Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/85C534069AA711EBB9BBD670C4F9AE02.roa
File:                     85C534069AA711EBB9BBD670C4F9AE02.roa (raw, json)
Hash identifier:          nONjSL7Nk+Smo1BGPeYTD0NMaDI03tcEC5fOZQRT56g=
Subject key identifier:   2F:0B:E1:3A:13:07:4C:A4:4C:AD:CD:C2:8E:10:43:87:C4:94:3D:CF
Certificate issuer:       /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial:       1520
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/85C534069AA711EBB9BBD670C4F9AE02.roa
Signing time:             Fri 16 Oct 2026 17:32:42 +0000
ROA not before:           Fri 16 Oct 2026 17:32:42 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     141773
IP address blocks:        203.112.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 16:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5408 (0x1520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
        Validity
            Not Before: Oct 16 17:32:42 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ad25fba-f08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c5:70:fb:5a:2a:3a:34:42:f5:0f:4d:92:8a:
                    5d:5e:f9:f7:7f:c5:36:e6:89:82:8e:88:45:76:f0:
                    cf:47:f9:17:98:0c:fc:fa:2e:c2:b9:3d:63:72:78:
                    36:0a:ba:ec:b6:c5:52:0c:b6:7b:e8:f7:da:6a:95:
                    d2:43:02:22:74:e7:f8:2c:1e:5d:de:d4:d2:e3:fe:
                    24:dc:c9:27:14:91:56:ff:74:7a:45:c3:be:50:c7:
                    8c:a4:34:f4:65:8c:a6:5d:31:4b:79:80:2e:71:7d:
                    d6:4a:30:28:e8:78:e1:c3:d4:1e:8e:8f:24:1d:4a:
                    9c:83:c7:d4:25:44:6e:4e:6b:ae:95:72:84:25:40:
                    9f:c8:e1:ee:25:14:47:cc:a0:1a:d6:31:1f:2f:01:
                    c0:61:d1:47:59:b2:3e:3e:bb:56:96:c2:63:c4:46:
                    29:93:0e:ec:b6:fc:24:d3:5c:13:14:06:52:30:1f:
                    d6:01:c1:c8:53:fe:af:91:a7:4f:29:7c:b1:b9:7d:
                    40:c1:f3:73:73:75:9d:5c:1e:28:0d:6d:a8:93:da:
                    8f:85:4f:c4:bb:c9:8c:4a:60:3b:39:ee:0f:39:a8:
                    5e:40:9f:05:0e:03:c0:eb:72:76:c4:e3:84:f6:b4:
                    25:e3:92:bb:f1:fe:9c:0f:0f:b1:2f:c0:c1:ae:a5:
                    23:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0B:E1:3A:13:07:4C:A4:4C:AD:CD:C2:8E:10:43:87:C4:94:3D:CF
            X509v3 Authority Key Identifier:
                keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/85C534069AA711EBB9BBD670C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.112.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:fd:c3:36:21:7f:39:92:6a:dc:22:0d:04:48:05:0a:6a:5e:
         91:c9:b2:af:2e:de:cf:e3:b3:3a:8f:96:f3:19:6a:7c:ae:17:
         2f:6a:93:37:23:55:e2:1b:f6:07:54:b3:e3:5d:95:e3:d9:83:
         3b:f6:02:3c:83:75:75:74:cc:ca:c6:ae:b7:83:6c:75:57:3e:
         49:cb:80:44:38:d2:02:dc:25:2e:18:25:63:ee:77:8d:79:3d:
         4d:73:3a:be:e5:65:8a:0c:61:f5:af:bb:ca:a4:52:df:b6:99:
         2c:88:d1:3c:bb:02:33:43:d3:d4:11:67:01:a3:2b:7f:0e:1b:
         2e:65:4a:37:83:83:94:cc:9f:22:2d:5f:76:33:a5:11:80:a1:
         27:32:db:17:52:40:0d:3f:16:30:41:a3:0e:7b:81:2e:75:32:
         81:30:df:94:cc:35:37:83:9b:5b:f1:41:ef:99:7a:cf:13:17:
         97:95:e9:a5:57:e5:15:01:7d:91:a6:93:4c:a0:50:82:e7:59:
         11:cc:cc:5c:b7:1f:ec:79:34:f9:3c:a9:2d:1f:06:6f:9c:7c:
         3e:df:f7:cd:d2:03:b4:4a:bd:83:45:82:b3:50:99:91:67:f0:
         26:63:c7:cf:2b:66:71:17:bf:de:f1:09:dd:58:59:85:fa:c5:
         b7:97:9a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:04:15 2026 by rpki-client