Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/7EE93AAC893111EF824EA948C4F9AE02.roa
File:                     7EE93AAC893111EF824EA948C4F9AE02.roa (raw, json)
Hash identifier:          s5fv8+mRtDfk9pBCVUtbj2gLrpPbAQoXM65ky14VMGs=
Subject key identifier:   16:15:D9:D8:C6:30:AA:1A:53:02:75:8F:08:38:4C:CD:18:05:DB:0F
Certificate issuer:       /CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
Certificate serial:       05BC
Authority key identifier: C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/7EE93AAC893111EF824EA948C4F9AE02.roa
Signing time:             Fri 22 May 2026 23:29:27 +0000
ROA not before:           Fri 22 May 2026 23:29:27 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     32787
IP address blocks:        202.49.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl
                          rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 23:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1468 (0x5bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED931, serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059
        Validity
            Not Before: May 22 23:29:27 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10e6d7-e334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:41:ed:a9:5f:01:b0:29:83:52:5d:49:88:5e:
                    97:7a:13:58:1d:fa:97:81:60:a7:b8:fa:eb:23:ee:
                    05:b8:ae:3b:c7:ab:54:b9:6f:22:8c:44:f8:75:04:
                    17:47:80:93:66:85:ba:a0:d6:7c:3c:de:40:c3:a9:
                    f2:2c:bc:54:b9:cc:75:40:54:a5:b5:03:e8:ab:c6:
                    4e:84:d1:e4:bc:cc:01:14:96:fb:0d:a6:e9:b6:9e:
                    c0:3c:0f:90:a2:1f:94:d8:25:10:7e:fc:95:0b:3d:
                    c8:e7:a9:03:b3:32:9b:d0:6d:20:0e:92:50:09:f1:
                    b0:1f:41:75:dd:05:6e:82:c2:95:72:12:e6:04:cd:
                    c0:30:22:8e:52:b7:d4:e3:48:33:cb:37:92:7e:56:
                    ca:49:6f:86:a3:34:ab:ad:8e:d5:9f:4c:42:07:17:
                    48:d5:11:fd:52:d9:97:68:ce:02:b1:fa:05:9d:ad:
                    11:b0:c1:e3:e3:88:06:42:46:45:15:1a:2b:33:77:
                    aa:a3:40:f0:13:c7:63:0d:89:e0:e7:cb:30:71:75:
                    d2:a9:d3:58:32:a2:e4:31:07:7a:3a:10:45:d4:5f:
                    43:d4:d7:ac:67:c7:cb:e3:f9:b8:4e:38:e0:03:88:
                    3f:9e:1f:fb:d9:17:8a:f9:34:80:6e:e7:22:15:8e:
                    72:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:15:D9:D8:C6:30:AA:1A:53:02:75:8F:08:38:4C:CD:18:05:DB:0F
            X509v3 Authority Key Identifier:
                keyid:C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/7EE93AAC893111EF824EA948C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.49.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:f0:29:f2:11:08:92:3e:9a:38:02:1a:47:d1:cd:24:2f:ec:
         c9:68:6e:30:39:22:91:06:8a:cf:8e:62:9f:71:00:d7:2c:d7:
         c1:54:9c:27:bc:49:e2:26:07:b9:20:9c:f7:66:f2:f1:c6:b9:
         25:fc:b0:05:bd:6a:84:f5:f8:d7:28:1f:d6:82:04:d9:19:ce:
         42:73:19:c8:1f:dc:5c:7b:cb:a4:40:d2:e6:79:98:7a:b1:e2:
         11:6d:8b:81:2e:99:87:44:30:13:41:bf:c2:ac:69:16:dd:40:
         63:5d:27:a7:c5:7a:37:c1:13:10:5e:cb:9d:39:9f:65:e8:22:
         94:e5:81:0e:bd:d1:6c:6d:9c:42:79:dd:21:7c:8d:eb:31:5d:
         a1:3e:09:aa:45:f6:d5:58:5a:5d:66:fd:76:ee:81:73:8e:87:
         e1:b8:b4:e8:83:82:72:31:a4:51:d6:4e:b4:df:f5:eb:2a:af:
         dd:22:84:7c:c6:e4:48:30:8a:df:13:8d:ab:bf:57:81:c8:58:
         33:6d:3f:e6:c7:7f:28:55:b3:a7:99:47:74:83:b2:71:79:9f:
         0f:72:42:0b:89:d7:40:2f:6b:2f:9a:b7:4c:6a:a4:82:1c:ab:
         4c:d6:3a:5f:6c:f0:7d:53:7d:84:7a:ed:9c:24:34:d0:27:98:
         30:3d:5c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:01 2026 by rpki-client