Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/268ECB3ED5BD11E894FFC250C4F9AE02.roa
File:                     268ECB3ED5BD11E894FFC250C4F9AE02.roa (raw, json)
Hash identifier:          +S9KMUljfxQJFwqoopUe9aDl8dajJPyPJ+b4JFYvIxM=
Subject key identifier:   AA:1B:26:57:E5:1B:43:B8:F7:FC:CC:1F:26:F1:FD:8A:B2:17:94:97
Certificate issuer:       /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C
Certificate serial:       172B
Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/268ECB3ED5BD11E894FFC250C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 17:30:30 +0000
ROA not before:           Wed 02 Sep 2026 17:30:30 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45509
IP address blocks:        115.187.88.0/22 maxlen: 22
                          115.187.88.0/24 maxlen: 24
                          115.187.89.0/24 maxlen: 24
                          115.187.90.0/24 maxlen: 24
                          115.187.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl
                          rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5931 (0x172b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C
        Validity
            Not Before: Sep  2 17:30:30 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a985d36-a36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:20:88:bc:62:85:c2:ab:df:64:a7:40:21:
                    a4:3b:04:e6:3f:0d:ee:a1:cb:50:43:02:3e:88:d3:
                    99:bf:6b:3a:83:f2:3b:04:cc:68:62:40:d6:67:d0:
                    d8:4d:64:f5:4a:bd:a5:6a:fa:b7:d1:b8:d6:55:6f:
                    cd:19:a8:3e:0c:46:68:4c:b1:2c:51:b0:24:1d:10:
                    b5:0f:15:16:2d:90:5d:69:af:45:e4:8e:9b:f4:af:
                    ac:95:4d:16:6a:80:cd:0f:61:52:bc:17:d2:d1:43:
                    24:2d:10:22:2f:b4:78:89:25:4a:fe:e5:03:23:26:
                    10:97:b4:63:0b:07:93:65:8e:ad:ab:a8:74:93:1f:
                    11:35:24:68:9d:e1:0d:1a:1a:2d:59:3f:a0:ef:8c:
                    31:78:f5:ad:3f:32:8d:f6:63:19:16:ed:d9:2c:9e:
                    4f:6e:81:bc:61:ba:af:6d:b2:c9:26:a0:b7:10:41:
                    9d:c3:ad:43:52:a6:27:f3:7f:26:f6:4a:34:03:35:
                    15:39:f1:0a:eb:5c:5d:13:cc:aa:6f:88:a1:7c:ea:
                    24:c6:c4:58:9e:f0:bd:21:a4:c9:3a:68:da:9b:77:
                    fc:f0:f1:b4:bc:8f:dd:43:29:37:73:3a:5a:90:18:
                    ef:30:b3:d5:d5:f6:27:39:8a:76:d0:87:a0:8e:ce:
                    ce:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1B:26:57:E5:1B:43:B8:F7:FC:CC:1F:26:F1:FD:8A:B2:17:94:97
            X509v3 Authority Key Identifier:
                keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/268ECB3ED5BD11E894FFC250C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.187.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:33:f7:2a:58:ee:1f:45:39:55:9f:a4:89:a8:d8:35:b4:d6:
         df:c1:1f:60:42:75:67:d5:8b:39:04:d3:cd:ec:c4:ab:f8:5c:
         a6:ec:eb:3a:f2:b3:9a:e4:6e:81:b4:bd:7c:35:e0:6a:7f:dc:
         9e:f7:4a:cc:d0:8e:8b:4e:6c:7c:0a:7b:02:c2:19:eb:1d:50:
         f2:74:7b:07:3f:ab:81:9a:53:00:c4:bb:af:77:4c:8d:7f:fc:
         6a:05:cf:c8:0b:7d:1e:78:c5:60:6e:9f:4b:a1:03:fc:31:55:
         4e:d8:3e:62:99:29:b8:74:7d:c4:32:b4:ac:be:5d:33:78:56:
         d3:25:d6:01:f7:ae:57:51:90:f1:14:6c:82:93:5d:44:5b:a0:
         2d:41:ad:de:54:c6:c4:d5:57:02:d8:a1:60:fe:01:9d:9a:74:
         d2:a4:df:d8:7d:4f:88:69:d1:83:04:5a:4f:a5:7c:09:9f:8c:
         6d:2a:de:9e:85:81:b0:3e:af:44:82:19:13:38:93:31:ff:1a:
         d7:fb:49:43:e2:30:82:7e:89:7c:70:62:df:49:bb:ba:08:87:
         ae:94:59:32:2a:58:51:c0:1e:52:13:83:1c:a3:e7:49:21:c3:
         73:a0:9f:04:b6:b1:29:0d:78:9b:63:6f:4f:dd:37:7b:6b:10:
         d1:c6:87:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:17:48 2026 by rpki-client