Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/F097E10C5C7311EF9CC47281C4F9AE02.roa
File:                     F097E10C5C7311EF9CC47281C4F9AE02.roa (raw, json)
Hash identifier:          K6jEuDhrI6n4J7VT22Lor71QYUQWjz6kVz3VBemDBVw=
Subject key identifier:   AD:CB:C5:65:E9:39:61:C0:9D:F4:53:8C:64:CA:49:D8:C9:76:00:64
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       36ED
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/F097E10C5C7311EF9CC47281C4F9AE02.roa
Signing time:             Sat 18 Apr 2026 09:23:21 +0000
ROA not before:           Sat 18 Apr 2026 09:23:21 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        117.121.245.0/24 maxlen: 24
                          117.121.247.0/24 maxlen: 24
                          182.54.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14061 (0x36ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Apr 18 09:23:21 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69e34d89-70e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a8:de:98:b4:eb:29:07:f0:b7:f6:44:a5:8b:
                    ab:d4:76:89:fd:a6:78:3a:dd:4b:6e:4d:66:c0:04:
                    cc:4b:77:95:f0:bc:3f:fd:91:2b:df:6d:bf:3d:58:
                    72:4b:b5:8d:29:ec:81:8e:35:7a:9b:61:bb:ed:c2:
                    57:01:ad:1a:78:2b:93:03:9d:ca:e2:9b:d0:2d:be:
                    a9:93:d1:12:73:fb:9f:51:0c:74:17:29:44:b2:41:
                    98:40:18:5a:79:67:27:6a:98:cf:4e:13:35:da:b3:
                    03:3d:f9:b4:9e:a7:c4:bb:9e:a1:02:00:01:ab:40:
                    2b:47:94:fd:00:3c:08:fa:48:05:8a:ca:e5:64:cf:
                    24:71:7b:47:5c:5e:96:14:f4:1a:05:75:e9:c8:f9:
                    5c:95:16:96:f3:c1:03:f6:b1:9f:9f:8f:8d:57:9d:
                    3a:bf:57:a8:74:a2:7a:10:6f:40:78:bc:9b:77:ee:
                    7f:36:4a:1f:7b:28:a5:2c:68:c0:02:84:3e:2b:17:
                    54:0f:bd:6d:cf:ac:f9:8c:fc:f8:b1:27:a0:f2:8c:
                    49:d2:bd:47:68:4a:94:cd:18:e2:76:c4:d8:b0:4b:
                    74:87:76:b8:3c:34:37:83:86:b5:0a:b3:94:eb:94:
                    6f:cd:da:4c:76:41:4c:1d:a7:4c:3d:52:e0:05:a7:
                    18:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CB:C5:65:E9:39:61:C0:9D:F4:53:8C:64:CA:49:D8:C9:76:00:64
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/F097E10C5C7311EF9CC47281C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.121.245.0/24
                  117.121.247.0/24
                  182.54.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:5c:62:cd:62:d2:30:31:ef:06:40:ec:34:0b:17:3d:bf:e8:
         40:a7:4a:a9:9a:c6:63:82:3a:41:da:8c:c5:7d:b6:a9:1e:da:
         e9:71:19:38:c9:ca:0a:2c:5e:4c:17:52:49:fd:31:9a:f6:23:
         94:4d:a4:5c:4b:fb:8b:8b:ec:1d:3f:80:eb:b9:4d:da:14:22:
         a2:b3:2f:ed:11:7f:bf:69:f9:8c:bc:f2:b8:4d:5d:aa:7b:50:
         8e:8e:cd:33:0c:c3:16:79:98:1a:0a:e5:37:cb:45:1f:1a:1b:
         97:db:31:10:89:a8:2d:e8:b2:ed:9a:bf:61:0a:70:8f:ed:bd:
         db:ae:9d:00:f7:16:14:4c:fb:4f:e4:57:de:b7:26:61:46:68:
         2f:60:31:54:ab:84:dc:3b:c3:d7:cb:c2:68:c5:67:22:0b:db:
         10:c0:59:78:ea:51:c8:ef:d6:76:3b:6b:02:69:27:24:da:43:
         5e:17:e6:01:16:12:b8:a9:a6:30:5f:9c:52:24:04:c5:dd:29:
         b9:c3:34:78:ce:3b:93:ae:67:bf:7b:a1:83:13:d1:95:be:1f:
         e1:ed:17:de:cf:be:6a:ed:8a:a7:5a:bf:2a:df:66:7e:2f:4e:
         66:4d:de:6a:73:8e:a9:44:68:75:bf:12:8e:62:74:69:18:3d:
         e0:33:85:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 06:17:52 2026 by rpki-client