Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/281775F671A711EE85493C7BC4F9AE02.roa
File:                     281775F671A711EE85493C7BC4F9AE02.roa (raw, json)
Hash identifier:          1OcGEQoA7Pxc97MEC2RvvtjXJOEVmckmJiVkRuKeFx0=
Subject key identifier:   90:68:5F:20:2F:7D:94:BD:C1:AA:3B:30:8D:D7:5B:41:96:93:D6:7F
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       037C
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/281775F671A711EE85493C7BC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 02:33:47 +0000
ROA not before:           Fri 05 Jun 2026 02:33:47 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     200017
IP address blocks:        202.134.235.0/24 maxlen: 24
                          202.134.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 02:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892 (0x37c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 02:33:47 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a22358b-0dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:29:aa:7c:a4:ff:f6:0d:cb:e5:f8:a4:88:
                    f3:3c:fb:24:bd:8b:b6:40:5b:23:92:c6:33:7c:69:
                    f0:3b:72:bd:40:0c:4f:8a:e6:3b:bb:5f:b1:8f:c5:
                    92:9a:43:39:92:fe:4e:b7:2e:56:aa:03:89:a4:95:
                    f9:02:42:79:cd:9e:3e:b1:2b:bc:e9:9c:a3:c0:01:
                    68:eb:f5:cd:f8:17:7f:dd:fb:bc:51:c0:5f:d6:36:
                    d3:27:da:83:b3:96:e7:bf:af:bb:b9:ea:8f:78:7b:
                    98:b6:1e:b2:04:c0:d2:5c:25:55:63:7f:43:dc:47:
                    8b:a1:c3:30:97:80:c9:82:9c:8f:62:ce:3a:c5:9f:
                    a3:d4:d5:20:af:78:cd:92:4e:45:26:04:92:b1:d4:
                    c3:35:af:1a:35:93:8f:19:f2:b7:cf:7a:50:4d:31:
                    bb:07:38:43:62:68:59:01:e2:5b:9c:57:c4:81:66:
                    af:0e:1b:c5:dc:ba:f6:16:0d:ce:f9:1c:1e:14:b3:
                    21:13:60:4b:a5:b6:db:6a:42:dd:e6:45:9d:8a:65:
                    4f:63:98:10:85:1d:c1:8a:44:88:86:d5:d4:70:7e:
                    ef:63:c1:05:fc:6a:9e:66:b1:74:86:e1:9a:17:df:
                    26:04:0b:6d:1f:58:46:24:a9:66:e8:3f:66:bd:c2:
                    2a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:68:5F:20:2F:7D:94:BD:C1:AA:3B:30:8D:D7:5B:41:96:93:D6:7F
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/281775F671A711EE85493C7BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.235.0/24
                  202.134.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:d0:04:ef:0d:d2:30:08:9b:e9:e4:ae:41:0d:6d:3e:b5:b8:
         82:42:33:a4:d9:14:43:db:a2:e2:94:07:d1:c0:e5:c5:a5:4f:
         6f:a8:b5:c3:cc:77:30:19:c0:83:39:21:b4:39:f9:b0:ef:41:
         0f:ba:e6:dc:4c:a4:24:4f:4a:21:80:9d:bb:b7:6c:be:73:c4:
         90:c9:af:be:3c:dd:0f:32:76:3f:70:89:c1:f3:f1:66:23:ba:
         d4:d6:38:76:54:a5:e3:fc:ea:51:85:55:84:be:cb:bb:fa:02:
         34:72:33:c7:5a:e2:bf:0a:08:43:e8:b1:96:3d:b2:40:0e:58:
         29:d9:6a:c9:b5:6a:42:65:db:1b:0b:9d:96:d8:c2:25:c0:3a:
         75:b9:b7:31:f6:67:d3:d5:87:cd:97:0e:9b:5a:f5:8e:2e:cb:
         8b:36:5a:ef:a1:6e:21:da:f7:f1:57:74:83:d2:71:43:d7:a8:
         fd:c0:92:f7:fe:c4:fa:16:48:c0:c9:b3:56:2d:e6:fb:a8:a0:
         67:58:88:1b:dd:3d:dc:4e:66:a2:59:d7:cb:2f:6d:1a:94:f2:
         a4:1e:bf:6e:0d:51:c2:b1:3d:81:e1:ad:89:ee:35:0c:2b:66:
         38:56:73:fe:1b:ce:c9:0c:8a:10:4b:a9:b6:b1:fd:a1:93:1f:
         56:63:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:44:43 2026 by rpki-client