Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/89135068FD2911F09BBA873E426F56BC.roa
File:                     89135068FD2911F09BBA873E426F56BC.roa (raw, json)
Hash identifier:          np1cCQT3Z8T0a/K62I87d+sS1BjH51JLf0R+orXtPQ0=
Subject key identifier:   D6:B8:F6:DC:68:3D:AC:A0:DA:F6:B0:42:4B:CA:65:0C:1C:AF:6B:C8
Certificate issuer:       /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial:       0CFB
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/89135068FD2911F09BBA873E426F56BC.roa
Signing time:             Fri 21 Aug 2026 06:01:05 +0000
ROA not before:           Thu 29 Jan 2026 15:45:28 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     17539
IP address blocks:        113.203.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
                          rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3323 (0xcfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
        Validity
            Not Before: Jan 29 15:45:28 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a87e9a1-11b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:95:33:b8:81:7f:2b:76:ea:22:0d:d9:cb:f7:
                    54:a9:b3:5f:d6:34:3b:ca:0c:f4:63:f1:3d:8d:6d:
                    d2:1a:c9:1b:25:da:0c:c3:a8:2b:26:b9:87:15:20:
                    94:67:69:d4:58:55:12:e6:46:82:43:39:b2:6f:6c:
                    60:86:ea:41:67:10:1c:a8:6f:db:1c:77:c4:99:ff:
                    28:89:4e:f3:97:b9:56:08:8e:ca:87:6a:e4:96:1e:
                    89:4a:04:ec:5b:a1:70:54:89:f0:6e:cc:c2:2e:17:
                    a5:51:a3:0f:0a:02:69:8f:92:38:b9:d5:1e:97:38:
                    dd:1e:91:ff:a0:b7:f4:a0:e6:65:61:71:55:d1:55:
                    ce:ee:24:98:f6:f0:10:5e:b5:b7:c5:ab:04:17:6d:
                    f3:7b:71:c5:66:7c:2f:d8:e1:4e:a9:d5:a8:97:a9:
                    f2:22:ef:cb:b5:79:b8:f8:f7:cf:f2:c1:37:1b:9c:
                    a3:81:dd:56:03:ec:7a:48:5b:64:b4:8e:2b:41:ad:
                    8f:5a:34:e9:88:f7:75:6f:75:f1:aa:8c:0a:16:1c:
                    eb:30:c6:8d:cb:80:f7:25:0f:3b:d3:9d:76:fa:2c:
                    18:74:ec:f3:49:c7:76:ec:11:5e:08:eb:a7:40:11:
                    42:b1:f9:88:be:3d:b8:73:c5:d7:a6:eb:f5:b7:69:
                    4c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B8:F6:DC:68:3D:AC:A0:DA:F6:B0:42:4B:CA:65:0C:1C:AF:6B:C8
            X509v3 Authority Key Identifier:
                keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/89135068FD2911F09BBA873E426F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:75:68:07:3c:78:a0:64:ec:e5:d6:ba:f0:86:63:f3:08:27:
         8d:87:be:d0:0d:08:e6:85:d6:49:86:13:ac:33:f2:02:10:3e:
         88:da:53:8d:96:d7:73:fe:72:3a:73:4b:fa:b4:89:ff:87:80:
         1e:34:22:e9:8c:e2:af:d7:f4:ed:33:4c:3c:b8:e6:10:db:ed:
         33:eb:07:dd:82:8d:b2:b9:2f:94:f7:f5:b4:4d:d5:cf:fd:f6:
         95:aa:bb:4c:5d:ed:28:c3:73:e9:9b:ee:c7:0a:2c:26:78:a7:
         be:06:36:3d:ff:32:77:74:03:94:03:a6:7c:12:ce:e8:3f:9e:
         50:fb:6f:63:9d:22:2f:36:80:10:5b:d3:bf:27:50:28:25:24:
         0e:c3:88:6d:53:a0:aa:8a:60:46:49:0e:5a:9d:47:7a:0b:80:
         12:a7:65:25:b4:d5:6e:7b:80:21:80:d1:87:ff:00:1b:4c:80:
         de:78:e2:11:83:06:96:04:b3:df:7c:30:95:77:2f:48:0a:a5:
         06:2f:4a:58:4e:cd:da:50:99:e6:02:6e:ca:65:cd:25:00:50:
         37:ea:03:c2:8c:08:84:a0:d5:2c:fe:83:a0:81:65:18:73:9b:
         6a:a0:14:9d:51:db:15:ee:17:74:d4:61:8e:25:39:b6:87:98:
         d9:23:93:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:05:56 2026 by rpki-client