Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/7BC92742ADA611F18F55423F6E11F970.roa
File:                     7BC92742ADA611F18F55423F6E11F970.roa (raw, json)
Hash identifier:          ai7pgQHXoz7YgQfjtoOzeruV6ucLwGuomU9kU9c7KlM=
Subject key identifier:   77:B1:F0:2E:A8:66:44:D2:41:86:A6:84:0C:B7:0D:AC:2E:D1:8E:C1
Certificate issuer:       /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Certificate serial:       3624
Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/7BC92742ADA611F18F55423F6E11F970.roa
Signing time:             Fri 11 Sep 2026 06:03:18 +0000
ROA not before:           Fri 11 Sep 2026 06:03:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38015
IP address blocks:        120.29.232.0/23 maxlen: 24
                          123.242.248.0/22 maxlen: 22
                          203.189.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
                          rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13860 (0x3624)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
        Validity
            Not Before: Sep 11 06:03:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aa399a6-f21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:08:d1:78:f4:7b:b9:dc:87:a8:9d:11:11:
                    12:32:bc:9d:75:d1:bd:a5:19:c8:52:e1:29:a6:f3:
                    99:ee:e9:53:03:95:52:45:a4:e6:91:c1:c1:9c:09:
                    4d:a0:2d:90:b8:22:6e:c8:50:d1:16:a1:a6:65:80:
                    d8:7f:37:0b:c5:10:b8:c8:72:df:cb:4b:cc:04:77:
                    dd:cb:85:ff:05:fb:f3:3d:4f:21:85:c5:38:88:64:
                    90:3b:ed:45:fb:2c:1a:16:d7:00:4e:94:c9:75:2e:
                    63:33:d2:97:12:24:83:31:bb:d3:cc:99:9b:da:78:
                    7c:49:64:90:6f:65:97:c2:75:17:16:d8:cb:5a:07:
                    2d:27:b2:42:3a:d8:a5:3e:a0:74:df:ac:28:5d:3a:
                    66:f7:c5:20:71:71:22:fa:63:c2:ac:53:e6:b1:5c:
                    f0:76:5e:27:6d:e1:f3:ca:bf:6d:16:2c:0e:c0:96:
                    69:05:20:4f:06:59:32:67:f1:c8:51:29:00:11:28:
                    7e:25:87:2d:c1:54:da:98:4f:40:53:00:2b:32:af:
                    03:c4:68:fa:87:cc:dc:7e:3b:c9:5b:71:d4:c6:03:
                    dc:1f:98:2d:79:27:74:02:ad:35:a7:19:0d:36:69:
                    83:33:4c:e4:b3:57:7d:bd:2a:0f:2c:b7:8e:98:33:
                    f5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B1:F0:2E:A8:66:44:D2:41:86:A6:84:0C:B7:0D:AC:2E:D1:8E:C1
            X509v3 Authority Key Identifier:
                keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/7BC92742ADA611F18F55423F6E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.29.232.0/23
                  123.242.248.0/22
                  203.189.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:9d:58:8e:78:fe:d2:de:08:c1:2e:72:13:29:ec:55:f3:21:
         08:56:6a:ac:fe:77:fe:bf:f0:fd:91:6a:80:77:f6:ee:51:3d:
         4e:00:a0:d5:74:97:41:f4:52:63:64:a4:3d:68:8b:ff:87:65:
         fa:c0:29:ba:b2:0b:50:b7:d6:92:26:23:41:13:c0:a6:5b:1b:
         e5:cf:49:2d:9d:8d:cb:2a:36:8c:14:dc:0e:8f:ab:f0:63:5f:
         8e:a9:37:52:be:d4:24:f7:f9:9f:f6:9f:71:66:ab:56:9c:f3:
         b5:61:f9:7e:3c:a1:db:56:96:80:9b:54:45:a6:cd:43:84:11:
         36:18:b6:84:d4:0c:84:6e:3e:7c:f9:3a:75:44:4f:03:54:93:
         eb:ac:05:24:1f:f6:1c:5e:05:b9:0c:55:82:60:75:b0:e5:1f:
         27:b6:a0:57:ed:d0:6e:95:ff:a9:59:08:46:49:2e:de:99:cc:
         31:c1:8e:3d:c0:cc:3e:f3:4e:f6:ac:5a:82:6c:46:78:ed:46:
         25:d2:d4:59:ba:a3:35:d6:d2:a9:50:51:55:02:ba:c0:31:e8:
         19:37:73:e2:f9:78:62:60:cf:d0:c6:51:77:b2:79:c3:0a:07:
         e0:b7:d8:9e:0b:ca:83:c7:76:3c:60:5d:dc:2e:55:cd:a5:43:
         41:83:3c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 16:38:17 2026 by rpki-client