Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/2732E7CE940C11EE9B034255C4F9AE02.roa
File:                     2732E7CE940C11EE9B034255C4F9AE02.roa (raw, json)
Hash identifier:          kTWCQH3l0WWzLGhSEAUO4J7QO5Yg3xSjvZflpuriZzI=
Subject key identifier:   9B:B3:70:A0:CB:59:35:A1:A6:22:DA:30:C0:24:83:69:8F:E6:4A:92
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       026F
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/2732E7CE940C11EE9B034255C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 03:52:17 +0000
ROA not before:           Fri 31 Jul 2026 03:52:17 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139076
IP address blocks:        116.204.234.0/24 maxlen: 24
                          116.204.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 02:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Jul 31 03:52:17 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6c1bf1-d61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:8e:13:b0:2a:e9:3e:4a:47:f5:34:28:ec:
                    c1:4c:3d:1a:d5:be:c6:ff:fb:69:a4:21:73:22:9f:
                    b1:34:3b:0d:37:80:62:82:33:d2:86:9f:45:6e:3b:
                    fe:b5:7b:1a:be:41:8c:ef:97:12:96:a3:2a:58:32:
                    e7:cf:04:a3:e0:84:20:02:bb:82:68:ac:2b:9a:31:
                    ba:ca:67:e7:6c:92:1e:6d:8a:d9:5c:09:e2:a7:8b:
                    fb:fd:09:3a:93:6e:b9:9d:d2:30:1c:e4:97:0f:a0:
                    91:18:76:98:05:fc:db:b3:63:a9:78:ec:cd:c0:0f:
                    4a:ee:0c:98:14:39:d5:b0:78:81:3b:de:d8:a9:5f:
                    41:51:ed:a4:37:37:74:30:48:99:1a:61:87:aa:03:
                    0c:a2:e9:08:d7:ba:7b:e8:d6:a0:36:59:45:54:83:
                    78:ac:d0:4c:ae:65:e1:d1:ee:f2:13:79:2b:0a:eb:
                    25:b0:fc:9f:d8:a1:e3:1a:cc:66:81:3b:f0:19:1a:
                    71:65:90:b1:90:52:d9:94:43:e9:f4:92:32:ab:93:
                    a0:1e:4f:e0:94:38:4e:ca:14:8a:d0:f3:92:b7:4f:
                    dd:cd:14:f9:26:9c:77:fb:0b:83:1b:c2:d1:52:e1:
                    63:ad:92:fb:a6:b7:7b:39:d1:7c:66:f2:d7:0e:95:
                    11:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B3:70:A0:CB:59:35:A1:A6:22:DA:30:C0:24:83:69:8F:E6:4A:92
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/2732E7CE940C11EE9B034255C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:d6:8b:e0:96:b2:67:86:bc:ed:33:70:e8:27:f6:53:f8:4e:
         bc:31:7d:51:c5:35:c1:70:ba:f5:b9:75:9e:73:db:0d:ae:bd:
         5b:14:99:00:61:e5:7e:99:16:cc:86:19:1b:12:40:c1:1c:24:
         0a:29:0a:c3:ac:ff:cc:22:ad:bc:00:97:38:d1:07:ac:88:44:
         87:02:11:d4:59:c1:b6:a3:f9:e6:6a:f8:bb:3f:a8:4d:c4:fe:
         0f:75:c8:f0:00:1d:63:3e:b3:4f:fd:e9:bf:58:10:85:f8:5b:
         e9:8e:3c:c7:b5:71:73:a4:bf:61:9c:6a:93:c6:08:cc:66:fd:
         64:dc:82:49:79:8a:9a:01:5c:49:4c:40:78:f4:c7:25:86:ac:
         e6:a5:d2:15:dd:2a:5c:d5:5c:cc:69:4d:57:48:ab:64:cb:dd:
         7b:99:95:4b:67:e4:38:9a:79:dd:af:71:41:99:a3:57:57:20:
         84:97:ac:41:f6:e4:5e:60:a0:df:de:99:fa:3c:3f:3e:d2:6b:
         d7:dc:fe:52:69:a4:70:3a:41:f2:a6:53:05:80:7a:56:94:1c:
         7c:54:14:8a:19:ce:a8:2f:25:3b:af:cd:3f:0d:49:69:14:98:
         fe:38:28:20:37:9d:c4:b5:70:a2:0b:87:a1:e8:8d:8b:4b:22:
         72:dc:42:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:32:42 2026 by rpki-client