Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/AFF169A0F34111F0B7AB4BD35C6F56BC.roa
File:                     AFF169A0F34111F0B7AB4BD35C6F56BC.roa (raw, json)
Hash identifier:          pFySgYfQ+xZ6rwACdfd3mWWdJ/XmIO+H3i8NnPDCsAQ=
Subject key identifier:   38:3D:B4:80:7A:2D:63:AA:9D:00:88:BB:E4:56:10:0B:82:DD:FF:BE
Certificate issuer:       /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial:       053A
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/AFF169A0F34111F0B7AB4BD35C6F56BC.roa
Signing time:             Mon 31 Aug 2026 23:47:41 +0000
ROA not before:           Mon 31 Aug 2026 23:47:41 +0000
ROA not after:            Fri 01 Jan 2027 00:00:00 +0000
asID:                     134134
IP address blocks:        116.204.242.0/24 maxlen: 24
                          116.204.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1338 (0x53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
        Validity
            Not Before: Aug 31 23:47:41 2026 GMT
            Not After : Jan  1 00:00:00 2027 GMT
        Subject: CN=6a96129d-8c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:be:fd:4b:83:39:3a:2c:58:98:29:3c:01:
                    21:74:cc:3d:95:b8:bc:aa:a4:f7:f0:08:a2:75:d9:
                    11:06:bc:d3:12:9d:a4:9e:52:41:f2:ff:85:93:ee:
                    dc:48:90:c9:29:03:d6:ff:49:ce:1f:3d:1d:86:9c:
                    82:89:5c:b3:df:59:24:97:ec:f3:92:59:b0:55:3b:
                    bf:c1:f3:62:e9:2e:80:14:33:18:47:e8:fc:6c:ea:
                    ea:d6:e8:44:3e:ef:2b:dc:78:e9:c7:2b:b9:9d:f2:
                    81:a3:72:84:34:6d:f7:6e:7f:7f:0b:48:fa:ad:3c:
                    ca:a0:09:ad:01:0d:b6:d8:f2:a2:4e:67:04:0a:84:
                    bb:ae:10:ac:45:54:99:6d:47:31:87:6a:cb:6e:04:
                    a1:53:39:26:2b:80:e0:42:0a:fd:66:c3:60:9a:4a:
                    54:25:89:ba:91:3d:ac:13:f7:b8:b2:1f:50:cc:70:
                    a7:19:08:9d:98:ba:24:4d:85:c4:f4:7f:74:82:4c:
                    ca:bb:f6:3f:e3:ce:41:48:0b:29:4b:47:92:fb:cf:
                    1f:42:a0:c2:09:c5:e6:45:23:94:8b:34:50:56:28:
                    cc:01:61:8f:02:9a:e9:1e:89:93:95:68:55:5d:31:
                    64:a0:96:2a:c5:53:c1:7a:fd:bb:0e:a3:1d:98:57:
                    9d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3D:B4:80:7A:2D:63:AA:9D:00:88:BB:E4:56:10:0B:82:DD:FF:BE
            X509v3 Authority Key Identifier:
                keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/AFF169A0F34111F0B7AB4BD35C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:2f:5e:f2:70:34:d7:37:ff:be:7d:92:e5:1a:0a:6a:88:6a:
         4a:28:71:59:b2:f6:97:96:46:3c:f8:79:f7:fd:67:59:91:48:
         21:af:4b:e4:b4:ef:90:69:5f:70:3b:fe:77:2b:8c:58:e6:0a:
         ef:2f:d9:0e:71:b6:54:aa:bd:a9:68:38:f4:46:bd:fe:9a:e9:
         44:bf:66:d2:8f:a0:97:60:33:df:4c:83:42:a6:40:88:af:df:
         2f:b9:02:47:4a:c8:b1:47:cd:c7:b4:12:45:f1:af:85:f1:10:
         f9:c4:41:c0:4c:1f:c8:d7:e6:cd:2b:f8:83:2e:d8:fb:0c:2d:
         27:9b:19:7a:42:3b:d5:f7:7d:ca:94:70:ee:ac:e2:05:fc:74:
         38:16:8d:77:e5:a5:5a:5f:64:0e:f4:d1:1f:9a:85:ce:91:aa:
         b3:04:e6:47:99:70:2f:5c:e5:88:c8:01:e7:ee:27:d5:95:b3:
         82:1f:fe:57:3f:ea:7b:9b:cd:18:88:6a:24:a6:f7:fc:aa:71:
         b6:38:33:2a:71:f2:8f:d4:83:73:25:ad:ea:ec:7f:62:dd:62:
         4f:5a:fb:63:eb:17:8c:fd:2f:89:f2:f3:59:03:fa:78:51:21:
         5f:47:e6:a4:99:fc:63:a0:ab:2e:88:fc:1e:1c:af:5e:9c:8a:
         de:cd:c4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:17:04 2026 by rpki-client