Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9D01D11E773011F0BC213446C4F9AE02.roa
File:                     9D01D11E773011F0BC213446C4F9AE02.roa (raw, json)
Hash identifier:          KQsgCs1NUrzNJleCJ09ePjj66DWN11U6/EFLQCB7oNI=
Subject key identifier:   35:AC:2E:07:E9:20:FA:28:FA:52:B0:F3:BA:58:40:2E:F4:FE:A4:C1
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6EDC
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9D01D11E773011F0BC213446C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:34:05 +0000
ROA not before:           Fri 02 Oct 2026 15:34:04 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154105
IP address blocks:        202.83.2.0/23 maxlen: 24
                          2402:1e60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28380 (0x6edc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:34:04 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfceec-7f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:6f:4f:c6:f6:bc:8b:4e:4d:be:c9:f5:44:
                    42:e7:07:2c:a0:dd:db:6a:d9:bf:4f:d5:1c:0b:ee:
                    fd:cd:43:1f:5e:e4:d3:a9:44:b9:bf:9c:0f:24:d3:
                    c5:7f:97:a5:a5:82:d8:8a:b4:2c:ea:8a:95:16:8e:
                    c2:9e:2c:e5:a8:b7:32:db:80:b7:21:ab:30:cd:2e:
                    d4:75:ce:4e:c5:23:83:f9:e9:fc:4f:62:01:9b:ed:
                    1d:12:f9:8b:0b:1c:f9:4a:db:52:81:59:1a:d2:d9:
                    87:55:b0:c4:61:b7:ef:3c:71:56:d2:ed:76:4f:8d:
                    5f:a0:df:34:77:1c:9e:7d:77:e7:88:d9:bb:6c:0c:
                    00:b3:26:20:6d:32:3f:92:9f:b3:f4:b4:13:e2:f1:
                    92:58:e3:46:12:9e:88:c4:88:39:5e:33:16:d5:25:
                    df:2d:33:58:51:f1:df:bb:ee:36:fb:bc:75:f0:bb:
                    82:6b:3c:90:fc:56:be:22:ac:17:75:2a:94:c6:29:
                    4d:8e:4b:47:93:68:07:44:2f:ad:ff:10:2a:97:b1:
                    e6:83:78:d4:86:f5:55:98:40:2c:63:ab:50:e2:2b:
                    1c:8e:d6:f5:22:2f:c4:8d:ee:7a:3f:58:0b:4e:12:
                    88:24:f6:5a:46:79:dd:27:cc:09:b4:75:d6:a4:6b:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AC:2E:07:E9:20:FA:28:FA:52:B0:F3:BA:58:40:2E:F4:FE:A4:C1
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9D01D11E773011F0BC213446C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.83.2.0/23
                IPv6:
                  2402:1e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:81:09:93:fb:fc:05:b9:fb:82:7a:e3:de:30:a2:67:5d:c3:
         20:1a:19:ae:58:cd:1f:b6:63:2d:f3:b1:e4:2f:6d:f1:17:57:
         8f:7b:15:76:b4:bf:52:ee:0a:04:40:19:02:62:6f:99:8c:a4:
         0b:da:a7:09:8c:d9:01:d3:27:b6:69:cc:47:5d:98:a2:02:32:
         30:b1:bf:12:7f:36:7a:32:e3:b4:42:96:00:ae:0f:33:16:1f:
         30:0e:ca:f3:a9:81:1b:e9:ff:5f:c4:f8:91:aa:7e:f4:fd:04:
         10:12:97:b0:9b:1b:26:70:71:ad:5a:cd:ff:a1:b2:42:cc:bb:
         81:83:5a:59:e1:c9:52:3e:2d:a1:0c:61:15:0d:39:7d:e9:24:
         36:bd:73:ee:c5:4e:17:d1:a7:80:45:d7:30:74:b3:81:7f:fd:
         26:af:31:d9:42:5d:d0:60:44:7b:3b:ae:c5:7d:f5:56:be:7c:
         98:b3:fe:58:af:44:f4:7a:36:4c:ab:d0:b2:fb:c6:2f:15:f8:
         e6:ef:74:8d:4f:8a:c7:20:95:e8:3a:f2:d0:6d:1e:76:7b:20:
         f6:6b:b7:13:74:23:ad:67:d6:08:35:c1:ae:2a:13:91:e1:f5:
         72:2b:13:6d:e3:c9:7f:57:60:1f:1f:ab:57:e3:15:dc:a2:43:
         2b:1a:d0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:07:06 2026 by rpki-client