Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/30BF32F2C28C11EAB764BF4CC4F9AE02.roa
File:                     30BF32F2C28C11EAB764BF4CC4F9AE02.roa (raw, json)
Hash identifier:          COSKtsw7w8tWYf+/zpXk7I6WrBczvixFA9Copj0zpjk=
Subject key identifier:   BC:57:C0:C3:51:79:74:54:B5:32:54:06:16:DE:B4:3F:F7:4C:51:B5
Certificate issuer:       /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial:       1101
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/30BF32F2C28C11EAB764BF4CC4F9AE02.roa
Signing time:             Sun 04 Oct 2026 17:34:03 +0000
ROA not before:           Sun 04 Oct 2026 17:34:03 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     140702
IP address blocks:        202.87.4.0/22 maxlen: 24
                          203.57.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
                          rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4353 (0x1101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
        Validity
            Not Before: Oct  4 17:34:03 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac28e0b-af00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ff:ef:d4:4a:2e:a4:f9:e7:93:9a:6e:57:30:
                    70:f9:84:88:b4:89:35:d1:d8:6e:f9:7d:4a:69:b0:
                    78:f2:7f:4c:aa:46:0d:e5:36:15:65:ee:2c:da:e9:
                    29:66:36:fe:ea:2d:7b:e4:2f:31:82:ca:28:ab:09:
                    fe:9d:be:80:7b:f3:3b:7f:12:53:18:9e:2a:86:87:
                    1f:1f:46:61:a5:f8:65:71:51:68:a9:8b:ce:be:03:
                    f0:8f:b2:45:64:6e:77:79:96:ce:68:8b:1b:17:ff:
                    cc:11:ad:ce:e2:58:3b:04:e6:67:ea:76:f3:52:1d:
                    6e:75:1d:9a:57:f2:3c:52:6d:31:70:d3:df:3a:52:
                    c8:47:3e:4a:3f:0d:69:3b:cd:1d:14:81:d5:ba:6e:
                    f7:7d:04:68:a3:c9:03:2e:60:0c:bf:33:d9:84:b1:
                    ff:bf:35:a1:36:44:72:8d:87:21:6a:4f:b7:87:d4:
                    54:67:ca:83:6e:66:c4:aa:47:fe:be:5d:69:91:db:
                    cd:9f:72:6c:f2:03:d7:71:b6:9f:45:7e:0f:2c:52:
                    41:68:e2:2e:ab:70:23:85:9c:bf:a2:0f:84:0f:f0:
                    b9:b0:c1:82:f3:51:c3:47:95:e7:c6:e2:9e:7b:2f:
                    60:a7:45:b9:56:f1:f0:78:81:db:82:24:86:7b:a1:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:57:C0:C3:51:79:74:54:B5:32:54:06:16:DE:B4:3F:F7:4C:51:B5
            X509v3 Authority Key Identifier:
                keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/30BF32F2C28C11EAB764BF4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.87.4.0/22
                  203.57.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:5d:04:56:03:55:71:3b:93:71:f4:6b:5a:99:c7:a3:26:a1:
         b8:64:ca:ba:06:66:26:09:d1:15:5c:d5:bd:c3:63:be:bd:7f:
         08:5a:df:96:f2:e2:2c:b8:2a:c7:bd:b6:fd:ed:91:50:98:68:
         04:37:9e:ce:3c:de:77:fc:08:27:01:af:c2:54:57:1c:f9:88:
         e0:29:1c:b2:26:d0:b9:db:1f:b1:ed:92:e2:d7:bd:0e:2a:97:
         a9:fa:ab:00:5d:22:15:51:4e:49:4a:08:0c:c9:48:dc:95:44:
         0c:6d:fd:c0:62:ed:83:d7:bc:69:0e:66:2e:67:e3:69:ed:12:
         ac:24:8c:7a:4c:4a:1e:ef:16:e1:5a:b0:b5:7a:bb:d1:7b:44:
         d9:0e:b7:23:5d:c2:f6:a1:90:76:be:0e:00:1b:9c:d1:23:c6:
         00:ca:28:69:05:89:44:17:2d:df:cf:e5:42:16:51:81:a1:76:
         55:b5:29:d1:d4:01:15:e2:78:5b:6a:6e:dc:66:3a:7a:c4:30:
         23:b1:0d:7e:f6:86:cd:8f:04:50:69:f9:9b:02:69:ca:11:ba:
         89:92:50:3b:eb:ce:91:a0:45:06:54:43:90:d8:8d:d7:46:ba:
         42:e5:12:38:a3:22:bc:b7:8f:3a:a0:8d:6b:ec:8c:a1:ba:57:
         da:21:87:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:41:21 2026 by rpki-client