Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa
File:                     3ED710C68DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          /PpSkevkJJNsZbB8blKJDWOGqEQN21XKZVSsyGPH4sM=
Subject key identifier:   97:4D:EC:07:63:38:3B:98:F1:82:84:8F:75:93:74:3D:F5:4E:8D:CD
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       36EC
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Thu 30 Jul 2026 15:10:40 +0000
ROA not before:           Thu 30 Jul 2026 15:10:40 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     133376
IP address blocks:        203.209.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 14:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14060 (0x36ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 30 15:10:40 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6b6970-6667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ea:5d:85:fe:2b:6b:29:47:05:59:3a:21:c5:
                    53:c5:93:e6:e9:e4:a4:7c:78:bd:04:e1:8a:96:06:
                    3d:24:0d:7d:0c:0e:2d:64:e9:dc:ad:32:07:a5:c2:
                    62:41:f4:bc:5e:33:94:aa:b7:d3:08:e2:7e:a4:ba:
                    45:59:aa:83:68:74:f6:62:87:15:39:24:1b:6f:e8:
                    31:d3:c8:33:25:60:65:48:54:b7:73:ad:1c:26:27:
                    84:92:1a:a0:d9:62:4d:1e:fc:56:be:ac:37:67:8c:
                    e2:6c:a9:31:d8:4a:5f:4b:7f:81:49:7a:ce:42:8e:
                    30:80:53:d5:3f:1e:f6:9e:93:6e:68:16:32:0e:ea:
                    7d:dd:37:c1:6d:90:90:4e:e7:00:56:26:1e:52:00:
                    6b:c9:5b:7d:32:38:d0:a2:c8:f8:83:6b:6f:5c:69:
                    53:41:60:55:ac:76:6b:e2:f7:37:e3:e4:8a:b8:fc:
                    4d:9c:db:c5:78:61:22:a0:2d:d1:89:08:83:4b:36:
                    2b:23:7d:bf:ab:cd:a7:a6:d7:3c:e3:66:94:da:e5:
                    96:21:b7:b6:e3:45:2d:22:0b:fd:06:98:5c:a2:42:
                    17:6b:e2:cb:15:48:fd:f6:04:92:ea:b5:e0:25:49:
                    5c:78:16:47:66:63:fe:e8:59:7e:84:e6:d5:99:03:
                    15:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4D:EC:07:63:38:3B:98:F1:82:84:8F:75:93:74:3D:F5:4E:8D:CD
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.209.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:f0:ea:4c:54:32:84:d5:40:71:bb:47:5e:d3:04:ed:5b:62:
         58:75:2c:9d:45:2e:fe:6a:e1:38:a3:16:86:6b:44:50:07:12:
         89:72:cd:53:3f:6d:f9:ea:bb:03:34:78:c3:f5:62:6a:64:b5:
         42:15:a4:f6:69:5d:f7:ce:67:7d:b5:37:d8:61:7b:70:94:37:
         98:90:e7:99:f8:e2:c9:1e:1f:47:e5:1c:3a:e7:98:67:94:a6:
         2a:6f:0c:d7:70:3f:67:09:6a:2c:a1:b9:3d:7b:25:d6:8a:79:
         48:36:04:90:9e:cc:f8:89:d9:56:05:34:7d:34:de:0d:09:f9:
         d9:c2:d1:87:df:f4:82:73:5b:c9:6a:80:f2:b6:06:94:a2:64:
         74:e1:ad:19:c7:a4:2b:10:41:76:3f:9a:fc:fe:8f:e1:02:76:
         c6:38:dd:b9:12:13:d3:08:dd:f6:23:ce:d5:e6:78:c3:68:12:
         45:bc:a3:77:ef:8f:ea:f4:57:9a:25:84:d4:4a:f2:7e:08:e0:
         a8:e0:de:ab:72:0d:fa:20:bf:02:b0:f9:aa:8f:be:1f:92:05:
         b8:1d:57:2f:ba:3c:f0:a7:f6:88:78:78:75:61:4c:3c:82:38:
         e8:ef:ae:6a:91:e7:de:52:31:c4:a2:58:6d:08:63:80:94:d9:
         8e:e1:4d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 19:48:28 2026 by rpki-client