Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/DF9C04F4897811F08A9D002AC4F9AE02.roa
File:                     DF9C04F4897811F08A9D002AC4F9AE02.roa (raw, json)
Hash identifier:          TdcGUCFXzXTItt/U5FsMFNX2z6RTRrQyU46xfxrbahk=
Subject key identifier:   74:00:5E:FD:AA:DE:96:6A:2C:29:97:F4:4D:3F:20:63:4F:D2:1F:BD
Certificate issuer:       /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial:       038E
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/DF9C04F4897811F08A9D002AC4F9AE02.roa
Signing time:             Sat 29 Aug 2026 01:50:38 +0000
ROA not before:           Sat 29 Aug 2026 01:50:38 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     395793
IP address blocks:        203.21.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
                          rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 01:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
        Validity
            Not Before: Aug 29 01:50:38 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a923aee-4aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b2:b4:aa:ab:b5:99:1b:31:d5:e2:81:bb:5a:
                    40:81:1d:2d:82:ba:7a:cf:c4:ed:84:4a:4c:ca:23:
                    ba:21:3f:2a:a0:19:e8:f4:8b:bb:45:e5:a0:57:cf:
                    3c:c1:9d:32:20:10:3c:4b:7e:d0:93:f9:c7:38:46:
                    50:22:a6:bf:6d:53:1e:fa:5c:3f:a0:79:ad:f6:ca:
                    42:fa:df:0c:f3:6d:1d:7c:91:39:b1:27:54:8d:23:
                    e0:a8:cd:00:bf:e8:bf:0b:31:88:54:ed:e7:f1:cb:
                    c2:1f:2f:ff:41:c7:d2:72:21:ab:59:58:30:73:6e:
                    e2:2c:30:e6:b0:a1:2a:02:b1:b3:b9:55:67:44:60:
                    b0:fd:4a:e2:70:1d:f5:68:48:5d:a9:25:c1:d5:7f:
                    93:d8:07:86:ee:8e:13:d0:6e:f7:92:f2:a8:be:47:
                    c0:18:01:c0:d7:9b:be:57:df:0b:bb:38:e6:63:4b:
                    c5:b6:54:d2:4f:9f:27:4c:f6:4d:ff:ee:f5:33:14:
                    3d:bc:63:3b:a7:c4:11:c0:ed:31:83:de:91:3a:0a:
                    4b:42:9a:b4:79:66:8d:72:3e:1c:e8:b8:42:e5:44:
                    5b:4f:38:6e:99:bd:78:d4:7e:84:b2:a2:e4:1e:c8:
                    03:db:29:38:1b:6e:bf:61:64:bc:d0:2b:ed:74:cc:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:00:5E:FD:AA:DE:96:6A:2C:29:97:F4:4D:3F:20:63:4F:D2:1F:BD
            X509v3 Authority Key Identifier:
                keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/DF9C04F4897811F08A9D002AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.21.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:33:4e:00:92:70:74:c8:9b:32:b3:9e:b1:e8:34:90:3d:fd:
         1f:dd:5e:17:18:9a:5e:44:09:09:ae:98:8b:a0:06:a4:ca:d6:
         84:93:6e:8c:58:75:d6:a5:27:7b:69:2b:ce:65:94:77:61:f9:
         40:e9:21:8c:a7:45:c2:0a:f3:4b:fd:00:ba:ad:f6:fe:c8:df:
         01:11:49:70:07:61:1a:17:bd:a4:f2:77:64:40:32:45:ca:dc:
         37:48:38:40:e8:5a:c2:25:89:b5:5d:e3:24:b1:0c:40:8c:4e:
         7a:13:35:bf:11:bf:f5:a5:10:54:91:d8:26:91:be:0b:c6:2e:
         23:df:61:f7:7c:1c:30:b1:90:36:d9:25:e5:88:4e:b2:4a:7c:
         e9:c1:7b:d1:83:70:6f:05:90:cf:6c:8e:98:4a:7e:a7:92:eb:
         9a:5f:eb:44:04:3a:6e:69:3a:12:4c:e5:6f:e2:d7:49:60:1d:
         48:b3:03:c9:b3:99:59:7d:39:45:34:92:ba:23:c3:36:5a:ae:
         17:a2:84:ac:73:1d:e0:f2:85:bf:54:b1:c0:15:37:43:fa:14:
         fc:a5:57:f8:2b:40:47:0b:34:8a:0d:d8:b7:80:1a:f5:27:9c:
         5d:e6:be:12:23:bf:73:2f:9c:1b:07:50:25:13:7f:36:7c:af:
         61:07:40:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:20 2026 by rpki-client