Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/9D181A24D78211EC944E227FC4F9AE02.roa
File:                     9D181A24D78211EC944E227FC4F9AE02.roa (raw, json)
Hash identifier:          RN+ztLDxLS8jprXkgs1yMuc14oBqnxP+Eh6+ydzz5K0=
Subject key identifier:   EA:1F:38:D2:81:D1:2E:E5:B0:17:B6:BF:51:75:11:92:78:F3:73:51
Certificate issuer:       /CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
Certificate serial:       07AB
Authority key identifier: AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/9D181A24D78211EC944E227FC4F9AE02.roa
Signing time:             Wed 12 Aug 2026 21:42:24 +0000
ROA not before:           Wed 12 Aug 2026 21:42:24 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     8576
IP address blocks:        202.89.20.0/23 maxlen: 23
                          202.89.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl
                          rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 21:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1963 (0x7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C07D, serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
        Validity
            Not Before: Aug 12 21:42:24 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a7ce8c0-4484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:67:ad:ad:e6:a1:20:dd:47:3a:c0:75:e7:
                    54:ce:7d:ca:81:68:65:16:cd:d0:18:d3:d4:64:f0:
                    a8:fa:f9:f0:bc:0b:5d:90:4f:64:45:72:84:07:0c:
                    94:d3:fd:75:cc:8a:bc:99:ee:63:ea:e8:d8:c8:f3:
                    ca:a6:61:20:96:e2:cc:fd:4c:4b:c0:9d:3b:1a:f6:
                    21:2f:2b:7f:0b:1d:92:1c:60:88:2e:28:c6:67:21:
                    08:91:6c:b2:e2:d8:53:4f:24:c9:80:0e:2f:84:57:
                    6b:5b:31:ef:11:21:cf:fc:6d:f5:7c:03:18:e1:47:
                    f7:d7:02:61:d4:58:94:00:cc:8b:24:09:5d:0b:1f:
                    bb:f0:c7:1a:d0:23:63:d3:9f:46:ff:59:16:28:59:
                    78:eb:0d:3c:b8:1d:7e:90:f1:2b:73:8c:e4:92:39:
                    d2:de:eb:5c:2a:85:3a:d3:fb:98:59:fe:79:dd:60:
                    6d:55:82:70:a4:ab:18:bb:91:30:01:b8:c2:28:06:
                    90:b5:a4:ab:b5:de:52:be:f7:af:59:3f:cf:7f:9a:
                    2c:ca:15:b4:e0:de:97:50:a9:e5:0d:db:10:1f:82:
                    bc:4c:06:8f:f4:89:97:13:d1:e9:e0:61:c8:16:a1:
                    ba:3d:13:ce:82:83:19:13:8e:db:49:a1:29:94:48:
                    94:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1F:38:D2:81:D1:2E:E5:B0:17:B6:BF:51:75:11:92:78:F3:73:51
            X509v3 Authority Key Identifier:
                keyid:AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/9D181A24D78211EC944E227FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.89.20.0/23
                  202.89.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:f8:56:be:6f:a9:a2:10:28:4b:6d:b6:c5:f9:55:96:04:01:
         9d:e4:20:fa:63:85:ec:f7:db:6f:1a:77:a1:91:0a:e4:45:86:
         0a:88:fa:06:09:46:4d:3a:cf:45:f7:f1:ba:b4:91:04:8e:bf:
         6e:b5:98:2f:b7:50:1b:1f:96:c2:1e:c1:39:af:8a:17:9e:8f:
         3d:a5:18:0c:98:4c:bb:69:78:b1:2b:ed:80:2c:f8:ae:89:02:
         a2:9d:0f:bf:e9:ff:a3:34:33:a1:7e:a4:96:b6:b9:c3:8f:40:
         56:eb:9c:3d:b7:cb:28:e6:20:2a:a4:cd:8e:f8:f5:f7:98:23:
         5d:58:83:96:2d:1c:16:17:00:69:9f:71:b3:89:0c:a8:5d:9e:
         1c:0e:26:85:43:3d:05:89:17:90:fb:ec:30:33:16:c9:6c:db:
         b4:70:00:26:9d:69:e0:83:39:3e:ea:32:a6:09:75:13:37:b6:
         8e:ef:ed:fb:73:9f:4d:66:e6:f5:34:7b:79:53:34:85:7d:71:
         6c:17:98:f9:69:68:ee:1d:39:34:d1:9d:9d:3b:de:7a:08:f5:
         ba:93:a8:e5:cb:2b:75:b0:65:32:53:82:ac:54:03:f9:41:d4:
         cf:be:d4:87:bf:26:36:ae:0f:45:e9:f9:1d:6c:27:a5:7e:9e:
         76:a8:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:39 2026 by rpki-client