Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/94EC9E22BEF311F0A6F14E84C4F9AE02.roa
File:                     94EC9E22BEF311F0A6F14E84C4F9AE02.roa (raw, json)
Hash identifier:          a13J6BZ/pqZQYGsfqKAAWzoLJf4ZHUsOiVhSJL/K41A=
Subject key identifier:   87:26:AE:34:95:25:14:99:D0:AB:8D:67:7C:7B:B5:00:AB:76:E5:7D
Certificate issuer:       /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial:       098C
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/94EC9E22BEF311F0A6F14E84C4F9AE02.roa
Signing time:             Fri 16 Oct 2026 20:40:35 +0000
ROA not before:           Fri 16 Oct 2026 20:40:35 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     198504
IP address blocks:        116.0.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
                          rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 20:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2444 (0x98c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
        Validity
            Not Before: Oct 16 20:40:35 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ad28bc3-d1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d7:a8:04:bb:6f:fa:bd:54:89:14:54:9c:2d:
                    c0:3a:6f:38:65:d3:0e:11:2a:38:b1:83:85:11:72:
                    f2:71:94:c8:53:dc:80:e9:9a:a8:28:ec:43:e0:92:
                    51:e8:4b:65:a1:ba:1a:85:7b:1a:b0:b3:b9:c6:67:
                    bf:8b:16:4a:17:62:ad:db:31:f5:e6:e5:99:59:85:
                    e6:cc:6f:dc:ec:1f:5a:0b:1e:72:57:51:16:7a:5d:
                    15:54:14:91:49:3e:ac:e5:12:de:44:a7:43:a4:58:
                    78:81:72:6c:bb:b3:11:17:b0:c4:91:5a:fa:75:33:
                    87:9c:ea:7a:90:59:bf:9e:70:1d:77:c8:54:22:24:
                    2f:21:77:c9:18:0d:d2:b5:7c:18:50:31:ea:af:1e:
                    14:04:ac:11:2b:65:09:1f:99:0c:89:26:7f:12:dd:
                    bf:b6:cb:91:fa:eb:9d:e9:cd:51:b7:b2:3f:36:80:
                    59:b1:94:18:b0:05:0f:48:fd:3e:e8:d2:e6:9f:94:
                    e5:5a:d9:27:d0:65:08:07:64:54:cb:64:fb:21:05:
                    ef:38:14:6f:a7:03:01:36:5e:c8:39:99:b7:97:69:
                    b2:55:73:0e:ea:68:2a:7a:ae:e0:e1:0d:62:e4:ff:
                    9b:f8:70:a4:a8:a7:ce:37:16:41:e4:ff:40:44:79:
                    66:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:26:AE:34:95:25:14:99:D0:AB:8D:67:7C:7B:B5:00:AB:76:E5:7D
            X509v3 Authority Key Identifier:
                keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/94EC9E22BEF311F0A6F14E84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.0.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:5f:f3:14:9f:aa:5a:e0:bf:41:62:52:1e:7a:60:6e:87:8f:
         b4:37:2b:ae:dc:87:60:d8:7f:43:80:34:e1:ba:70:96:cd:fe:
         f5:37:d4:5b:ad:3c:28:e9:6e:fa:5d:5e:d4:cf:7a:8e:08:df:
         85:4e:a8:3c:26:af:be:6a:7d:76:5d:ae:27:eb:34:d1:aa:92:
         d4:9e:29:39:0c:c6:ad:dc:35:6a:65:f1:0d:e3:7f:8b:c0:fd:
         9c:9d:6e:3d:8e:d4:6c:c1:9a:fa:16:9a:00:fa:f7:88:47:8d:
         7b:77:aa:e8:88:cc:c2:0c:25:8c:d8:c4:0e:ca:61:ea:ef:b0:
         ed:7c:fc:e7:3e:91:6c:dd:69:f3:77:3d:a2:6e:12:62:cf:37:
         3f:34:4e:bf:07:ee:38:e2:4f:f6:54:0c:5a:0b:c4:3b:f4:2f:
         f5:91:78:e9:93:19:23:98:f7:79:52:a3:ad:f4:0e:19:1a:4b:
         a6:43:9a:9d:83:56:28:3e:f0:b5:0f:2f:b2:3a:b5:f7:e1:84:
         7f:21:33:f8:be:26:6d:0b:42:9e:ce:e3:b9:2e:3b:aa:3e:31:
         70:a7:64:6b:03:4c:a3:19:b9:06:65:d9:19:b6:4d:07:c5:b2:
         c8:7c:f6:36:81:d7:05:13:60:02:cb:c0:e0:6a:03:48:70:23:
         2a:4e:0f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:18:22 2026 by rpki-client