Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/315D9F86D0E611F1AAC7587D3066CEF9.roa
File:                     315D9F86D0E611F1AAC7587D3066CEF9.roa (raw, json)
Hash identifier:          nN8wSe2dj9gRwSzI449b5hl0Hb8zhWGQAC/IoBbHl64=
Subject key identifier:   0E:AA:F0:9F:63:CE:30:A2:A5:E6:91:30:E2:D6:4B:32:C5:0C:BD:8D
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       03ED
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/315D9F86D0E611F1AAC7587D3066CEF9.roa
Signing time:             Mon 26 Oct 2026 02:37:31 +0000
ROA not before:           Mon 26 Oct 2026 02:37:31 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     59117
IP address blocks:        202.134.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 02:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005 (0x3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Oct 26 02:37:31 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6adebceb-19fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:86:1f:d9:95:dd:13:9f:24:55:95:12:74:9f:
                    56:46:bf:98:27:be:d5:31:c1:a1:a9:9d:b6:57:26:
                    df:1e:c8:68:5a:ea:fc:76:77:5c:e3:c7:72:32:51:
                    6f:06:43:6b:d0:38:3e:97:9d:62:5e:1e:7f:75:bb:
                    da:be:5e:1f:7f:8a:af:b6:90:2e:ee:d6:ca:e4:a3:
                    f4:ec:3b:8b:07:a9:0d:88:77:42:3f:e7:f4:43:bd:
                    91:b9:2b:5b:18:55:11:80:f8:48:2e:e4:34:76:eb:
                    26:60:9d:c6:9a:67:95:c4:61:69:68:69:03:ad:a0:
                    08:34:1a:b2:76:4e:ee:4e:46:4b:1b:9a:b7:59:b1:
                    47:84:b3:b0:b5:c8:71:b0:b6:84:a7:a1:3c:07:19:
                    d7:5e:d0:ef:46:73:6d:96:5d:58:b4:16:28:2a:08:
                    e6:4b:dd:22:84:4a:41:7b:09:87:18:e4:6a:54:ac:
                    f0:20:72:10:1d:64:a4:79:ea:4b:5a:cf:9a:28:2d:
                    bc:6b:35:77:de:72:51:4c:12:fe:ed:61:b3:13:2e:
                    4a:c7:82:16:45:f3:60:79:b0:07:da:c5:f4:c3:6b:
                    64:ac:29:35:ed:5a:41:e0:f5:e5:31:3e:c4:60:ad:
                    57:2b:d5:10:e2:bf:a1:ea:a4:0e:bf:0f:51:61:61:
                    18:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AA:F0:9F:63:CE:30:A2:A5:E6:91:30:E2:D6:4B:32:C5:0C:BD:8D
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/315D9F86D0E611F1AAC7587D3066CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:8e:50:1c:49:5b:bd:74:89:7b:1c:25:54:0f:f5:f3:79:77:
         b4:55:e7:c1:a3:74:c4:e9:65:ed:e3:9b:4d:c7:50:58:18:3b:
         67:b7:b5:fc:17:51:b6:8d:d5:25:08:9a:7b:b4:34:55:8c:fd:
         c1:2e:63:64:b7:ff:d5:5a:9a:a8:4a:3d:52:05:3f:01:b7:51:
         91:4c:cb:99:3e:fa:76:68:82:3b:88:ee:88:8f:96:ae:b9:17:
         65:2e:56:f1:6f:df:87:44:b1:05:7a:3a:ad:0a:74:a4:64:ac:
         b8:d4:cb:2c:dc:c4:7b:d8:d8:24:30:74:e3:3d:dd:06:71:0a:
         10:03:c4:f8:f0:64:d6:e8:a8:c1:90:43:74:04:5c:ec:9d:16:
         b3:11:95:03:b4:59:34:59:f9:37:8b:de:3d:c8:86:49:f3:e9:
         43:21:89:5f:38:60:14:4b:07:53:33:88:77:68:8c:04:d7:5c:
         a9:89:98:7f:12:b7:22:36:6c:23:85:fb:28:67:7d:a7:b4:b1:
         7d:eb:c4:50:b8:1b:6a:3e:6b:4b:de:5b:f4:72:10:bd:f7:53:
         83:9d:dc:95:83:84:6d:37:cb:65:ae:29:62:e7:fb:16:58:89:
         36:4f:48:e9:c5:55:8b:2a:57:14:2b:35:64:b1:c0:a1:cb:72:
         2d:91:62:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:27 2026 by rpki-client