Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/DA1BF46E91E611F08635E534C4F9AE02.roa
File:                     DA1BF46E91E611F08635E534C4F9AE02.roa (raw, json)
Hash identifier:          6KeAoBf8MaS5EjBdSVHExGmJ9a8yiTrCwJ3nhslSfTE=
Subject key identifier:   56:1F:2F:DD:4E:F9:9F:6B:E7:9D:29:78:36:25:8A:48:FC:40:24:65
Certificate issuer:       /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3
Certificate serial:       D9
Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/DA1BF46E91E611F08635E534C4F9AE02.roa
Signing time:             Tue 29 Sep 2026 07:57:03 +0000
ROA not before:           Tue 29 Sep 2026 07:57:03 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     133770
IP address blocks:        122.50.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl
                          rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3
        Validity
            Not Before: Sep 29 07:57:03 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abb6f4f-36f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:25:72:2b:e1:fe:81:b9:d4:9a:43:a8:51:
                    00:e1:e8:2e:91:5b:bd:21:41:6f:62:e0:94:ef:48:
                    de:30:41:16:42:1d:59:29:93:66:41:b1:dd:1a:f0:
                    fc:e7:65:5c:fa:34:19:cb:a3:5b:ac:73:6c:d9:e3:
                    4f:66:09:7a:a1:eb:71:16:02:5f:1d:cf:55:12:4a:
                    13:cb:bc:e6:d6:0a:fb:29:5d:5a:62:8f:dc:5b:6d:
                    45:73:c5:74:b4:b2:18:f4:c3:2d:3c:10:73:e2:cf:
                    6b:b4:a6:87:6d:7a:17:75:83:48:b2:b0:d5:d6:65:
                    72:7f:6d:02:af:6f:5d:39:ac:6c:2b:b2:46:b8:f4:
                    3c:02:08:88:94:ed:db:18:7d:36:1c:1a:7d:67:f9:
                    86:a5:aa:68:20:df:f7:e1:7a:ee:c7:6f:a2:15:8a:
                    70:bf:8d:64:e5:d2:93:16:ea:46:b4:07:f0:45:27:
                    37:0a:23:ce:41:f5:71:c4:32:b5:53:11:45:7e:78:
                    e7:93:e7:69:15:a7:ee:96:84:72:a0:ba:32:26:40:
                    13:7a:c4:b0:c8:c0:0d:27:47:76:b8:90:a8:6b:7e:
                    1c:81:ee:45:55:fa:43:2c:9f:2e:f7:df:82:3b:99:
                    74:a0:3f:2f:cd:eb:37:88:be:12:39:d7:80:91:42:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1F:2F:DD:4E:F9:9F:6B:E7:9D:29:78:36:25:8A:48:FC:40:24:65
            X509v3 Authority Key Identifier:
                keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/DA1BF46E91E611F08635E534C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.50.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:0c:c3:eb:51:25:de:0d:07:b4:bc:f0:98:50:f9:bb:4c:26:
         ed:ae:c1:0a:b2:52:04:2e:25:75:73:6c:ae:4f:f2:57:3f:e7:
         9b:fc:64:38:1c:90:e4:2f:4d:43:a6:5c:03:94:02:67:d1:b5:
         14:aa:69:8e:18:62:36:6e:9e:de:bd:f4:84:8b:24:de:c9:5b:
         fa:8b:f4:d0:37:ac:eb:79:36:c5:b9:39:86:22:55:f6:fa:4c:
         73:b3:bc:2c:a8:ff:b3:a3:3d:52:40:15:62:e8:c8:0f:86:2c:
         b5:eb:6b:f0:0c:03:54:0e:27:a6:8b:85:50:1d:88:b9:d5:d4:
         bc:af:ca:b8:fd:1e:6e:39:fa:3c:5e:bc:47:20:68:54:72:ed:
         a2:03:a9:c7:9f:1c:3f:2c:d7:a2:f3:b4:49:e6:1b:65:6e:b8:
         07:74:aa:58:92:90:b1:b0:39:b8:a3:38:84:57:52:bf:3e:44:
         bb:93:29:cd:50:ad:ee:c4:0c:ec:ca:07:ee:81:29:96:7a:2c:
         66:02:47:50:77:40:83:2a:4f:27:e6:e3:3c:e8:f3:08:5a:67:
         26:1e:a1:28:90:e8:e4:07:f4:35:aa:a1:73:bc:c2:11:85:9e:
         29:ca:c7:e9:2b:94:f1:05:d7:34:3f:1e:99:fd:42:45:5d:86:
         39:d3:58:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:12:23 2026 by rpki-client