Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/F178A90CC21611F18CBEF04A5211F970.roa
File:                     F178A90CC21611F18CBEF04A5211F970.roa (raw, json)
Hash identifier:          6pgq8qagWZ9lZr8pEWts7bla5Dp83s6CSUdwifQv0VE=
Subject key identifier:   9C:DC:74:E9:07:A9:67:92:1E:3A:0C:58:E1:CB:21:C8:9F:04:F6:18
Certificate issuer:       /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
Certificate serial:       362C
Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/F178A90CC21611F18CBEF04A5211F970.roa
Signing time:             Wed 07 Oct 2026 06:18:43 +0000
ROA not before:           Wed 07 Oct 2026 06:18:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138984
IP address blocks:        112.134.16.0/20 maxlen: 24
                          112.134.56.0/21 maxlen: 24
                          203.96.160.0/22 maxlen: 24
                          2402:d000:10c0::/43 maxlen: 43
                          2402:d000:10e0::/44 maxlen: 44
                          2402:d000:10f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl
                          rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13868 (0x362c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
        Validity
            Not Before: Oct  7 06:18:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6ac5e443-86a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:16:ae:e2:8d:21:89:56:6d:a8:fd:aa:ad:
                    5c:21:d8:10:64:f8:c5:e7:c3:1d:17:05:fb:fa:a3:
                    7d:2d:36:76:73:da:3c:76:da:7f:c7:de:d0:98:10:
                    a8:8b:be:1a:b1:da:3d:c9:20:c6:30:30:c3:ae:aa:
                    a1:c6:c1:1e:ca:a8:53:cc:76:56:c1:c1:04:e1:eb:
                    c5:5f:4b:5d:42:92:72:c3:9e:45:51:16:21:bb:3c:
                    5b:62:7a:ae:87:c3:ad:ac:28:37:a9:0e:37:72:90:
                    43:30:9c:4c:06:60:38:3e:77:40:a1:52:81:86:b4:
                    94:55:c0:fa:fb:f9:92:f7:75:48:71:0d:70:b3:6e:
                    10:06:23:fa:c3:29:d1:5e:6d:54:a2:6e:cc:1d:da:
                    bb:a4:44:61:7e:09:fb:51:35:eb:76:60:f8:4d:e0:
                    2d:e6:51:8a:b0:8d:67:8b:91:3b:bd:7a:cc:9f:16:
                    37:0c:ef:3b:bd:6b:ee:3f:41:5d:a2:52:31:f1:d8:
                    68:35:b2:1d:7b:e0:3b:65:8e:b5:14:18:7f:73:70:
                    cc:f9:a8:e4:c9:ef:45:9a:74:44:13:50:17:a4:9e:
                    8d:bb:60:5f:d8:ff:4b:e0:0d:70:5c:e5:48:b4:c5:
                    fe:06:18:39:11:e1:ce:df:a9:40:3f:26:f0:46:52:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DC:74:E9:07:A9:67:92:1E:3A:0C:58:E1:CB:21:C8:9F:04:F6:18
            X509v3 Authority Key Identifier:
                keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/F178A90CC21611F18CBEF04A5211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.134.16.0/20
                  112.134.56.0/21
                  203.96.160.0/22
                IPv6:
                  2402:d000:10c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         8c:34:ec:4e:64:98:70:7c:58:91:14:99:2c:75:ba:0c:e9:72:
         cd:40:56:ee:b7:86:80:ba:c4:71:78:36:29:27:40:4d:6e:5e:
         16:1b:5f:b7:ea:a9:1b:32:e2:8c:da:20:da:71:cc:3f:15:42:
         a1:1c:6b:2a:46:17:0e:7f:68:75:e7:a9:62:f7:bb:6d:72:4c:
         cc:b4:73:3c:25:67:47:0f:fb:6e:7f:14:ea:79:ad:2f:9c:e4:
         6e:4c:37:04:37:ff:85:7b:fb:f4:aa:f2:5f:45:2f:43:96:5a:
         e2:ae:93:5f:f6:f9:4c:7d:24:08:ef:75:67:c9:2b:15:da:ae:
         63:84:45:fe:47:4f:e1:6d:c8:95:cf:93:a7:53:df:76:24:ae:
         a0:53:e0:15:e2:5b:a8:90:50:72:b2:86:7a:6b:47:4d:4b:b7:
         37:87:e6:8b:46:e3:64:04:93:07:d2:77:1e:51:2a:22:47:38:
         8b:02:2e:46:1f:c4:fc:07:28:db:27:dc:f6:1e:35:55:ee:90:
         f4:07:2e:64:92:fb:89:9c:ec:dc:33:ea:33:f4:9c:30:27:25:
         ca:85:bf:71:ef:b3:9b:1e:bf:50:dd:0c:6a:d5:40:a5:29:f6:
         94:4a:e4:e5:f6:8e:1f:90:c4:20:1b:d6:43:30:71:b7:96:02:
         c8:af:f7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:19 2026 by rpki-client