Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/E52CB968094711EDA5B20C0AC4F9AE02.roa
File:                     E52CB968094711EDA5B20C0AC4F9AE02.roa (raw, json)
Hash identifier:          db7M70AgTpuzXY8r5zub8r+1SVy083qp/zNafnOjKVc=
Subject key identifier:   B5:4A:CD:E7:CC:BA:72:E0:1E:96:C1:0E:65:DB:D3:87:6B:B9:FE:54
Certificate issuer:       /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6
Certificate serial:       0398
Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/E52CB968094711EDA5B20C0AC4F9AE02.roa
Signing time:             Sat 03 Oct 2026 01:49:02 +0000
ROA not before:           Sat 03 Oct 2026 01:49:02 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     9893
IP address blocks:        203.31.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl
                          rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920 (0x398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91534B8, serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6
        Validity
            Not Before: Oct  3 01:49:02 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac05f0d-d948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2e:7f:1b:9e:74:60:80:b2:4c:e8:38:54:c9:
                    f2:d0:60:fa:b9:05:8a:24:af:fc:d7:3c:b9:e3:dd:
                    99:18:a1:70:16:4a:c1:9d:6b:65:e3:6f:8f:91:33:
                    02:aa:25:78:66:17:f8:06:25:c1:30:5a:fc:f4:f5:
                    a8:10:45:70:d4:2b:09:14:78:47:7d:ef:0c:90:ab:
                    73:81:b4:33:22:05:b1:38:c9:5c:95:39:31:a3:2e:
                    47:31:db:77:60:ac:31:d5:81:83:c3:f8:c2:23:52:
                    33:fb:e2:3a:6c:7e:98:3b:1d:c5:17:08:69:c2:bc:
                    4d:d6:af:14:ad:12:f8:47:6b:74:1d:34:d3:44:0d:
                    8c:2a:da:ef:33:d0:66:0f:32:0d:20:71:1d:f1:d2:
                    f6:40:85:c5:b6:35:2f:5c:b0:71:81:86:d6:3a:1a:
                    5e:4f:a4:c9:98:ac:da:5b:c1:f4:7a:a2:ae:04:c7:
                    f1:ad:5e:3f:c7:64:2e:96:11:3b:d9:a6:17:2c:ae:
                    2c:27:50:45:8e:ff:40:27:93:b9:4e:ad:8f:0a:7a:
                    fc:66:0d:c7:1a:ab:d9:ad:c8:68:74:a1:72:06:cb:
                    80:7f:c0:b1:20:8b:bf:12:fd:0e:73:24:93:ae:56:
                    75:f4:45:4b:51:ed:44:a6:00:e8:45:69:6c:94:e8:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4A:CD:E7:CC:BA:72:E0:1E:96:C1:0E:65:DB:D3:87:6B:B9:FE:54
            X509v3 Authority Key Identifier:
                keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/E52CB968094711EDA5B20C0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.31.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d6:c1:e2:9a:5b:65:de:df:be:2a:94:68:16:a9:75:ab:20:
         f9:fc:0d:40:36:b4:81:ee:c1:59:bd:e1:17:ce:cc:04:8e:ec:
         ca:b1:74:86:08:fc:9b:4d:a3:42:e0:41:d0:58:b7:9d:ef:20:
         c6:b6:1e:34:44:ed:cf:80:18:c4:cd:82:0f:b8:90:c0:2c:19:
         1f:56:eb:13:19:59:90:f5:d5:b1:57:09:a4:b1:3b:be:64:d3:
         43:7b:e8:c0:3d:6d:90:82:5c:bd:f2:79:23:f9:32:39:53:43:
         5b:19:a3:8a:2c:6a:93:33:3a:35:ba:a8:99:61:cd:85:47:26:
         30:42:0c:16:db:41:d3:cd:80:c6:92:f2:bf:4d:85:de:f3:0b:
         cd:7f:4e:a0:1e:f7:17:01:0d:9b:44:01:ea:8f:3b:db:60:10:
         3a:ed:d2:2c:ed:4e:7a:04:e3:bd:49:66:94:c7:70:3d:c9:e8:
         e7:af:17:84:02:05:3d:52:54:74:2f:48:f2:64:4d:01:58:eb:
         f6:fd:b0:52:2b:42:d3:53:c6:08:b1:38:b0:a9:5e:13:b5:6b:
         78:84:cd:4b:c2:55:e9:40:f6:ce:ea:0e:4f:97:f7:26:af:4e:
         d4:99:0b:6d:34:c9:ce:14:51:92:80:f0:c2:4a:2c:cb:04:27:
         0d:51:26:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:21:26 2026 by rpki-client