Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DE194D08AA9C11F19F04260F3311F970.roa
File:                     DE194D08AA9C11F19F04260F3311F970.roa (raw, json)
Hash identifier:          sjmWl1oslUuNyOaGiFybs67KITawAWqRvbDugu37hTA=
Subject key identifier:   EB:97:7E:18:1A:7A:7C:8B:70:CB:0D:29:1F:39:16:13:15:0A:A9:05
Certificate issuer:       /CN=A91D7818/serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9
Certificate serial:       03
Authority key identifier: 42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DE194D08AA9C11F19F04260F3311F970.roa
Signing time:             Mon 07 Sep 2026 09:16:54 +0000
ROA not before:           Mon 07 Sep 2026 09:16:54 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     149768
IP address blocks:        163.52.68.0/24 maxlen: 24
                          163.52.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl
                          rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7818, serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9
        Validity
            Not Before: Sep  7 09:16:54 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9e8106-ec47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:05:5f:9a:36:a3:68:ce:a7:ed:08:82:1d:
                    05:73:76:36:d6:28:4f:89:24:0e:45:ab:86:77:93:
                    13:c9:0b:69:a6:08:a7:9a:a0:cd:f3:c9:5d:fb:a7:
                    b6:56:9e:4c:a7:0f:ce:0e:05:5d:bd:be:c0:f8:d5:
                    fc:f2:f6:66:c3:fd:83:55:76:28:41:6e:a9:3a:e2:
                    e3:fb:55:b5:e2:55:88:5d:b7:f4:d2:29:b3:53:6b:
                    c3:75:cb:1a:2c:ff:fa:3f:4d:08:38:d2:5a:4e:be:
                    03:b5:6a:6d:71:08:47:2b:25:aa:be:eb:50:46:65:
                    a9:4f:5f:63:a5:e7:dc:59:9e:d4:d5:29:38:b6:0f:
                    dd:87:b5:35:ec:1e:a8:1b:da:ef:30:cc:30:d2:81:
                    78:16:dc:78:57:e8:4c:61:40:ff:92:7c:85:06:cc:
                    2c:27:39:af:58:41:7c:8b:3e:7b:68:bb:79:85:5b:
                    97:02:47:52:0f:65:8e:2f:eb:57:3b:62:a7:16:f3:
                    7d:f9:40:91:be:be:7a:42:bb:6c:89:8e:c6:f9:4a:
                    d5:f6:19:75:22:ee:d3:d6:b9:bb:b1:c7:b7:d6:fc:
                    72:dd:65:47:d6:3b:66:2c:5c:4d:bf:85:75:60:23:
                    85:fe:76:ee:c3:a5:60:27:f5:7e:c1:d5:85:8f:6e:
                    98:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:97:7E:18:1A:7A:7C:8B:70:CB:0D:29:1F:39:16:13:15:0A:A9:05
            X509v3 Authority Key Identifier:
                keyid:42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DE194D08AA9C11F19F04260F3311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:c1:2f:cf:aa:fb:82:f0:e5:db:7e:c8:19:ba:ab:dd:0b:78:
         28:be:0b:af:15:8d:a9:61:47:96:f6:eb:c2:a6:c7:9d:ca:3a:
         1d:c7:39:36:7c:39:3c:53:f0:ca:84:44:a0:02:b0:9d:94:b2:
         f6:f8:e5:87:41:1f:2b:ec:df:2a:38:d0:1f:da:b1:37:7a:ee:
         6c:ec:c4:f2:cb:ff:96:b8:39:d3:a6:17:d0:ae:b4:11:26:f6:
         74:9d:d0:8a:56:ed:b0:bc:57:bf:c1:aa:9e:66:7d:da:3b:aa:
         29:6d:0a:b9:69:68:9a:69:fe:3b:71:3a:50:1b:de:41:de:a5:
         5c:89:a6:a5:b8:44:40:ca:e4:61:97:3f:0d:2c:de:04:52:8a:
         08:52:7a:97:22:c0:ac:3a:20:1f:71:1f:ab:fe:52:53:05:c1:
         65:13:af:f5:8e:cf:93:a7:4a:f3:4c:ab:37:31:67:ac:5d:f0:
         29:ab:6c:0c:09:e4:5c:69:61:c4:51:7e:f8:fb:06:60:80:13:
         88:bc:3f:6b:d1:bf:1f:f9:46:76:a9:87:66:a0:c9:86:8e:6e:
         84:87:e9:37:36:3d:1c:ce:ff:32:8d:91:69:9a:d7:5a:13:bb:
         7f:aa:47:05:d5:97:71:18:1f:10:26:22:a2:97:26:47:17:13:
         14:4d:30:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:23:10 2026 by rpki-client