Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/32F3695A24D611F183242288AB833773.roa
File:                     32F3695A24D611F183242288AB833773.roa (raw, json)
Hash identifier:          +ed5eUCrwHBGXVMFMAEWwZFkewvyI3l+wTfi4DmMBE4=
Subject key identifier:   81:A9:04:60:E3:22:49:D9:04:9C:C0:9B:89:D8:3E:80:22:2A:44:8C
Certificate issuer:       /CN=A91C175F/serialNumber=6A63196CCCDC666CCB5C380FED16C6F0EFB0FB5D
Certificate serial:       71
Authority key identifier: 6A:63:19:6C:CC:DC:66:6C:CB:5C:38:0F:ED:16:C6:F0:EF:B0:FB:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/amMZbMzcZmzLXDgP7RbG8O-w-10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/32F3695A24D611F183242288AB833773.roa
Signing time:             Wed 21 Oct 2026 08:56:05 +0000
ROA not before:           Wed 21 Oct 2026 08:56:05 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     133139
IP address blocks:        202.140.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.crl
                          rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/amMZbMzcZmzLXDgP7RbG8O-w-10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 08:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C175F, serialNumber=6A63196CCCDC666CCB5C380FED16C6F0EFB0FB5D
        Validity
            Not Before: Oct 21 08:56:05 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ad87e25-6c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a6:ba:6d:17:d9:eb:40:b9:2f:cf:3d:d4:55:
                    c1:1a:56:82:9a:e5:fe:cb:e0:6e:72:82:3b:a6:cb:
                    25:26:d6:69:43:67:50:1c:1e:7e:8d:a0:c2:bd:86:
                    4b:ec:ca:14:35:45:0d:19:d8:87:b8:f1:c5:ac:b6:
                    73:2e:42:07:04:03:3b:50:ee:a8:12:c7:03:6d:a8:
                    1a:5c:26:c8:6a:72:eb:32:ea:4a:ed:df:ac:1d:7c:
                    5c:b3:54:4b:a4:32:34:c2:6b:e2:06:8e:7c:6f:04:
                    1a:de:49:24:60:4f:6b:3c:15:97:95:c6:26:44:7a:
                    d1:d6:fe:fd:f3:5b:ae:9f:84:12:d0:da:71:09:bc:
                    4e:37:ef:93:37:70:69:de:d8:74:d7:3c:f3:07:02:
                    9d:53:28:7b:7c:4c:b5:e1:33:01:59:74:62:19:9a:
                    15:0e:d2:81:46:09:08:89:a8:5d:f2:7d:96:f2:31:
                    dc:ce:c5:58:3a:40:5f:d6:d7:69:fe:5a:c0:0e:17:
                    18:f3:b7:df:d8:64:93:3a:6c:5e:fa:73:d6:39:49:
                    a0:c8:1b:73:dc:c5:91:fa:45:e3:68:bb:0c:de:7f:
                    30:0e:0a:0e:a2:98:fc:9b:89:a9:10:4e:8d:79:88:
                    46:98:fd:80:54:5c:7e:51:e0:51:39:f4:48:99:81:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A9:04:60:E3:22:49:D9:04:9C:C0:9B:89:D8:3E:80:22:2A:44:8C
            X509v3 Authority Key Identifier:
                keyid:6A:63:19:6C:CC:DC:66:6C:CB:5C:38:0F:ED:16:C6:F0:EF:B0:FB:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/amMZbMzcZmzLXDgP7RbG8O-w-10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/32F3695A24D611F183242288AB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.140.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:99:1d:31:c9:44:5e:06:5d:d7:d7:00:75:cc:a4:c0:a0:a1:
         02:35:1e:28:a5:f8:9d:9c:9a:75:52:7c:df:bb:ea:44:11:90:
         12:ab:01:ab:7f:fc:e5:37:b2:16:39:98:c1:6a:51:19:d4:d6:
         a8:e4:ef:2e:91:91:87:c6:85:d1:ab:3c:fe:05:92:2b:fb:85:
         42:8c:8c:e6:ff:6f:22:58:84:4f:75:76:64:7d:e1:23:23:17:
         94:8a:c6:e7:fe:dd:8d:db:eb:e3:ab:1d:6d:37:7b:cd:97:86:
         d7:80:f2:21:d7:a1:f1:78:f3:46:7b:90:34:39:e4:71:df:ee:
         e9:d6:d4:d6:2f:26:7e:8c:a3:fb:5b:7a:3e:1f:e4:a4:34:cb:
         e6:84:21:47:a5:0c:6d:5b:39:bf:77:5e:7c:9f:16:fb:ff:99:
         57:66:51:cc:c1:b9:8d:dd:f1:f1:9c:e0:3c:a1:60:d5:4b:3d:
         73:54:95:69:86:86:be:64:af:a3:b8:30:87:1a:4d:2b:68:53:
         c8:83:a0:71:b9:28:3f:47:c1:14:55:19:7b:1e:45:9b:9b:d5:
         55:d2:1c:7b:71:32:6d:aa:bb:8d:f5:df:25:31:38:82:ff:d0:
         51:1f:3e:29:0c:01:84:e3:69:ea:31:78:81:d0:19:32:2b:f3:
         16:31:e1:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 24 13:38:37 2026 by rpki-client