Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/06F41316C85211F18000EE784011F970.roa
File:                     06F41316C85211F18000EE784011F970.roa (raw, json)
Hash identifier:          /hcW/9sfSXYUofTvg/162Syt8twToM080iWOAPvW548=
Subject key identifier:   C7:A8:25:F2:1A:93:06:C6:47:86:AF:34:2E:EF:6F:91:F1:8B:25:55
Certificate issuer:       /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial:       0220
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/06F41316C85211F18000EE784011F970.roa
Signing time:             Thu 15 Oct 2026 04:36:46 +0000
ROA not before:           Thu 15 Oct 2026 04:36:46 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        43.239.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
                          rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 03:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
        Validity
            Not Before: Oct 15 04:36:46 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ad0585d-8d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:93:0d:3b:55:a9:cc:8b:7b:8f:1d:20:ff:55:
                    55:d9:ba:01:05:41:d7:d3:de:7d:d8:fa:c7:93:dc:
                    49:ab:91:0c:6f:25:4e:6b:ed:6a:64:f4:9d:ad:c2:
                    ea:dd:ab:19:81:69:33:42:c3:3f:7c:c2:6f:6f:ba:
                    db:14:7f:a0:03:d1:06:14:0e:ec:6e:a9:f0:bc:d7:
                    26:78:72:ad:71:c4:75:ff:22:e5:f6:8d:07:06:2d:
                    5b:eb:50:f7:d9:a5:8d:fc:ba:e6:c9:b3:fa:55:70:
                    7c:fc:4c:96:72:af:26:86:22:c8:c3:1e:77:36:de:
                    41:ff:dd:a2:45:b8:db:4e:4d:13:b9:ad:85:4f:17:
                    bd:49:28:7e:76:e9:ff:02:22:bd:e4:c5:f0:ea:fa:
                    be:5b:eb:e2:0a:1c:0a:b0:52:8b:22:9b:6e:d9:4c:
                    10:5d:1c:62:6b:05:ea:cb:39:2e:8a:b5:07:7a:47:
                    35:6a:7f:73:ef:65:b4:14:e4:cf:2f:20:b2:cf:9d:
                    b0:15:95:6d:d7:3c:8a:22:56:ef:cf:d8:8d:13:e8:
                    35:d0:9b:a1:d2:36:1b:e1:68:57:72:38:99:d8:2f:
                    c4:ee:33:13:ee:fa:c3:47:a3:e8:a2:9d:b1:ab:8e:
                    4f:52:b6:fd:11:28:d3:99:33:6e:58:6a:55:cc:5b:
                    8d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A8:25:F2:1A:93:06:C6:47:86:AF:34:2E:EF:6F:91:F1:8B:25:55
            X509v3 Authority Key Identifier:
                keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/06F41316C85211F18000EE784011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:cc:b5:83:81:5a:b5:ff:e0:01:96:43:94:f0:48:f1:3b:13:
         7d:ae:a9:6d:92:d6:2a:d0:a5:9e:61:cb:12:9b:ca:1a:e5:d2:
         07:b8:38:0c:95:4f:3d:48:d0:c5:93:ef:6c:c1:20:62:89:3a:
         19:cd:8b:ab:b9:67:d4:f1:db:2f:f7:20:ab:77:b0:9a:ca:91:
         58:95:eb:13:6e:b8:53:38:c3:db:d8:3e:c0:ab:7d:67:91:01:
         ab:2b:c3:2b:29:76:b5:8d:53:1c:e4:4f:84:58:ba:8a:67:7c:
         b3:10:6d:19:4f:ad:17:ac:3c:78:21:29:a0:0e:77:bd:ac:24:
         fa:9a:a8:f7:f5:23:4c:5c:d8:1b:06:a6:28:26:d4:02:b1:b0:
         43:46:44:ea:5d:93:34:4b:27:be:6d:63:1c:d1:db:80:7a:5b:
         76:1f:10:02:14:2e:15:57:d1:6d:52:44:ea:a7:18:9b:82:48:
         ab:46:f7:f6:f4:91:cc:58:22:10:81:ef:1e:60:49:61:31:6c:
         4f:9d:9e:69:2d:7d:ac:02:fe:e7:03:21:c8:65:9a:92:c3:26:
         af:40:0a:db:ba:87:80:a5:8c:26:85:53:39:bb:d9:9b:8c:97:
         90:73:4b:c0:f3:35:46:77:5c:df:9c:49:c2:bc:a5:af:15:8b:
         47:36:e3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:28:53 2026 by rpki-client