Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/AACDF7F4607911F1893E912B6A47A888.roa
File:                     AACDF7F4607911F1893E912B6A47A888.roa (raw, json)
Hash identifier:          xBTkliiac8uzI87RQGQVxsN9awAByb8s4nlsJMcUzHA=
Subject key identifier:   3C:85:C2:BA:F0:D5:46:89:E7:99:E5:A6:D5:3B:9B:E8:91:63:59:70
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0388
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/AACDF7F4607911F1893E912B6A47A888.roa
Signing time:             Fri 05 Jun 2026 02:34:11 +0000
ROA not before:           Fri 05 Jun 2026 02:34:11 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        202.134.230.0/24 maxlen: 24
                          202.134.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 02:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904 (0x388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 02:34:11 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2235a3-a9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:f1:5d:fd:7e:2c:98:fa:1a:6c:6e:16:9e:
                    b6:98:cf:f3:22:e4:0e:01:8a:5b:c5:be:55:17:b1:
                    f4:b9:96:83:19:2f:1a:e7:94:68:3f:c7:0b:c7:39:
                    bf:fb:53:95:72:4e:b5:36:64:7c:d8:bf:b3:5b:ef:
                    56:37:72:dc:86:fe:0e:c5:86:11:8f:3e:76:b1:b3:
                    8f:66:52:ef:d9:81:45:52:98:f7:5d:7d:eb:bd:fb:
                    b9:7f:aa:d2:7f:d0:e5:8d:7d:57:09:2c:dd:fc:43:
                    a1:82:06:ee:9c:f9:56:f1:be:b0:03:ab:81:84:ba:
                    34:02:12:43:70:b2:4a:d1:bf:a6:61:73:41:ab:8b:
                    fc:a0:7d:fb:bb:98:5d:c4:99:3d:b3:dc:36:e8:35:
                    80:82:70:51:9c:7a:a3:f1:9e:96:f4:eb:89:d5:c2:
                    42:b6:10:56:3d:e6:a2:aa:c3:e9:f1:b6:61:0f:d4:
                    b5:a0:c7:5d:32:4d:48:73:e0:c6:9e:3d:64:b1:c0:
                    73:5c:e3:5d:b9:a0:fa:ff:f3:8d:31:1b:01:1a:14:
                    ea:3f:8e:01:03:d9:0a:7f:4b:73:2b:a5:8f:54:77:
                    d3:08:97:4d:49:35:8d:8d:dc:d4:d7:20:59:2f:7a:
                    d2:5e:12:8f:25:1b:a6:57:36:37:61:b4:17:30:c4:
                    d9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:85:C2:BA:F0:D5:46:89:E7:99:E5:A6:D5:3B:9B:E8:91:63:59:70
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/AACDF7F4607911F1893E912B6A47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.230.0/24
                  202.134.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:13:25:65:ce:57:81:a8:c7:60:73:f7:4b:e8:9d:0b:ff:
         e7:99:0c:bd:35:dc:35:87:17:51:ed:29:34:2b:20:a2:98:3d:
         e9:2b:70:7e:98:e3:88:99:db:b3:70:04:04:77:e1:38:22:c0:
         e7:61:66:f4:d9:16:f6:f0:d2:60:4c:cc:49:6a:09:00:c4:f6:
         7b:02:19:76:c2:76:78:7e:86:1e:21:65:af:10:52:dd:0d:f3:
         1a:8e:af:c2:b0:9c:9e:c5:10:83:c3:9b:ca:b5:d1:80:43:73:
         da:5a:56:56:69:8f:3c:19:56:2a:16:a0:93:07:be:de:5a:3b:
         82:7c:6d:5f:12:95:59:47:0f:46:50:a9:dc:02:4b:a1:cd:ad:
         f6:54:81:ac:17:45:81:8d:8e:a8:f5:3f:53:f3:51:12:2f:b2:
         88:c0:05:0a:24:c6:10:f1:73:23:46:c4:fe:0a:28:2f:2c:0e:
         f9:86:31:b9:38:fb:06:95:eb:db:40:94:01:88:9e:05:4a:bc:
         66:9c:a7:9a:f5:42:33:af:35:b7:05:e6:12:5d:96:48:41:61:
         97:b9:3e:b4:ec:f2:c0:3c:71:40:55:07:b6:a0:b4:2a:67:5e:
         6a:dc:a7:72:38:2a:c7:fa:18:62:c3:6a:b5:9d:20:04:23:0a:
         9b:28:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:38:59 2026 by rpki-client