Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/D9B1050C794711F18C3268FE77A30FBC.roa
File:                     D9B1050C794711F18C3268FE77A30FBC.roa (raw, json)
Hash identifier:          0RgAFc5e34gabTf/i//XHUuPDn8pg9DfrMbK62Y40pA=
Subject key identifier:   64:1C:AD:01:B9:A1:EF:7D:AA:72:93:74:6E:C8:A4:69:22:89:C3:A4
Certificate issuer:       /CN=A9190F97/serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64
Certificate serial:       07
Authority key identifier: CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/D9B1050C794711F18C3268FE77A30FBC.roa
Signing time:             Mon 06 Jul 2026 14:34:53 +0000
ROA not before:           Mon 06 Jul 2026 14:34:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     46606
IP address blocks:        116.206.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 10:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190F97, serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64
        Validity
            Not Before: Jul  6 14:34:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bbd0d-6548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:52:21:55:b8:97:98:2f:1a:ef:82:6d:0b:f0:
                    4e:47:7b:02:9c:bb:d2:0c:9c:d7:6a:2d:20:93:fb:
                    3e:01:7c:a8:f1:a4:f1:d2:ec:2f:58:c0:0a:d9:2b:
                    e9:a4:be:bb:ef:47:ae:9f:8c:01:a7:0a:01:b8:c2:
                    62:26:80:6e:3d:a5:6d:28:2d:10:d0:e8:5d:7f:8a:
                    3f:ee:15:27:90:e0:0b:a4:28:c7:84:fd:d3:24:51:
                    32:25:e9:65:f5:ab:5a:a2:6f:f9:28:7a:56:4b:7f:
                    fb:d0:61:28:f4:df:e2:bf:50:ea:38:4d:f7:a9:dd:
                    b1:31:e6:1b:a7:69:81:e0:2e:97:b1:93:47:28:19:
                    59:ce:27:9d:15:3e:d4:b5:5a:c1:af:0b:74:18:c6:
                    b4:e1:a3:bc:b9:69:f6:e4:d1:d2:df:5a:83:fb:70:
                    44:37:26:a1:41:48:20:01:98:3e:d4:ca:07:62:b4:
                    dc:cd:84:41:68:30:10:f2:2c:7b:2d:bb:8b:7c:74:
                    ea:ac:f0:f1:3e:39:62:68:05:60:5a:1a:f5:86:e7:
                    48:a2:fc:13:b6:3b:cf:d7:76:77:6e:b0:33:c0:20:
                    c5:40:b0:ee:89:13:7c:40:3f:3b:ee:5a:1a:86:cc:
                    cc:2f:5b:aa:d4:ef:dc:bc:e4:1c:07:bb:1b:34:21:
                    15:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1C:AD:01:B9:A1:EF:7D:AA:72:93:74:6E:C8:A4:69:22:89:C3:A4
            X509v3 Authority Key Identifier:
                keyid:CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/D9B1050C794711F18C3268FE77A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:c3:20:26:e8:a2:e2:0e:3e:62:15:93:72:61:9d:18:6f:be:
         90:5a:49:cb:71:5f:4f:9b:4c:dc:9d:dc:e0:e2:4c:c8:28:41:
         03:3a:c5:b6:7d:94:dd:56:29:d9:59:54:69:ea:66:0d:a0:2d:
         ea:5f:85:31:8a:40:e7:fd:2d:12:1f:19:32:e8:60:9c:78:b1:
         62:0a:10:e4:a2:a5:b4:78:ba:52:e7:9a:60:c1:af:a7:86:22:
         f1:3e:85:28:65:78:13:92:8c:b7:db:af:9a:61:c6:c7:f2:9d:
         7f:eb:c8:7b:34:d8:24:a1:6f:6b:46:4a:56:a1:43:27:6c:9a:
         c8:13:0b:04:8a:dd:90:c9:19:f3:f2:0e:ee:ef:d6:72:32:1f:
         4a:76:e6:7a:1b:79:39:0b:be:e5:bc:af:e4:03:71:e0:07:73:
         93:e7:fa:e1:25:00:3a:15:d2:64:e4:45:70:3c:3a:02:31:c6:
         56:f7:50:ac:2a:fd:00:dc:ed:71:52:2f:dc:4b:05:36:d7:2f:
         95:c3:f0:ef:e0:c8:2e:02:81:81:a2:59:6b:4e:3b:81:71:9b:
         d0:4b:bd:d0:dd:46:cd:70:a3:a9:eb:7b:a4:2d:b3:8c:50:50:
         67:c3:93:e6:b6:63:1d:70:25:fb:df:1d:70:98:3d:a1:2a:75:
         3e:67:0f:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 13 05:39:21 2026 by rpki-client