Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4D21FB36F7DB11EE92D1E11FC4F9AE02.roa
File:                     4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (raw, json)
Hash identifier:          lhXPMVTt2UFIZj0lCq6prRReMQPmTP0Uw35+7SMlNXg=
Subject key identifier:   70:EB:B3:61:F2:97:A5:35:18:BA:36:56:46:B2:00:AB:35:D1:7C:0F
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       36F5
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4D21FB36F7DB11EE92D1E11FC4F9AE02.roa
Signing time:             Thu 30 Jul 2026 15:10:58 +0000
ROA not before:           Thu 30 Jul 2026 15:10:58 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     17460
IP address blocks:        203.155.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 14:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14069 (0x36f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 30 15:10:58 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6b6981-f42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0f:47:87:47:95:ee:81:cb:16:50:fb:8e:46:
                    5e:a4:46:13:f8:c5:2d:89:f9:bb:ce:ea:8e:5f:dc:
                    64:7d:f9:28:4f:2b:94:3a:d4:b8:24:1f:90:fa:68:
                    84:b5:1b:90:ec:74:22:29:54:bc:16:19:6e:fa:f8:
                    73:77:ba:77:39:09:3c:cd:f7:22:e9:7e:78:1e:49:
                    8e:5c:4f:8e:50:15:99:a2:2b:c7:e7:f5:36:9d:12:
                    bc:67:04:cc:43:8c:c2:2b:51:e8:c7:de:59:d1:43:
                    a8:9d:c3:45:8c:f2:92:51:c6:73:ab:7e:13:ac:54:
                    b7:72:7e:6b:a0:b0:62:12:8e:f7:fc:60:ee:6c:7e:
                    21:c7:f4:5b:42:22:da:e1:f2:fc:6c:b4:47:a3:f8:
                    85:00:00:b5:50:6e:0a:c0:f3:0b:87:73:9f:59:99:
                    67:7a:4e:67:a4:48:2a:9f:4e:0a:f8:52:b8:ea:1a:
                    2c:65:f7:4e:29:26:05:ad:c7:ab:de:d6:e0:cc:37:
                    8c:d5:04:48:2c:dc:9c:2b:a0:37:ec:8a:6a:b3:20:
                    c1:89:59:6c:9f:9f:87:56:f3:f6:f5:57:97:65:d2:
                    34:41:5f:2e:af:36:53:08:93:dd:df:d8:b8:72:8d:
                    48:75:73:99:af:0e:c6:ea:6a:f5:03:82:c3:a3:e3:
                    fe:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EB:B3:61:F2:97:A5:35:18:BA:36:56:46:B2:00:AB:35:D1:7C:0F
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4D21FB36F7DB11EE92D1E11FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.155.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:f6:fc:9e:69:e1:61:0a:75:63:ae:78:04:aa:39:60:7e:fc:
         31:23:2d:8b:54:11:89:2f:d2:55:55:4b:71:bc:98:ea:7a:5b:
         9d:03:78:b7:3b:51:39:9a:cd:f7:14:36:d9:ce:a6:1b:7e:1f:
         91:2a:09:ea:c4:4f:58:ef:97:4f:8f:90:89:d2:f3:d0:18:d2:
         9a:b9:f8:be:9f:fe:8c:7c:84:31:34:2a:58:d7:14:1f:48:da:
         36:1b:c8:2a:14:f5:87:f9:a5:71:11:22:04:08:0d:55:2e:fb:
         fc:f3:de:be:10:5e:01:58:0b:fb:df:ee:e2:00:5d:05:62:07:
         34:ed:d8:57:c1:09:1d:a0:1f:fc:b2:44:da:e9:3e:21:15:e3:
         df:44:f8:45:84:ca:c2:08:04:66:2d:c0:38:75:96:bf:07:2c:
         c2:06:71:0f:00:04:19:7b:7f:eb:93:33:4e:4b:43:fb:61:87:
         fb:ac:f5:c4:39:da:d6:02:61:d1:c5:ad:ad:40:de:e4:be:ea:
         72:4d:8e:49:80:34:5b:36:57:87:bb:99:6e:be:65:c5:e3:9b:
         03:71:88:bb:8a:08:43:2d:ec:89:6b:94:d4:5f:63:b9:e7:76:
         43:e2:ca:bc:01:1c:60:20:2d:46:a5:bc:64:da:d2:c9:71:b1:
         3b:07:54:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 19:50:04 2026 by rpki-client