Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/7CF84F084B9111EBBA09CA72C4F9AE02.roa
File:                     7CF84F084B9111EBBA09CA72C4F9AE02.roa (raw, json)
Hash identifier:          kW+oZOkQ4kbBTg7mSMXsEsEa3+LYsouxCCV7XsV4Buk=
Subject key identifier:   45:25:E9:BD:22:01:72:DC:16:FC:14:CE:38:28:90:82:54:51:5E:AF
Certificate issuer:       /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808
Certificate serial:       08EB
Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/7CF84F084B9111EBBA09CA72C4F9AE02.roa
Signing time:             Fri 28 Aug 2026 21:40:57 +0000
ROA not before:           Fri 28 Aug 2026 21:40:57 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     133495
IP address blocks:        110.93.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl
                          rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 20:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283 (0x8eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808
        Validity
            Not Before: Aug 28 21:40:57 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a920069-29d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:50:86:db:e1:6b:29:d7:0a:ae:0e:6a:64:
                    a8:7c:93:70:08:37:f6:fd:8b:ec:81:06:d3:7d:66:
                    b8:07:5a:00:fc:a3:2d:df:3b:f3:a2:22:ee:98:f3:
                    b5:9b:80:6a:bf:f1:2c:b6:da:63:06:09:dc:c0:45:
                    c8:0b:ff:c8:46:f2:2e:81:9d:da:fe:08:52:bb:ee:
                    62:33:16:af:62:48:cf:46:db:d1:6f:7f:ff:7a:89:
                    ab:31:3e:d1:8a:55:28:1b:5f:71:25:ed:39:28:96:
                    b9:6d:df:13:08:b4:10:03:23:3e:74:4a:16:f2:75:
                    51:0f:e3:f6:ba:d5:3c:3e:96:29:da:7d:0c:eb:c5:
                    bd:5d:c4:66:8f:97:0d:18:e6:0c:01:09:64:da:53:
                    59:77:a8:46:f6:04:07:91:ab:f9:55:fa:40:1b:a5:
                    ee:9a:eb:2e:b7:29:a1:f6:9e:59:a4:74:7c:f5:74:
                    9f:dc:9a:02:d8:a8:ca:33:5a:9b:78:d6:70:7e:8e:
                    2a:d6:0b:e5:b5:fd:cc:b9:a7:e8:d0:4c:2f:20:14:
                    a0:98:db:54:40:0b:64:9d:78:0b:e9:39:a5:0e:4b:
                    d6:38:41:24:48:4e:f1:4d:c4:13:89:4a:a3:4c:69:
                    e3:5e:00:9d:65:ee:25:14:dc:28:72:be:b1:e1:8f:
                    f2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:25:E9:BD:22:01:72:DC:16:FC:14:CE:38:28:90:82:54:51:5E:AF
            X509v3 Authority Key Identifier:
                keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/7CF84F084B9111EBBA09CA72C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.93.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ff:51:a7:40:72:bb:b3:0b:f8:a7:3c:54:9b:84:2f:39:1f:
         06:63:30:93:b5:fa:fa:53:13:c7:35:75:2a:fc:b1:b1:db:67:
         e8:90:7e:cd:dd:3d:36:04:14:24:93:52:78:16:c3:43:e4:78:
         75:48:ab:38:ab:0d:d9:a8:fd:eb:a0:6e:b0:ac:4e:f9:d5:c6:
         a6:db:16:ba:37:e7:09:02:ae:da:9b:0b:40:74:b0:66:39:f6:
         d3:03:b3:0c:5d:a3:f9:7c:40:9c:f7:77:17:ec:5a:93:df:55:
         4a:9e:43:31:da:14:e7:79:cc:3d:03:2e:f3:da:68:9a:0c:04:
         67:a5:19:d2:1f:a1:8e:11:c4:fc:f4:5c:ff:af:4c:2e:2c:ab:
         eb:b8:50:ed:14:2d:05:6c:52:68:15:e6:0a:e5:16:b2:75:4e:
         b3:12:b8:98:bb:eb:02:ac:07:ef:d6:02:f5:75:b4:f0:e9:2f:
         04:2c:39:36:c2:1e:b6:22:c9:55:47:d7:84:33:fd:69:8a:b6:
         b7:50:4b:a5:3d:11:33:1f:68:f3:fa:ad:05:7b:fc:a5:0b:1f:
         63:77:9b:ec:a5:bb:c8:12:16:f6:dd:79:74:b5:f0:86:f8:f7:
         34:27:cb:24:ec:1b:98:30:d7:47:ac:30:c5:93:75:47:68:ad:
         cb:80:5f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:48:40 2026 by rpki-client