Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/325AC09ED0E611F1AAC7587D3066CEF9.roa
File:                     325AC09ED0E611F1AAC7587D3066CEF9.roa (raw, json)
Hash identifier:          sjZSHi1TAaE5c4E4t8iCErmTMDjVgDkK6ODH8fexMWE=
Subject key identifier:   34:E8:8C:23:3F:42:D7:07:62:26:74:E5:28:D1:15:36:F2:B8:A4:10
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       03EE
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/325AC09ED0E611F1AAC7587D3066CEF9.roa
Signing time:             Mon 26 Oct 2026 02:37:33 +0000
ROA not before:           Mon 26 Oct 2026 02:37:33 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        202.134.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 01:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Oct 26 02:37:33 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6adebced-da7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:5b:bf:1f:da:27:c6:88:99:0d:40:77:4e:
                    4f:37:49:fa:69:b6:ab:9b:0a:8d:28:ab:85:8f:9c:
                    ec:36:01:4b:71:c5:ac:cc:88:df:32:e0:4d:4d:a8:
                    31:51:31:d3:2c:6a:22:2f:c2:a9:95:f9:35:6e:bf:
                    a9:e9:c5:a0:5c:2b:2e:4c:52:5b:57:01:18:dd:06:
                    61:74:d5:64:eb:a3:4b:d1:75:25:96:88:b9:14:55:
                    37:8a:29:a8:97:c3:ac:7e:6d:7c:7f:8f:4b:73:be:
                    77:3f:e7:1e:e6:8c:a4:9c:72:70:25:af:0a:d9:2e:
                    90:c4:7c:b5:01:a9:3e:35:a4:89:01:2c:e3:2d:c4:
                    6d:a5:74:b3:82:d7:b4:1a:98:34:f8:f6:7e:95:82:
                    97:b6:91:e7:13:65:73:7d:c5:72:a4:9c:2e:c3:ae:
                    5b:ba:4a:69:ea:fa:2c:46:ed:99:14:91:3d:2f:4a:
                    91:48:32:0e:e8:85:b3:63:49:36:31:af:91:5c:ea:
                    37:eb:24:23:20:29:7b:29:8e:7b:ba:05:ba:f2:88:
                    b9:f5:58:cb:53:41:b6:a7:b0:50:4f:b6:30:a9:30:
                    96:70:34:57:d0:d1:ec:82:00:5c:99:2c:89:e2:48:
                    45:49:44:01:6e:37:6b:e2:71:68:fe:71:d8:32:58:
                    09:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E8:8C:23:3F:42:D7:07:62:26:74:E5:28:D1:15:36:F2:B8:A4:10
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/325AC09ED0E611F1AAC7587D3066CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:5c:e9:73:5f:22:7f:9b:f3:f3:59:69:a4:aa:cc:99:75:8e:
         39:ae:5d:2d:63:85:d3:51:64:c4:d7:3a:45:eb:37:85:59:98:
         09:cc:a3:55:1e:ca:32:50:fa:82:b7:05:5f:79:aa:93:28:ec:
         2d:0b:76:1e:28:0c:55:84:11:32:0d:79:05:73:8f:ed:64:13:
         ee:98:5e:74:f1:67:8c:1d:cf:be:8a:3c:f6:a6:b1:3c:03:c9:
         41:ce:d8:e5:6e:96:85:ac:c9:cb:f4:3f:2c:2f:d5:36:c0:d4:
         67:44:b1:df:b4:3d:3e:e6:5d:7c:a4:c7:df:b2:a3:63:2c:17:
         6c:e9:6a:c5:9d:e0:2d:c0:8f:5e:96:1c:78:aa:5f:e9:ad:84:
         28:a5:46:e6:08:cd:50:7d:5d:79:e2:cf:b3:30:c9:39:a8:c5:
         d6:45:01:71:fa:74:c5:52:38:53:2b:15:6c:1e:51:24:2c:0d:
         b0:75:57:91:3c:5f:28:3c:d0:54:52:16:e0:0f:12:8a:95:30:
         5c:a7:28:61:2b:18:54:38:fc:fa:d2:61:30:44:67:7f:e0:4a:
         cf:15:31:fc:d4:89:9a:f3:39:d0:1b:fe:94:9d:ed:93:f9:09:
         6e:5b:4c:0d:c8:2b:df:10:37:57:50:2d:a5:d9:b7:80:13:12:
         58:1e:c7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:12:02 2026 by rpki-client