Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9B2794A04CF511EC9FE1E361C4F9AE02.roa
File:                     9B2794A04CF511EC9FE1E361C4F9AE02.roa (raw, json)
Hash identifier:          nymB9N9I+min/jY66pZlRhwI6xBUGlgjI9DFyTkftFc=
Subject key identifier:   E8:23:56:D3:CA:A5:F6:A0:6D:FF:E1:23:2A:EE:78:82:35:C1:14:B2
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F1A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9B2794A04CF511EC9FE1E361C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:36:14 +0000
ROA not before:           Fri 02 Oct 2026 15:36:14 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45902
IP address blocks:        202.4.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28442 (0x6f1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:36:14 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcf6e-7799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c8:91:9f:7b:82:31:e8:73:95:b9:26:93:a8:
                    84:f2:03:37:58:a5:b9:ed:3d:72:a6:2d:05:30:a2:
                    e4:1f:e0:ed:2b:e1:d1:79:c7:70:73:33:67:87:ed:
                    df:7b:5d:d6:57:6f:d1:3e:09:c5:d1:fa:52:86:ed:
                    0b:d9:f7:d7:84:6b:a1:2b:de:33:4e:50:15:ff:2a:
                    ed:69:cf:8e:e1:c9:88:36:da:f4:53:4e:5e:8f:c0:
                    9d:26:d0:6d:09:16:09:61:72:11:c4:e9:5a:f4:31:
                    c8:d9:e6:3a:14:b0:e2:cc:b1:e6:12:0b:13:6c:03:
                    df:53:2e:05:8a:d0:1f:1a:86:75:f4:1f:11:c9:96:
                    12:64:79:d9:53:25:d5:3f:8d:8a:cb:b6:10:69:a3:
                    b3:ef:25:e0:3e:10:fd:1c:a6:ef:a3:f2:44:94:d9:
                    b7:93:72:42:cf:ac:66:1a:bd:20:b2:0e:57:9b:c1:
                    de:79:3f:91:e3:1a:ee:e1:07:61:b5:d8:55:98:1c:
                    74:ee:d5:8b:7d:9f:27:13:29:5a:0f:2e:0e:c5:24:
                    9a:fc:67:7b:e5:91:50:75:7d:3d:fb:3d:6d:a0:b4:
                    a9:66:32:a5:b7:0e:ae:cf:a4:4d:d9:3f:9b:9f:ec:
                    3e:40:74:a8:f4:a8:35:2c:7c:96:b7:88:a3:69:20:
                    37:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:23:56:D3:CA:A5:F6:A0:6D:FF:E1:23:2A:EE:78:82:35:C1:14:B2
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9B2794A04CF511EC9FE1E361C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.4.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:5a:92:b3:f9:bb:f3:37:cf:e9:ca:09:a3:10:a4:6e:bd:f4:
         fa:55:69:3a:bb:c4:40:da:d8:e7:37:64:e4:35:a8:4d:cb:2d:
         b6:51:e8:34:a4:29:e0:bb:ca:68:de:a9:f8:18:0a:b7:56:dc:
         7e:5f:f2:50:08:bd:98:9c:a6:a0:c2:61:e4:6c:c9:df:85:ce:
         14:98:0e:da:c2:6a:1a:b7:1a:2d:31:db:d9:0f:cc:be:c9:7d:
         66:c5:c8:0a:9c:82:f1:13:f7:5e:fd:03:b6:7f:1d:ae:f1:63:
         6a:5f:88:c8:9f:50:e3:90:b6:7a:1d:73:fd:6c:90:0c:46:4c:
         9a:a2:e3:c4:65:b3:2b:53:28:97:3b:ff:d8:bc:83:04:e2:c2:
         3a:37:40:f2:2f:6f:ba:e1:92:34:df:d3:ef:d6:2a:e5:8d:5d:
         78:ba:21:16:f4:f8:44:e9:35:e1:90:92:8e:cc:a3:3c:d8:31:
         87:ae:86:5d:d0:9a:07:1b:e2:f6:53:e1:7c:55:f4:e9:10:e8:
         c5:f3:0c:8f:73:c9:23:9e:4d:5b:c8:6f:05:df:8b:67:14:44:
         09:d5:fa:13:a3:fa:5a:99:b2:68:aa:b0:93:01:fc:25:70:4b:
         7c:14:b0:bb:4b:82:21:a1:7f:0e:30:57:11:a0:88:d2:2c:2d:
         f4:b5:b2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:44:38 2026 by rpki-client