Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/F4639D76356211F09A66C487C4F9AE02.roa
File:                     F4639D76356211F09A66C487C4F9AE02.roa (raw, json)
Hash identifier:          TehIHcI/Ic2jvt9hXJYMUfF6bLFAclzND5P83ugZSbo=
Subject key identifier:   25:98:7B:88:55:6F:E1:E8:46:7F:00:C2:CA:C8:73:B2:D7:39:A7:00
Certificate issuer:       /CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
Certificate serial:       04C6
Authority key identifier: 1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/F4639D76356211F09A66C487C4F9AE02.roa
Signing time:             Wed 09 Sep 2026 00:49:40 +0000
ROA not before:           Wed 09 Sep 2026 00:49:40 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     38313
IP address blocks:        202.126.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl
                          rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222 (0x4c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA645, serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
        Validity
            Not Before: Sep  9 00:49:40 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa0ad24-59da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:cb:58:9d:47:73:53:46:61:5f:b5:04:3c:
                    04:e1:17:ae:ae:c6:31:c5:6c:7a:bb:bb:1d:dd:a9:
                    4a:83:28:e4:fa:42:60:00:d2:53:df:3b:38:c2:57:
                    62:c2:1b:90:6a:f5:82:a1:48:9d:fa:4c:af:0b:c6:
                    3b:1a:a0:71:ba:b6:0d:f6:ed:f4:f1:03:f8:d9:19:
                    c8:1f:7d:24:3e:3a:ff:0e:3f:57:dc:2a:9b:2f:21:
                    63:03:e0:a3:f2:a3:8c:64:40:3e:25:bd:80:f7:97:
                    4e:ae:e3:78:3b:aa:3d:80:c0:d5:2f:d4:ed:cf:3a:
                    7b:52:a3:ab:c5:36:48:0e:60:fd:ba:0e:47:f5:2f:
                    2a:77:78:1a:33:b1:ea:8c:61:44:fb:7b:8f:d1:e5:
                    3f:b9:6a:ef:97:df:52:a4:39:d6:4c:df:52:4d:db:
                    72:2f:5d:8e:f6:9e:ff:d4:76:56:88:55:14:e5:d4:
                    07:60:8a:a2:b6:86:e5:bf:ee:33:4f:37:4a:7c:78:
                    8c:a5:98:ac:6c:3c:45:3c:ff:e7:cf:84:4a:3e:8c:
                    f1:e6:15:ca:9e:a5:5f:e1:63:14:00:1e:a9:16:42:
                    5c:9c:50:a9:4c:f9:ba:41:d6:9c:49:c4:70:36:19:
                    6c:38:74:59:cf:11:f5:f6:ff:28:66:92:e5:22:22:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:98:7B:88:55:6F:E1:E8:46:7F:00:C2:CA:C8:73:B2:D7:39:A7:00
            X509v3 Authority Key Identifier:
                keyid:1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/F4639D76356211F09A66C487C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:5c:2e:2b:93:e3:8d:a3:f8:eb:a1:e0:17:53:8b:d8:54:00:
         b1:57:bc:d4:62:50:1b:17:46:5a:97:6d:e8:85:c6:0f:53:df:
         c2:a2:b3:67:bf:98:af:78:ba:5c:6d:b3:6a:53:15:34:8b:ae:
         a4:c3:fb:4e:2c:fa:24:0b:4f:69:61:d2:e4:dc:87:0f:43:c8:
         b3:a2:6d:01:26:ae:3c:4e:fe:4c:e7:a4:6e:55:02:d3:7a:77:
         fe:31:a7:ce:44:75:fc:75:1d:07:13:af:cf:11:0c:a2:b0:89:
         43:8b:e3:e7:e8:64:c8:a2:df:91:27:14:f4:42:4a:73:81:77:
         af:88:f3:8f:79:1c:51:7a:b7:0d:79:4f:e2:4c:a1:c6:56:0d:
         48:48:b1:8a:46:aa:ad:c3:56:03:e8:2e:a3:18:44:cc:d7:8a:
         39:8e:36:89:c6:db:5f:4f:27:8d:be:5e:09:4f:f1:b5:4d:c0:
         d2:2f:3e:32:e8:f1:27:0d:b9:fb:67:69:60:12:bf:a7:07:b9:
         ef:c5:c4:ad:f4:da:ac:e9:e5:23:55:2b:61:0e:45:95:2b:95:
         27:a2:9f:23:ba:74:0d:2f:99:d6:b0:73:70:05:08:cb:d8:70:
         29:03:35:8b:26:de:c4:10:c1:6d:a4:d1:76:ae:f2:13:ca:1c:
         24:77:82:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:28:44 2026 by rpki-client