Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/13C01CC0C4AD11EA9E35F20AC4F9AE02.roa
File:                     13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (raw, json)
Hash identifier:          8I//b0AzFWYSYzNWSzTM6vSlZ6xajjkV6fUUkhc9dRo=
Subject key identifier:   EF:1B:0E:D4:9C:D9:3B:90:C8:38:31:C3:B6:8E:86:09:8F:C7:B1:C8
Certificate issuer:       /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial:       1103
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/13C01CC0C4AD11EA9E35F20AC4F9AE02.roa
Signing time:             Sun 04 Oct 2026 17:34:08 +0000
ROA not before:           Sun 04 Oct 2026 17:34:08 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     9268
IP address blocks:        202.87.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
                          rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 17:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4355 (0x1103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
        Validity
            Not Before: Oct  4 17:34:08 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac28e10-37aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a1:40:e8:c2:af:11:3f:3e:21:cd:52:5e:eb:
                    6f:0e:b7:33:43:34:96:87:38:d2:ee:8d:46:f0:ff:
                    5e:f9:01:0f:31:0b:74:5e:dc:d7:7a:91:7e:36:4b:
                    82:54:9b:bc:b9:de:74:0c:38:81:f0:34:61:d3:4d:
                    31:2c:f4:63:84:ef:2e:f2:03:0f:f7:a7:63:86:ad:
                    92:92:5d:81:a7:bf:5c:14:e9:a8:62:a7:89:3a:32:
                    fb:30:89:d6:eb:c9:92:47:34:59:f3:e6:70:1f:84:
                    6d:c7:fc:f8:4c:1e:b1:06:3e:0d:43:8f:a2:17:ef:
                    c9:de:9e:be:89:c5:51:ee:59:b5:35:2f:45:4c:c6:
                    7b:ca:b8:16:cc:0e:f4:7b:e3:6a:d7:a3:10:cc:25:
                    c4:36:81:81:8b:a2:ca:33:f8:de:5b:4f:14:16:c0:
                    56:4e:b7:0d:7d:16:73:3c:3d:ff:f8:35:87:3b:56:
                    55:34:7e:ce:f3:53:65:b2:52:b0:a5:e8:2b:cf:ff:
                    63:ba:5c:84:7e:d3:13:08:f7:25:05:b5:bc:04:eb:
                    19:b7:e3:9b:ba:a6:49:5b:13:51:d0:94:3c:3b:a1:
                    39:c8:9c:07:89:53:de:29:be:d0:7b:80:c2:63:94:
                    98:59:ab:47:17:11:31:f2:e9:43:2d:24:f3:18:93:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1B:0E:D4:9C:D9:3B:90:C8:38:31:C3:B6:8E:86:09:8F:C7:B1:C8
            X509v3 Authority Key Identifier:
                keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/13C01CC0C4AD11EA9E35F20AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.87.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:f5:b6:03:30:54:4f:0d:46:d5:c5:58:c2:1b:43:bb:ad:
         55:5a:80:7f:01:e8:e6:1d:ad:bb:db:68:91:e7:f3:69:90:ca:
         3c:85:9d:8b:88:2a:25:18:0a:fd:53:f9:28:87:18:e4:fe:fc:
         0d:96:77:d2:9e:bc:41:53:c4:7c:82:31:a3:94:54:bb:c5:fc:
         38:69:c0:e9:82:29:c4:1c:23:c2:e1:4b:9e:12:25:a7:d0:2e:
         d2:a6:1c:bd:ee:64:2f:84:df:c3:0f:ed:93:18:ad:91:0b:6d:
         fc:8a:46:e5:1c:8d:44:31:e0:bf:80:79:84:76:03:b5:3f:c8:
         48:f6:0a:d6:75:43:66:31:a9:8f:e8:1a:2d:9d:b6:30:aa:5c:
         3c:c2:98:9c:ae:ba:37:63:56:eb:fe:4c:7e:0d:fe:0f:1b:82:
         c9:16:2a:92:9c:9f:6b:66:12:6d:15:89:a7:30:db:bb:5c:ad:
         49:26:c8:bd:78:96:6f:d5:7d:de:a2:c1:78:a4:5c:22:68:3b:
         12:58:78:c9:19:68:b6:22:55:59:b2:8b:b1:bc:40:e3:47:ab:
         f1:4b:fe:ee:fd:52:b7:a2:f5:1f:44:73:7f:9f:3f:b8:1b:73:
         7e:33:e5:ff:28:31:96:6f:31:b4:c1:a1:c2:19:7a:da:ba:2e:
         63:1d:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 01:02:23 2026 by rpki-client