Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/532313EE89FB11F1A2C97EB45E11F970.roa
File:                     532313EE89FB11F1A2C97EB45E11F970.roa (raw, json)
Hash identifier:          ONFD8eO0BeKQA05+Fmoa39A39KmAUsRQvy6sAW3EDUA=
Subject key identifier:   AE:0D:22:AB:75:62:DF:8E:E0:F5:D4:70:EF:40:19:AC:CD:5E:7D:5B
Certificate issuer:       /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF
Certificate serial:       357B
Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/532313EE89FB11F1A2C97EB45E11F970.roa
Signing time:             Wed 29 Jul 2026 22:19:58 +0000
ROA not before:           Wed 29 Jul 2026 22:19:58 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     23838
IP address blocks:        202.14.100.0/24 maxlen: 24
                          202.36.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl
                          rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Aug 2026 14:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13691 (0x357b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF
        Validity
            Not Before: Jul 29 22:19:58 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a6a7c8e-b31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:89:06:b5:2f:58:11:10:54:c6:13:b5:65:d3:
                    12:e6:36:a9:bd:a2:34:19:80:96:90:90:41:8d:e2:
                    05:de:7b:aa:60:2e:97:50:f7:62:7d:5a:16:91:35:
                    3c:bf:4e:16:18:ed:45:9a:68:7d:74:9d:7f:be:5e:
                    42:5a:c7:47:dc:33:b5:3a:28:65:cb:db:d3:ea:c3:
                    5b:91:82:64:e6:10:42:2c:a6:6a:d4:40:a9:3f:cf:
                    6e:8e:a1:a8:e8:18:af:b1:fd:7d:33:da:2e:a8:2a:
                    3f:17:7a:b6:93:1c:42:37:b2:2a:7f:46:a6:30:db:
                    83:d8:97:4b:72:7e:05:d6:a5:a1:01:73:68:2d:db:
                    98:3b:67:5f:03:4e:19:c6:77:db:f5:3e:a9:24:08:
                    1f:97:15:4f:35:6d:69:c7:d6:de:50:5b:ad:b3:08:
                    2a:5a:1d:bf:03:be:4c:8e:dc:c7:60:e8:22:73:81:
                    84:fe:0d:33:31:f4:b0:e5:be:21:71:1e:67:5f:1d:
                    7c:58:b5:0b:a5:24:9b:37:99:af:80:9f:23:30:ea:
                    af:b8:f7:d3:83:0e:62:f3:af:c5:3a:40:a8:0f:31:
                    a3:ae:fb:97:b5:66:c2:99:55:88:54:d6:f9:59:6f:
                    8d:4e:b3:df:bd:3e:72:9f:62:49:6f:ac:e5:05:19:
                    1b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0D:22:AB:75:62:DF:8E:E0:F5:D4:70:EF:40:19:AC:CD:5E:7D:5B
            X509v3 Authority Key Identifier:
                keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/532313EE89FB11F1A2C97EB45E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.14.100.0/24
                  202.36.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:68:f2:c1:cb:31:8d:ad:eb:02:02:c9:de:50:88:0e:05:c6:
         fc:91:10:31:c3:06:9a:3d:00:75:e1:69:ea:df:97:e5:10:80:
         de:43:c3:af:3b:73:b8:97:6f:84:ec:de:21:51:a7:fc:31:73:
         6f:ef:f0:ae:3e:1c:ce:c3:17:1e:62:1a:34:23:83:63:03:22:
         fb:33:1e:42:8b:95:9e:2d:c3:76:53:d3:66:16:e4:3f:5d:f2:
         9f:86:d0:03:fa:b4:b3:0b:54:19:f1:c8:3c:ab:fe:af:48:90:
         33:b5:83:27:10:90:91:ad:79:4e:b3:cc:d9:92:1d:13:db:f6:
         f2:d4:16:32:45:4f:7c:8c:01:3d:7a:dc:74:33:49:30:d8:24:
         b7:14:91:14:49:74:79:f3:eb:10:e3:05:5e:4a:15:04:42:11:
         f1:28:10:aa:8e:44:61:65:c1:cf:7d:13:01:38:14:d1:a8:18:
         e8:b1:2a:86:79:e4:87:b8:9f:2e:5d:1b:6e:78:1f:67:13:19:
         df:d1:55:ac:4f:83:a0:0d:3f:4d:34:c1:56:e6:db:7a:c4:9e:
         02:28:fe:5f:74:46:22:05:90:72:ab:7b:1e:1b:0b:55:77:45:
         d4:56:93:b7:19:9d:e1:7e:76:2a:43:ae:fd:58:a1:e1:2e:b0:
         a5:df:87:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 20:01:21 2026 by rpki-client