Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/8FFB2630B10111F1AE8BBA243D11F970.roa
File:                     8FFB2630B10111F1AE8BBA243D11F970.roa (raw, json)
Hash identifier:          YxJ2d51tMsUpw+2ddtSf1duMJG01HXSLhtdJwr14ZqA=
Subject key identifier:   92:D2:A1:AE:BB:B4:20:94:F6:2C:92:46:71:E2:15:84:A3:15:BA:EF
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       03DC
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/8FFB2630B10111F1AE8BBA243D11F970.roa
Signing time:             Thu 15 Oct 2026 23:06:58 +0000
ROA not before:           Thu 15 Oct 2026 23:06:58 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     7346
IP address blocks:        202.134.239.0/24 maxlen: 24
                          202.134.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 03:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Oct 15 23:06:58 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ad15c92-f1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e9:3e:bb:ec:de:32:9a:67:2a:c7:12:81:72:
                    fd:1e:0d:41:aa:77:9c:b7:d8:de:eb:e7:bb:88:8d:
                    a7:f2:5f:43:6f:71:3d:83:6e:99:1f:c6:f8:66:80:
                    8b:79:94:72:7b:b5:4d:63:fa:21:d8:7a:86:9c:0d:
                    65:73:8a:27:f4:4b:7d:60:76:0a:7a:9f:2d:91:1c:
                    15:c2:64:5f:f3:70:f3:29:2a:96:79:6a:b1:c8:56:
                    52:0f:6e:04:e0:b1:e0:e5:58:c8:2e:a6:83:08:a0:
                    4d:f1:4e:ec:1c:cb:17:a1:fb:dc:b0:12:6b:a2:62:
                    82:ad:87:06:90:de:d5:e2:3c:07:49:b0:e2:f7:94:
                    2b:9d:fd:e1:3c:1c:e7:ea:3d:1e:fe:ee:f4:3a:fb:
                    7f:27:87:1d:51:7e:36:23:50:90:f4:2d:e9:8b:e2:
                    cf:7a:52:3e:05:50:ef:6a:c9:3b:b0:4e:62:71:30:
                    d6:02:8b:52:ac:57:1f:bf:4b:25:e9:cf:db:7a:98:
                    20:25:de:75:7f:f8:9c:fb:7e:67:84:ea:17:b0:07:
                    ea:6d:5b:4d:3d:55:7a:f9:80:a4:52:d8:09:94:5a:
                    43:3b:23:8d:de:e7:48:16:95:1d:1e:11:31:a2:af:
                    7b:a9:31:cd:3b:eb:40:38:fd:f6:16:09:9e:7a:00:
                    f1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D2:A1:AE:BB:B4:20:94:F6:2C:92:46:71:E2:15:84:A3:15:BA:EF
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/8FFB2630B10111F1AE8BBA243D11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.239.0/24
                  202.134.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:ff:76:dd:f9:21:cd:ed:0d:ab:eb:31:54:8a:2d:ef:aa:74:
         de:47:3a:05:99:bb:20:aa:be:94:39:26:bf:e8:91:02:32:57:
         27:c6:63:10:f1:1d:8e:58:d8:e8:6e:fb:c6:32:58:65:17:64:
         ed:73:63:87:30:12:3d:f2:35:b1:a8:71:e6:86:b6:7b:25:20:
         5a:52:36:d2:90:7f:29:67:e1:01:93:d4:6c:91:02:70:b0:8e:
         b5:9f:05:90:53:0b:9d:de:13:4e:bb:58:b9:8c:63:be:60:2d:
         19:1d:5a:66:68:f8:cd:76:49:26:c3:87:68:42:8d:37:78:e9:
         14:44:2f:07:35:3b:a0:74:2f:f4:fc:1b:b8:2f:b2:46:2d:1d:
         1a:b2:1d:b1:ad:12:44:7a:ad:dc:84:fc:41:85:3a:9e:68:a8:
         d5:fd:c6:d7:28:51:76:25:02:fb:be:a7:47:e5:5a:55:17:ce:
         a5:97:55:91:7e:01:6e:2c:ac:c3:58:55:ca:c2:9c:a8:d0:32:
         4a:c2:eb:d8:5f:7c:f1:02:0d:c8:20:52:7f:70:0c:79:e6:5d:
         eb:38:a2:e8:32:30:63:4d:0c:47:f3:7d:68:62:10:e7:e8:3b:
         4e:ae:4f:25:18:56:0a:f8:09:14:55:7d:7b:f2:42:32:51:61:
         a2:84:77:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:29 2026 by rpki-client