Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa
File:                     9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa (raw, json)
Hash identifier:          t2gJHzvcOWvCsvCryzv4e3nkQa2GgkkDGSrdogOaQTc=
Subject key identifier:   F1:FA:85:1A:E9:8D:9B:E6:98:8D:4A:B3:58:40:90:8F:1A:DC:67:2F
Certificate issuer:       /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial:       1BD4
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa
Signing time:             Fri 24 Jul 2026 08:54:49 +0000
ROA not before:           Fri 24 Jul 2026 08:54:49 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     3949
IP address blocks:        116.51.19.0/24 maxlen: 24
                          116.51.20.0/24 maxlen: 24
                          116.51.22.192/28 maxlen: 28
                          116.51.22.240/28 maxlen: 32
                          116.51.23.192/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
                          rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 14:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7124 (0x1bd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
        Validity
            Not Before: Jul 24 08:54:49 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a632859-e168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:ab:ac:49:56:04:ff:d2:ae:cc:6d:9a:4a:
                    03:b2:8e:e2:c8:02:b5:4d:63:ff:fe:23:86:a4:9f:
                    cb:32:ce:6e:f2:85:38:5e:ce:c4:f9:07:97:b7:37:
                    26:9e:ab:c4:2a:96:c5:3f:8d:9a:5c:f4:43:ec:f2:
                    12:a2:99:3d:33:f0:10:fb:3b:58:af:dc:d8:5d:d9:
                    4a:d4:a6:3e:27:76:7e:30:70:ee:67:1d:a4:45:6d:
                    5f:54:f4:87:87:34:ba:6d:70:c2:b9:78:88:18:53:
                    4c:e4:1d:47:08:12:ad:d0:c6:4a:7f:7a:3a:ec:ea:
                    32:73:ea:e4:a4:d6:10:e3:3c:5c:3e:eb:b5:b3:75:
                    84:ac:d6:b2:6d:d7:8f:28:16:25:ef:be:69:a0:e6:
                    4f:55:fa:e9:e8:1a:e1:fa:77:76:d0:55:e2:1a:55:
                    f7:78:97:4a:65:f8:58:99:25:35:da:05:7e:de:e5:
                    bf:9a:d5:e4:9d:12:44:a8:76:1c:86:1c:de:c4:a2:
                    b2:8b:45:73:90:9f:da:10:b1:d7:73:05:43:ca:f0:
                    e3:c9:c3:23:1f:eb:a8:ce:e5:be:09:94:8c:de:c8:
                    dc:6d:b5:8a:cf:ca:25:da:a9:f5:08:e7:32:06:f0:
                    d9:74:cf:db:47:e2:42:b0:51:d2:4b:87:aa:d5:bd:
                    24:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FA:85:1A:E9:8D:9B:E6:98:8D:4A:B3:58:40:90:8F:1A:DC:67:2F
            X509v3 Authority Key Identifier:
                keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.51.19.0-116.51.20.255
                  116.51.22.192/28
                  116.51.22.240/28
                  116.51.23.192/27

    Signature Algorithm: sha256WithRSAEncryption
         67:07:77:10:93:0b:64:c3:e5:c9:f4:10:78:54:19:95:f0:35:
         ca:79:f6:e4:94:73:ac:6a:bf:35:40:0c:1d:4c:06:ca:54:81:
         84:0b:b0:be:74:cd:59:20:9a:13:1b:0f:8a:03:04:d4:be:67:
         4d:84:e3:c4:99:cf:69:44:35:63:5b:80:b4:7b:69:8a:be:6b:
         c5:48:62:50:1c:49:8c:a1:84:58:84:41:af:6e:5c:64:a5:09:
         c7:fb:a1:c8:39:7a:9c:e8:75:9e:39:23:9e:4b:80:ba:f4:1c:
         f0:4d:92:32:61:2d:e7:e2:a5:8b:4a:2d:94:cb:71:5e:20:b4:
         43:78:5d:fa:55:d5:56:2c:53:a6:98:ab:70:53:69:bb:53:55:
         94:c3:08:29:17:b7:a9:ad:ca:aa:a0:9b:e9:63:5e:5d:2d:9a:
         2d:0d:64:5f:24:e2:f4:f6:62:24:2f:c3:c5:a7:97:85:7b:6e:
         03:a7:6c:f5:76:c3:0f:04:4e:4b:11:64:2c:e6:31:a6:d2:aa:
         fb:39:d7:c3:71:ba:13:bc:47:1a:9a:66:fa:34:68:45:4b:7b:
         08:94:a6:71:1a:95:e5:bb:d8:27:bb:1e:91:10:0e:df:bf:a5:
         5b:13:8e:8c:6e:55:db:1d:37:ca:80:93:f1:39:09:78:4c:e5:
         d9:8e:98:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:22:02 2026 by rpki-client