Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/B7BCBAE8C2C311F19B33583F8AEE528E.roa
File:                     B7BCBAE8C2C311F19B33583F8AEE528E.roa (raw, json)
Hash identifier:          0xqHf7DG05f9ZM0jdlcDxB4WU7nG4rwM9DBJ+EzioMk=
Subject key identifier:   0C:14:EE:FD:88:CC:26:85:A7:FF:B9:64:A0:5C:2B:DD:C6:37:54:03
Certificate issuer:       /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
Certificate serial:       EF
Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/B7BCBAE8C2C311F19B33583F8AEE528E.roa
Signing time:             Mon 12 Oct 2026 10:56:29 +0000
ROA not before:           Mon 12 Oct 2026 10:56:29 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154199
IP address blocks:        202.136.74.0/23 maxlen: 23
                          202.136.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl
                          rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 06:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
        Validity
            Not Before: Oct 12 10:56:29 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6accbcdd-fdb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:a7:0b:87:7f:a3:63:0a:a4:c8:11:43:1a:
                    11:e2:e5:e1:d6:2e:fe:db:30:d5:f7:21:97:b5:0c:
                    fe:4d:bd:14:c0:cf:84:2a:ac:a1:02:1a:dd:a5:6c:
                    8a:51:d5:55:c0:79:13:89:07:fc:43:d8:1b:77:36:
                    67:f0:ab:9d:36:b1:1f:93:a2:d9:2b:67:7a:39:13:
                    39:70:5b:c7:a2:10:5e:85:ad:b4:9a:5d:7d:44:19:
                    e3:76:42:b6:1d:e9:7d:68:22:26:d5:68:c9:cf:67:
                    1a:95:cd:df:97:7f:86:3f:a4:4e:b4:53:f0:a3:24:
                    ef:76:90:b0:70:a2:dc:2c:59:dc:91:65:15:0c:bc:
                    a3:b7:30:ac:5f:f0:70:26:be:be:45:ff:61:f8:e1:
                    b2:ba:55:06:70:f6:1c:27:91:04:11:c1:ac:2b:c2:
                    04:15:e2:11:70:42:b9:ee:8e:0f:9f:22:20:4f:2f:
                    02:e2:a0:7c:89:e6:6d:57:fd:31:bd:3a:cd:13:96:
                    93:e0:8d:81:a0:6d:ca:e2:c1:0d:7e:56:4a:3d:6a:
                    52:68:1f:34:9e:c9:4a:e4:35:27:b8:ff:cb:7e:df:
                    db:f4:cd:9b:33:2b:25:29:af:55:88:b2:d4:42:d7:
                    e0:24:4f:a5:dd:45:a3:df:25:65:c4:f9:35:3a:c2:
                    16:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:14:EE:FD:88:CC:26:85:A7:FF:B9:64:A0:5C:2B:DD:C6:37:54:03
            X509v3 Authority Key Identifier:
                keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/B7BCBAE8C2C311F19B33583F8AEE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.136.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:b2:9c:b5:99:f6:80:fd:df:4d:57:b1:94:33:ce:52:b9:9f:
         01:3f:b7:49:14:a4:71:0d:76:c4:40:fb:a9:63:ba:12:b1:58:
         b0:45:18:aa:ff:e2:c6:09:5c:36:e3:9b:17:a1:9e:cf:e3:1b:
         12:74:ad:3c:de:c5:9b:24:59:5f:cc:ff:c3:f8:cc:9c:35:07:
         0b:59:33:0b:59:79:2e:df:0d:63:29:8e:da:82:14:aa:a1:b8:
         62:c2:c7:84:59:bd:fd:ac:22:f6:21:00:a1:c3:23:65:b2:19:
         c3:fe:04:af:d4:5b:c0:57:4a:57:8d:52:29:91:13:be:0b:26:
         00:4e:1d:5d:6a:b1:51:35:f1:5c:10:e3:74:b8:46:33:56:67:
         df:0f:aa:9c:fb:57:66:43:59:e4:5b:5e:b8:a1:55:da:89:e7:
         f9:df:d2:46:56:2b:fa:dd:5d:69:cc:09:48:17:fc:e8:e7:00:
         19:5c:cc:22:40:8d:72:47:96:0c:e2:71:96:50:bc:3d:ca:d7:
         6e:a2:79:d5:f6:f0:2f:0d:2c:88:00:0a:65:2c:42:66:4f:b0:
         1d:31:ee:a1:95:fd:9c:98:41:47:82:08:21:80:3d:f9:84:d6:
         ae:33:aa:e8:35:0b:42:97:7d:48:59:93:7a:32:d5:3a:b9:fc:
         1b:1e:4a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:40 2026 by rpki-client