Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/94472FA8459511EDA982510FC4F9AE02.roa
File:                     94472FA8459511EDA982510FC4F9AE02.roa (raw, json)
Hash identifier:          RxHVyw4n78ErQgAbUCM8JxzbLbgG3ZurAFK264LflG0=
Subject key identifier:   A5:D7:93:78:EE:05:D8:4C:D3:85:68:9A:48:A1:15:6C:33:20:76:D4
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       380F
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/94472FA8459511EDA982510FC4F9AE02.roa
Signing time:             Thu 08 Oct 2026 15:14:20 +0000
ROA not before:           Thu 08 Oct 2026 15:14:20 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     133847
IP address blocks:        175.29.96.0/21 maxlen: 24
                          175.29.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 14:28:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14351 (0x380f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 15:14:20 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac7b34c-ce76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9c:89:88:6b:46:9f:af:6e:f6:67:50:c9:ca:
                    97:10:be:70:10:8d:87:54:fb:f6:6b:5c:de:37:ef:
                    3f:29:74:3a:70:42:dc:68:ca:71:01:94:e1:14:b9:
                    b2:90:f0:48:4b:04:b7:70:56:ac:ba:9b:19:4f:11:
                    fd:b1:2e:31:29:f8:e9:2b:ab:b1:ae:d5:6a:22:c3:
                    4c:f8:78:58:fa:7f:37:dc:ee:32:8b:f7:68:86:5a:
                    f4:ec:c8:7b:d2:da:f3:20:aa:0b:cd:2b:61:e1:10:
                    d2:89:71:10:0e:ab:d3:82:e2:53:da:4e:18:ac:00:
                    9e:fe:ff:99:3c:99:c6:70:32:1d:b2:30:2c:78:a7:
                    d0:74:84:40:6d:c9:bd:5b:88:6d:38:24:4a:a5:45:
                    7d:8b:43:65:1d:50:59:a7:e9:0f:b6:69:4c:e6:04:
                    47:7d:82:2c:cd:74:94:47:e0:19:20:d2:63:81:75:
                    0c:1a:a0:6c:68:f8:d3:7e:dc:6e:a0:0d:f0:d2:70:
                    01:d4:56:5b:e5:b5:9e:49:98:ec:dd:63:e6:48:7d:
                    4e:78:c5:42:07:0a:7b:d2:7c:71:fe:56:d4:c2:0d:
                    e2:e1:c4:4f:b9:af:34:e7:73:16:9b:d6:52:fa:b9:
                    83:fd:87:97:92:d3:64:b7:58:80:ed:23:fb:9f:14:
                    f6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D7:93:78:EE:05:D8:4C:D3:85:68:9A:48:A1:15:6C:33:20:76:D4
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/94472FA8459511EDA982510FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.96.0/21
                  175.29.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b2:eb:32:d5:51:c0:38:60:dd:a7:a4:6a:2b:49:6e:75:f9:9c:
         e1:f1:ef:8b:9b:db:04:79:08:e5:d7:c9:60:c5:c3:83:10:5d:
         d4:5c:7f:96:63:dd:40:f5:73:37:bc:b8:5c:af:f6:53:0d:bc:
         ce:c3:83:46:12:74:b7:ef:10:1b:3e:a8:6d:d8:5e:a4:06:6e:
         6c:13:67:91:81:3b:2f:cc:3a:17:01:1e:e5:51:31:f5:4a:8d:
         95:ce:90:b0:79:ab:5b:66:ea:35:12:32:65:f8:2f:ab:50:03:
         7c:aa:73:85:13:8a:22:b6:f0:fc:c4:14:bb:e4:96:07:6d:89:
         b1:3d:f7:c8:12:87:34:6c:76:ac:92:92:a4:18:a2:5c:23:ac:
         dd:bb:2d:79:9b:ac:1e:e1:da:91:a2:8a:8d:e2:a0:8e:a6:56:
         20:b7:e2:a7:5a:f0:21:fe:6e:f4:cf:e4:31:9c:09:b6:c9:48:
         db:d1:f5:fa:34:cd:40:69:a1:e8:c5:d3:52:2d:e5:89:25:84:
         b0:bf:60:75:4b:57:87:c7:0f:a9:3e:5b:4e:19:a8:f3:17:f0:
         a7:a4:8a:5b:b3:b2:f5:f7:17:e3:91:5e:bb:0e:38:71:a8:c7:
         9f:76:fc:58:64:76:02:6d:17:30:94:be:04:6c:b9:5d:83:3b:
         f7:52:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:53:08 2026 by rpki-client