Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/9F5C80A8F3EB11EFBAF62455C4F9AE02.roa
File:                     9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (raw, json)
Hash identifier:          INjKAtHT4YuZWArnvT5bdAmB2cAd6K4hrQ+j15TPHmw=
Subject key identifier:   32:E2:EC:C7:1E:88:DE:86:33:57:0E:03:3F:75:23:F0:D2:16:FC:B9
Certificate issuer:       /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Certificate serial:       022D
Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/9F5C80A8F3EB11EFBAF62455C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 04:52:04 +0000
ROA not before:           Fri 31 Jul 2026 04:52:04 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     58604
IP address blocks:        203.167.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
                          rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
        Validity
            Not Before: Jul 31 04:52:04 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6c29f4-21e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fe:a3:86:fd:0e:49:bd:a0:84:a1:d2:3a:e4:
                    78:f1:76:21:b1:ba:3b:5c:4f:0d:22:7a:47:ce:50:
                    c8:01:eb:6f:52:be:dc:3b:2b:27:13:dd:ac:cc:5e:
                    13:75:8c:ab:87:30:12:48:16:68:43:38:8f:3b:db:
                    b8:2b:c9:1c:5c:dc:b6:1c:aa:fc:2b:ec:0d:4e:2e:
                    b5:81:9e:ad:1c:07:22:c5:69:41:fc:3d:2a:0f:c1:
                    22:36:76:6f:2f:82:e0:f9:36:48:67:b1:5e:04:6b:
                    c2:f4:60:2a:0c:15:e0:f2:fd:72:d8:5e:53:6a:11:
                    5e:c2:3b:ee:ee:cd:c5:55:07:ff:60:00:c3:8c:d2:
                    c1:52:7b:16:72:07:ff:f0:33:48:1b:d9:d2:fd:97:
                    13:5e:a2:e8:3e:e9:26:3e:86:d8:c2:a5:62:58:9c:
                    79:47:33:5d:69:a4:4d:b7:5a:99:8d:4d:55:a7:28:
                    4b:e5:cf:6b:83:7a:57:d0:d2:d1:bc:ae:34:fb:8d:
                    12:f2:5b:be:1b:74:51:02:7b:3c:1f:b5:4a:6c:26:
                    83:e6:9d:7d:89:59:b4:ea:84:0c:e1:30:64:d6:8b:
                    b2:68:d3:27:f0:ee:6e:2c:55:13:fd:04:cc:83:07:
                    40:38:cf:08:f8:fd:d4:d3:67:78:7e:ae:2c:08:cc:
                    07:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E2:EC:C7:1E:88:DE:86:33:57:0E:03:3F:75:23:F0:D2:16:FC:B9
            X509v3 Authority Key Identifier:
                keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/9F5C80A8F3EB11EFBAF62455C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.167.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:76:fb:e8:14:b1:5d:e4:7f:a8:22:34:97:9d:3d:55:bc:35:
         ff:69:3b:cf:cb:a8:d1:35:e5:84:61:70:62:ff:70:bb:c6:ee:
         aa:a5:62:ac:83:bc:b2:36:ca:64:06:24:a7:40:5d:d3:06:10:
         70:d2:d7:6d:7a:b5:cc:7f:67:b1:f9:7f:9a:61:c1:ff:3d:48:
         e1:fa:97:fd:ea:9f:cb:2d:43:57:19:a1:08:95:be:f4:4c:0e:
         cf:fe:f6:c0:4a:74:90:94:3e:a1:e7:dc:ec:0d:91:da:f2:93:
         7a:bd:8b:06:71:ce:53:87:ce:01:13:89:06:f7:e0:04:3a:6c:
         f4:b4:a5:62:94:59:72:d1:c5:79:19:00:a9:18:b5:f4:4b:0f:
         41:4a:34:22:84:cb:be:b9:9f:65:fc:14:8b:5f:0a:1a:ef:2c:
         8c:9f:08:5b:f1:00:b3:27:17:d6:26:2f:18:36:89:d8:6b:f0:
         e0:1d:12:a4:de:20:2d:e4:34:3f:0b:51:7f:a7:d1:95:e0:f4:
         16:cd:23:03:6f:7f:c6:54:7b:83:9b:2a:c1:9f:0d:61:64:8d:
         ba:61:97:d1:67:ee:7f:76:c6:f3:88:05:be:1c:9b:a5:18:4f:
         c3:ac:9e:7b:78:84:06:3c:4a:61:61:84:10:5f:54:76:67:68:
         53:34:53:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:05:18 2026 by rpki-client