Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/809F6BF2990511F090DACC2BC4F9AE02.roa
File:                     809F6BF2990511F090DACC2BC4F9AE02.roa (raw, json)
Hash identifier:          dTCIQcLCYXCa30pxQ1kVnAjtsJIkL6oIokaDdFxV06s=
Subject key identifier:   91:3C:4E:F8:85:07:84:97:56:60:A3:50:BA:5E:EA:65:C4:C1:0D:90
Certificate issuer:       /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
Certificate serial:       019F
Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/809F6BF2990511F090DACC2BC4F9AE02.roa
Signing time:             Tue 15 Sep 2026 04:54:08 +0000
ROA not before:           Tue 15 Sep 2026 04:54:08 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     58414
IP address blocks:        202.135.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl
                          rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917336A, serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
        Validity
            Not Before: Sep 15 04:54:08 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa8cf70-4a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:4b:76:49:2f:4b:65:03:eb:a8:fc:b0:96:
                    b4:4d:29:4a:dc:3c:4c:95:b7:fe:c7:97:ac:3c:f3:
                    9a:8d:e4:ef:4d:d1:c4:08:57:f3:d2:84:26:7e:4a:
                    48:ef:71:b5:2f:44:7e:ad:88:cc:90:04:1e:d8:36:
                    b1:8f:78:61:31:dc:e6:20:f7:e0:45:f6:b6:03:97:
                    1d:2a:7b:37:6a:1d:1f:7c:32:83:70:dc:5d:84:23:
                    d9:ad:c4:ef:1c:c7:85:51:49:db:f1:ec:b6:91:fa:
                    ed:27:37:f5:74:ab:c0:94:a1:ed:6c:90:17:45:5e:
                    30:90:d6:27:85:2b:94:1c:57:15:73:79:51:85:1e:
                    c9:40:5d:fe:95:4f:4e:77:a7:21:18:34:4a:2b:99:
                    b1:ef:10:4f:19:14:52:90:5e:7b:f4:5e:b7:5f:cc:
                    ab:9a:c1:da:04:b9:ed:de:28:91:fa:85:0e:ca:e5:
                    be:1b:5a:d8:2c:c5:b7:0f:75:b1:b1:50:07:89:a4:
                    d9:93:aa:db:01:a3:b9:47:81:13:e6:20:da:50:ec:
                    da:ac:fc:95:46:84:43:54:23:46:01:65:cc:b1:2a:
                    67:28:75:0b:27:4c:3d:34:f3:ff:20:5c:87:a0:44:
                    fb:52:2a:e3:3c:e1:65:55:8e:b1:07:dd:39:33:1b:
                    92:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3C:4E:F8:85:07:84:97:56:60:A3:50:BA:5E:EA:65:C4:C1:0D:90
            X509v3 Authority Key Identifier:
                keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/809F6BF2990511F090DACC2BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.135.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:4a:c0:ba:15:fc:1f:15:d9:7a:6b:39:1c:83:5e:6e:43:48:
         db:d7:b3:85:ac:4f:67:96:7b:f4:66:2d:44:27:19:3f:30:2e:
         8b:6c:d2:e8:b9:f6:07:76:0e:0c:81:20:d4:e2:b3:1d:15:6b:
         b2:f9:ed:2b:ac:b4:45:3d:2b:8d:2a:3b:a6:5b:b3:40:c6:aa:
         9c:c6:ee:c2:4a:ea:18:f9:34:18:45:33:df:77:43:a4:ed:0d:
         98:1b:93:61:f8:26:d8:c8:2b:4f:e8:e9:1c:94:6e:9e:1b:18:
         bc:7d:84:75:93:ad:d6:c6:10:34:f4:1a:d3:8f:e9:95:13:f8:
         72:1e:eb:99:60:fb:15:15:50:95:19:eb:c2:de:ed:21:76:5c:
         7b:cc:53:27:f3:43:2b:2b:3c:12:3e:9b:b6:96:a0:ab:47:38:
         e8:23:28:c3:7a:11:4f:ba:bc:2f:f6:46:ae:85:a4:d4:55:65:
         ee:03:14:76:df:61:3e:8f:93:fb:b8:bf:54:ef:f4:1c:6e:15:
         a5:2e:b8:65:2e:8f:1a:db:32:36:ff:f3:57:6e:44:b9:ce:cc:
         fd:70:0f:54:4b:3d:50:23:82:05:ed:be:09:85:96:fa:54:94:
         97:08:d5:d6:95:b9:c8:36:55:00:3b:b1:bf:1c:b9:b0:3b:2f:
         64:ed:ef:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:16:59 2026 by rpki-client