Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/9EFE48D0A69B11F1A765D2433411F970.roa
File:                     9EFE48D0A69B11F1A765D2433411F970.roa (raw, json)
Hash identifier:          2UrnpJXet7VCklAYIcXnXQOboG+3YKzzoeIW7h4GmNY=
Subject key identifier:   83:FA:F0:43:C8:FB:1F:42:34:77:90:4B:90:BA:DD:B4:73:51:EA:CB
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       239B
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/9EFE48D0A69B11F1A765D2433411F970.roa
Signing time:             Wed 02 Sep 2026 06:57:54 +0000
ROA not before:           Wed 02 Sep 2026 06:57:54 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     63099
IP address blocks:        220.158.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9115 (0x239b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Sep  2 06:57:54 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a97c8f2-77f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:33:ef:19:64:86:15:b2:86:74:45:dc:38:30:
                    61:76:39:f2:80:11:c6:2f:25:43:60:9f:4d:64:37:
                    26:60:d8:b5:49:d9:e9:e8:09:1a:ce:8b:6f:16:50:
                    36:e4:e7:5a:5d:66:b5:29:f2:e2:b0:9a:bb:39:02:
                    06:9c:d6:8e:4d:88:d8:f3:b8:db:a1:c5:b1:89:30:
                    b6:80:61:e8:2a:0f:54:c1:e0:cc:33:96:83:03:6f:
                    47:ce:31:4c:f0:04:be:bf:77:b2:51:ae:e7:fc:c0:
                    91:b6:7b:c0:90:e6:31:fd:6f:a8:49:34:87:83:65:
                    4f:ca:30:4e:0c:d4:fa:7f:3c:b4:c9:e5:e7:ae:61:
                    d6:b9:8c:b5:ea:c4:3e:18:1f:3f:36:dc:8e:f7:8c:
                    ff:2f:c3:0f:88:b1:e5:35:ba:24:ee:c8:73:a9:dd:
                    64:fb:bc:dc:e6:68:c9:90:22:7c:1c:99:5d:7b:a5:
                    97:a4:48:2d:cd:b7:16:98:e9:a7:88:56:a4:4d:35:
                    24:f3:67:df:04:ef:7e:9b:fa:12:88:7f:03:fc:18:
                    d9:ed:7a:25:5d:08:28:02:ea:aa:5b:72:51:d5:72:
                    18:f6:0e:0b:d4:fa:05:dd:59:10:1e:67:e2:e8:89:
                    03:4a:92:18:b6:52:e8:60:a9:f8:9c:01:a7:2e:3f:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FA:F0:43:C8:FB:1F:42:34:77:90:4B:90:BA:DD:B4:73:51:EA:CB
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/9EFE48D0A69B11F1A765D2433411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.158.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:66:09:d5:4d:6f:cb:db:59:59:2f:77:12:48:e4:3b:78:39:
         ec:de:cf:93:79:c6:d0:7a:66:ad:39:09:f9:26:a9:b0:83:37:
         19:c1:45:22:05:16:95:20:ec:5b:76:ed:33:ab:1b:36:27:4f:
         88:e6:d3:b2:c6:9e:d0:46:eb:da:18:63:7a:c6:de:9b:65:04:
         14:26:4e:02:ac:e7:c4:da:38:18:0a:06:a0:e4:00:f8:04:b9:
         dd:ff:56:2a:84:54:11:9a:69:e3:a6:43:b6:b8:9e:18:14:1e:
         ca:98:db:68:c1:a8:15:ab:7f:07:52:9d:51:f8:99:67:d0:92:
         81:03:2b:67:66:41:36:b0:2d:9e:13:63:fb:ed:c9:27:df:b7:
         a0:f3:c2:1f:bc:58:35:a6:75:c7:82:3e:20:49:26:5e:a5:fb:
         87:14:71:1c:30:b5:71:6b:a5:a3:94:6a:2d:55:a4:cd:2c:7d:
         c5:6a:5c:75:75:ee:13:1e:da:49:f0:5e:e0:d0:0c:89:c2:58:
         79:f0:48:a3:e4:a0:31:e1:b8:2c:fb:42:66:ad:ff:6c:5b:8d:
         a2:47:82:77:f4:05:9f:93:2f:0e:d6:42:c8:4c:81:65:f7:f7:
         57:29:d3:82:75:c1:0a:3f:fc:e8:3a:42:85:32:32:5f:32:ef:
         e7:56:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:41:04 2026 by rpki-client