Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/E4788F02DB4511EE89BB2666C4F9AE02.roa
File:                     E4788F02DB4511EE89BB2666C4F9AE02.roa (raw, json)
Hash identifier:          fwK+MOeIUhFbaomuIRZPQtXW/9VvU1JDlrhfy/OAaFU=
Subject key identifier:   A6:1F:53:44:91:25:55:99:7E:55:5C:61:31:9A:98:CE:70:E3:B6:DC
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0386
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/E4788F02DB4511EE89BB2666C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 02:34:08 +0000
ROA not before:           Fri 05 Jun 2026 02:34:08 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     59253
IP address blocks:        202.134.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 02:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902 (0x386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 02:34:08 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a22359f-4130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:d4:e5:94:62:0b:94:f8:f7:6a:85:dd:3a:
                    94:f5:02:34:2b:bc:7a:37:da:70:9e:05:43:cd:17:
                    cf:df:2a:51:dc:63:a2:b5:07:ce:35:25:2e:43:3e:
                    78:83:11:3d:e8:85:54:80:24:23:7a:28:c5:58:1a:
                    c4:04:b4:e0:7a:72:6c:21:fe:8e:2b:d7:98:b2:7b:
                    80:ff:3e:e7:cf:54:b9:b6:24:1c:a2:53:38:55:f3:
                    cd:fd:de:19:8c:8a:90:81:53:14:3b:c5:a6:1b:99:
                    50:67:96:14:9d:08:01:09:98:a6:cb:25:b0:72:37:
                    6a:80:be:e0:f6:64:7f:b7:1e:26:79:50:8b:db:9f:
                    f5:90:55:03:34:e3:88:39:ef:b1:e3:3b:a1:e2:b0:
                    53:9e:8d:d5:09:54:02:80:dd:8e:1d:5b:ec:2f:1e:
                    58:70:79:b0:92:aa:c3:86:c1:c0:94:ca:3f:47:e1:
                    6f:53:2c:69:db:2f:93:49:42:2a:4d:a0:7f:79:9b:
                    22:66:1b:20:f2:2a:67:30:4a:fc:dc:b9:1c:12:4d:
                    3a:9a:95:7e:0a:78:d7:e4:73:f0:64:79:94:c1:20:
                    00:ba:67:f3:77:0d:44:7b:ff:33:aa:ea:e4:83:ed:
                    f6:dd:87:5d:5e:59:1d:cb:e5:d0:58:46:36:db:eb:
                    60:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1F:53:44:91:25:55:99:7E:55:5C:61:31:9A:98:CE:70:E3:B6:DC
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/E4788F02DB4511EE89BB2666C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.134.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:20:aa:f7:ba:2f:84:8b:f2:9d:b4:02:24:d8:cf:50:b3:5a:
         42:fa:85:2f:cc:aa:e3:b3:a0:32:f4:24:8d:77:94:59:02:e4:
         2b:a7:6b:2c:59:7c:b1:84:bb:eb:29:75:0d:12:3c:86:6f:f5:
         15:81:f1:61:a9:5c:dd:98:c0:f5:2e:78:3c:57:d9:b2:dd:2e:
         8b:45:81:7d:3d:76:70:40:62:91:25:1b:a5:d0:76:4e:ba:ff:
         e7:a1:fe:4b:d5:1a:97:75:93:04:f3:48:47:50:d8:5a:f2:f5:
         75:44:87:1a:59:18:78:39:a1:e3:14:ec:43:f5:38:11:14:c6:
         08:60:ee:89:75:6a:8c:3b:87:78:0d:e4:64:d0:ae:64:2a:da:
         00:6a:75:07:85:47:0a:28:4c:6d:31:ed:0c:93:c5:b6:62:d4:
         a5:a3:d4:78:92:f0:12:77:28:34:35:34:17:02:f2:c9:d7:a2:
         11:75:68:d6:07:28:c3:9e:4e:72:61:e2:38:00:cd:17:1b:82:
         23:17:32:5e:17:8a:ee:c8:40:0c:10:bb:3e:7a:20:04:c9:1b:
         19:ad:5a:af:59:4c:e9:31:aa:31:33:b3:13:74:2f:88:5d:27:
         68:a9:81:dd:26:7d:6c:6f:21:ca:05:f0:26:65:f4:3c:3d:89:
         fc:77:87:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:44:28 2026 by rpki-client