Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DD890BBCAA9C11F19F04260F3311F970.roa
File:                     DD890BBCAA9C11F19F04260F3311F970.roa (raw, json)
Hash identifier:          dc58Ik+rvtv7DPEkUFFu4gn25qgDCCMkoi43G75u9yg=
Subject key identifier:   F8:0D:9D:66:1A:85:38:4F:88:4A:8A:64:53:3B:E4:7F:8E:D1:27:97
Certificate issuer:       /CN=A91D7818/serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9
Certificate serial:       02
Authority key identifier: 42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DD890BBCAA9C11F19F04260F3311F970.roa
Signing time:             Mon 07 Sep 2026 09:16:53 +0000
ROA not before:           Mon 07 Sep 2026 09:16:53 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     137047
IP address blocks:        163.52.68.0/24 maxlen: 24
                          163.52.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl
                          rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7818, serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9
        Validity
            Not Before: Sep  7 09:16:53 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9e8105-9de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:0b:9a:52:21:83:ae:8c:6f:52:bb:9c:80:
                    65:7b:a0:a3:79:9d:47:a5:ad:e2:3f:9c:78:5f:6e:
                    8e:b5:4c:56:59:7f:ae:66:45:6b:24:1a:a8:f7:01:
                    a3:c9:71:77:d3:b7:36:c2:c4:c7:53:3f:2c:68:56:
                    98:b1:f0:09:79:ed:68:05:55:34:0f:31:6a:e7:66:
                    2d:01:a1:16:a4:36:3f:c6:3a:a1:c0:d7:15:45:6f:
                    ab:6b:7b:03:f2:78:44:35:6d:f3:ea:69:6f:99:1a:
                    cd:79:fe:f6:40:39:57:b7:8a:0f:53:55:9f:7a:58:
                    1d:50:71:29:ba:89:35:75:15:c0:15:a4:25:82:d0:
                    43:37:26:ba:0a:89:34:ea:aa:e2:34:02:04:31:41:
                    31:ee:1c:2d:e5:c0:3c:5c:40:f9:5f:ab:a7:3e:b2:
                    2b:4e:43:4f:2e:b5:d5:06:19:7f:4c:36:c3:2a:08:
                    62:07:09:e9:3d:5c:61:c9:89:1f:dd:78:f1:12:2d:
                    7c:fc:d3:f6:3c:cc:cd:f3:dd:ab:8e:f3:37:05:2d:
                    44:18:90:6a:95:ac:2b:3e:36:fd:9a:2d:32:28:83:
                    68:50:f6:87:a1:3b:e7:13:0d:ac:5e:06:8c:e2:cb:
                    e1:85:59:93:b1:89:59:ca:91:a6:41:1d:9e:eb:ce:
                    dc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0D:9D:66:1A:85:38:4F:88:4A:8A:64:53:3B:E4:7F:8E:D1:27:97
            X509v3 Authority Key Identifier:
                keyid:42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DD890BBCAA9C11F19F04260F3311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:40:8c:b1:83:3e:49:0b:3d:a9:5e:75:b7:56:5e:1e:52:
         ab:16:2f:9b:43:d3:34:e5:d6:52:72:16:47:9a:53:53:51:a3:
         1c:0a:99:43:23:4c:91:5f:65:f6:b5:20:3d:6f:24:12:83:96:
         1a:fc:fc:f5:66:ef:c6:d3:6d:c4:24:af:9a:28:17:2d:c1:d0:
         b3:97:e8:b2:7f:5e:99:15:1f:7c:c6:02:89:e3:18:cc:1d:c1:
         17:a0:45:0a:1a:16:6a:24:d1:ca:12:e9:89:94:53:96:4a:35:
         ac:26:43:9c:0f:07:58:9e:8b:cb:bf:5b:f3:c1:0e:68:2b:7b:
         43:78:9b:1b:f1:6f:ee:75:fa:b8:03:6a:2d:b2:d9:0c:03:b7:
         6a:2b:8c:16:14:64:90:f0:77:50:bd:cb:16:79:0c:60:b5:24:
         39:0a:01:f5:84:6c:d2:0d:39:dd:d9:96:37:b5:26:96:3a:f2:
         6a:c9:b2:d5:40:1e:93:0b:ba:ca:2c:82:10:aa:98:6e:70:d9:
         6d:6f:c9:cb:c7:ea:1e:ba:e8:25:29:1d:18:fc:9a:28:47:bb:
         7b:38:fb:9c:32:fb:f3:f4:2e:9f:cf:43:7a:92:6f:a1:98:d1:
         14:6c:b5:4d:38:89:ee:e6:7c:fc:89:06:16:d0:2c:23:68:a1:
         b1:74:ad:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:23:08 2026 by rpki-client