:0e:
         dc:b9:d8:d3:b8:17:bf:88:60:ce:5b:e7:cc:e4:bd:21:ca:04:
         f0:95:bc:91:38:20:bf:8a:dd:df:7f:53:e1:f3:cd:40:ce:57:
         be:18:a0:3a:e0:42:1f:c3:13:35:11:e8:b1:c3:34:cf:8a:2c:
         b1:16:3c:fc:ef:bc:ad:1b:11:e8:ca:6a:a3:5f:19:c0:6a:fe:
         e1:25:28:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:03:35 2026 by rpki-client