Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FBF6C06AC15F11F1B0D3B52D5811F970.roa
File:                     FBF6C06AC15F11F1B0D3B52D5811F970.roa (raw, json)
Hash identifier:          h1DqQy5ozfsfdvg1mhozNt/ZcimIhyngx7BSik8G+kQ=
Subject key identifier:   0F:74:AE:B1:2E:14:76:A4:14:4C:39:78:F9:7C:A1:BE:C8:F0:CE:88
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2FF8
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FBF6C06AC15F11F1B0D3B52D5811F970.roa
Signing time:             Tue 06 Oct 2026 08:29:02 +0000
ROA not before:           Tue 06 Oct 2026 08:29:02 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     212219
IP address blocks:        202.92.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 09:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12280 (0x2ff8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Oct  6 08:29:02 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ac4b14e-6845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:27:c6:eb:bc:e2:81:eb:ac:e0:18:20:02:
                    0c:1f:83:ac:81:37:ec:7e:d9:09:43:c6:89:54:3d:
                    d5:97:47:d7:4e:bd:b4:10:d3:36:76:0e:ef:a9:08:
                    76:9e:5e:bb:63:7e:15:87:3a:87:31:45:bd:85:a7:
                    93:33:fc:ad:c2:ed:65:27:83:35:b4:57:28:f6:ec:
                    07:fe:19:a1:38:49:d0:f4:46:39:81:39:3b:dd:87:
                    6c:73:f8:dc:dd:e9:1f:54:2d:5a:c9:3f:cc:8f:14:
                    6e:1c:e2:76:ed:c6:fc:d8:da:93:a8:ce:90:9e:93:
                    b0:71:87:89:3f:b2:0d:b2:64:d3:ee:11:3d:d1:37:
                    2a:9d:ef:26:65:c8:4f:51:a8:c7:6d:48:60:c2:71:
                    44:6d:4a:af:10:ac:f7:4a:72:b4:53:f6:c4:8b:ba:
                    23:0e:d4:29:3b:dd:85:a1:c7:a7:b3:8a:c4:32:e3:
                    ac:3d:a1:6d:85:22:bf:73:f9:ef:88:fd:46:ca:96:
                    17:0d:86:4f:08:20:f9:6f:37:a5:b0:42:6c:f2:d9:
                    ac:99:b5:9b:0c:ec:8f:dc:ff:ec:62:ce:cb:5e:89:
                    b2:00:b4:49:29:ee:d5:74:00:8e:58:c2:93:12:0d:
                    6c:3a:f2:5e:e0:eb:39:43:1f:43:e6:65:bf:f1:92:
                    c3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:74:AE:B1:2E:14:76:A4:14:4C:39:78:F9:7C:A1:BE:C8:F0:CE:88
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FBF6C06AC15F11F1B0D3B52D5811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:3c:89:e7:c4:79:ff:56:5f:0c:39:8f:57:01:8d:18:f0:34:
         e2:d4:7a:66:44:c5:12:70:ae:b6:9e:ff:83:51:f5:af:5d:e6:
         98:fa:ca:ea:0e:c7:65:c1:b9:24:03:a7:7e:7e:c7:19:0b:c3:
         e6:e8:92:c7:11:11:2f:09:2e:e7:b6:04:27:8f:4c:6d:3f:38:
         8e:13:38:7f:dd:b5:4b:df:b7:29:c0:99:6a:0e:44:f5:2c:7d:
         9f:3f:d0:32:be:4c:b7:56:d7:b7:65:3d:eb:10:60:aa:0f:d4:
         4c:be:91:6e:72:c9:6a:3a:b1:2c:7d:dc:24:dd:ad:b7:97:a5:
         71:c3:08:07:52:24:df:af:bf:c5:8c:f4:39:43:04:75:ec:b7:
         db:cf:f5:88:cc:c9:42:f8:f0:38:80:5e:8f:ab:de:4a:a3:4e:
         64:5e:8f:e5:77:79:f2:40:01:ba:a5:ac:86:d0:e3:c5:47:0b:
         b1:10:66:24:68:30:50:ca:9a:8d:e8:2e:94:20:6a:05:f1:ce:
         2b:49:6c:c2:13:9e:f9:bd:56:cd:e0:61:0f:7f:63:db:07:69:
         77:f9:b7:cd:58:f6:7f:3d:39:a3:bd:5b:4e:a6:c4:55:55:41:
         17:06:14:b1:67:94:d9:94:72:fe:09:7f:28:b7:36:2d:c5:d2:
         c7:b5:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 23:45:00 2026 by rpki-client