Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/C2C83BE49AA811F19B7965243F11F970.roa
File:                     C2C83BE49AA811F19B7965243F11F970.roa (raw, json)
Hash identifier:          jO08CRGsDF/PdACbK4TpuTZbLUeaa6DXFJLfMy7ydYc=
Subject key identifier:   C0:FC:91:E2:B4:BE:43:34:70:E9:56:28:0E:54:BD:AA:5A:BB:80:AC
Certificate issuer:       /CN=A91D1F47/serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
Certificate serial:       16
Authority key identifier: 36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/C2C83BE49AA811F19B7965243F11F970.roa
Signing time:             Tue 18 Aug 2026 02:01:44 +0000
ROA not before:           Tue 18 Aug 2026 02:01:44 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     18402
IP address blocks:        203.78.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1F47, serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
        Validity
            Not Before: Aug 18 02:01:44 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a83bd08-6cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:8b:5a:94:ac:24:4c:13:89:0c:5f:f5:34:
                    d7:61:fd:f8:4a:d1:3c:78:e5:ae:4d:75:67:18:b9:
                    de:70:dd:04:48:44:e9:57:24:71:f9:53:1b:f3:fe:
                    d3:34:e2:70:62:2e:3b:3d:51:d5:ea:56:4b:f0:8a:
                    30:7b:4e:42:35:0e:50:07:3f:4e:cb:26:81:42:74:
                    ac:3d:e7:e3:41:e0:55:a1:9f:1f:57:3d:01:a5:ac:
                    9b:f2:aa:55:55:e6:fb:b1:2e:59:15:2f:e8:79:c9:
                    d5:75:b0:e4:7f:5d:88:c8:c9:fa:a7:9f:cb:22:bf:
                    88:c8:62:bd:ee:21:b2:3b:d4:02:ac:99:b6:88:07:
                    2e:5c:99:8f:b6:d4:be:20:cd:ab:d7:10:95:5d:72:
                    26:0c:ab:da:6e:cf:49:56:80:27:ef:43:a9:0b:f3:
                    f0:e9:3b:b9:e0:e5:38:f1:ab:21:fa:b9:b4:6a:00:
                    50:4a:fc:47:e2:9b:0c:af:8c:32:24:21:f9:2d:fe:
                    35:34:89:c5:27:a0:3e:49:e3:13:f9:3c:bf:fb:7e:
                    45:4c:99:d2:1f:40:08:ce:5e:34:2c:f7:53:02:32:
                    b9:0a:75:2b:a4:05:3d:5d:bd:ea:60:d2:70:8f:52:
                    92:07:10:07:f4:7a:20:ef:b9:fb:e8:81:47:86:78:
                    a6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FC:91:E2:B4:BE:43:34:70:E9:56:28:0E:54:BD:AA:5A:BB:80:AC
            X509v3 Authority Key Identifier:
                keyid:36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/C2C83BE49AA811F19B7965243F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.78.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:d0:2f:0e:3b:1d:a1:03:d4:03:c9:6b:b6:32:01:c2:21:77:
         c0:80:56:fc:3a:11:b4:fa:27:1f:f9:db:68:e4:10:0b:5c:77:
         fb:af:1b:ed:8b:5e:8f:83:c8:28:b0:a0:71:20:96:27:2b:4b:
         69:c8:4e:85:92:98:ba:b0:9d:65:b5:17:4e:6c:a0:0e:dd:f5:
         ef:bc:e3:00:f4:12:74:dc:83:71:b2:66:17:ce:2b:98:f7:df:
         22:7a:78:38:57:16:a9:a7:61:bb:e9:cc:0c:a9:5b:22:38:e4:
         9b:5a:22:46:8a:0d:eb:1a:86:5a:b1:0e:b6:04:43:5c:fa:a0:
         ac:5a:40:09:9f:3f:e0:b8:8e:de:82:80:95:d4:bb:18:ce:45:
         c2:dc:17:59:48:b0:79:cb:45:5d:1b:f9:38:9f:e3:d0:8b:16:
         b0:23:51:fa:6c:04:02:0e:51:5e:ce:c4:bd:1b:27:eb:d5:0c:
         ba:20:0c:ef:13:b9:69:d0:99:d7:9b:e2:84:eb:6b:ae:12:44:
         cb:b3:d9:37:5a:ad:8d:fb:3e:ef:93:50:6b:d0:f8:55:22:d9:
         06:fd:1a:75:ab:11:c2:5d:a9:4a:2a:a3:aa:cc:40:d5:78:65:
         01:ec:e6:3e:bb:9b:be:ef:ee:c3:31:45:29:ac:75:3f:e6:fa:
         25:c6:d4:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:43 2026 by rpki-client