Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/87695D32591811EE973B1058C4F9AE02.roa
File:                     87695D32591811EE973B1058C4F9AE02.roa (raw, json)
Hash identifier:          ntXVrABTYDs7hsbPUUZm6yiRHJzXaf9fF6++buw87GU=
Subject key identifier:   80:5D:93:0A:3B:69:5D:EE:7D:3C:81:5D:F0:70:18:A1:D3:13:90:1B
Certificate issuer:       /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Certificate serial:       023D
Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/87695D32591811EE973B1058C4F9AE02.roa
Signing time:             Fri 19 Jun 2026 03:32:05 +0000
ROA not before:           Fri 19 Jun 2026 03:32:05 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     151469
IP address blocks:        210.56.140.0/23 maxlen: 23
                          210.56.140.0/24 maxlen: 24
                          210.56.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
                          rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
        Validity
            Not Before: Jun 19 03:32:05 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a34b835-9a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a1:2e:f0:1d:38:d2:ef:97:52:14:9d:4f:1e:
                    6c:d2:77:ea:b4:6b:0c:c3:0c:0e:52:54:b7:6c:b4:
                    1d:32:e7:dc:6a:0c:8c:0b:64:d7:56:d9:70:eb:8b:
                    4a:7a:67:0d:ac:44:2d:42:00:7e:68:18:0d:39:33:
                    86:7a:f3:6a:9c:35:80:46:5c:a5:98:3e:da:6d:d0:
                    53:de:f3:5b:50:3a:6e:18:51:43:c0:b1:f7:aa:4d:
                    52:b7:1f:4e:3e:53:7d:76:16:d1:60:96:43:53:0e:
                    05:c2:4c:89:b8:ca:98:b0:ce:11:d0:aa:95:56:94:
                    6a:d7:8a:03:a9:f4:32:c9:4c:cb:83:99:93:97:5f:
                    3a:af:4b:0e:35:9e:94:ce:19:0d:84:72:ef:e0:74:
                    c5:a7:c9:e2:4d:53:f1:39:e7:42:3b:c5:59:d0:57:
                    ef:e3:ec:49:7b:d6:95:7d:c6:63:12:2a:b5:5f:c7:
                    ee:7b:5c:da:96:42:5d:81:15:7b:45:40:e7:3a:5c:
                    56:6e:60:42:52:4f:54:00:72:c5:ec:28:54:88:9e:
                    38:ad:65:de:1e:2c:3d:2e:da:8c:f9:f1:1d:27:74:
                    bc:a9:dc:bd:fe:27:13:65:28:ea:13:24:44:c7:a8:
                    e1:1e:2e:6f:b3:a3:3e:d0:73:b1:d1:4e:d4:06:12:
                    f1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5D:93:0A:3B:69:5D:EE:7D:3C:81:5D:F0:70:18:A1:D3:13:90:1B
            X509v3 Authority Key Identifier:
                keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/87695D32591811EE973B1058C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.56.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:4b:5e:ed:ec:b4:98:e3:cb:e9:c3:84:99:83:24:8c:01:06:
         11:73:e2:66:56:f8:73:fb:da:2c:7f:28:95:b3:bb:c1:5d:28:
         58:f7:d3:f8:2f:8c:09:34:e0:58:a6:dd:33:5a:0b:30:75:ec:
         b9:c3:d1:7b:e1:75:be:3a:d5:2c:69:cf:bc:05:dc:ca:d7:1d:
         a1:69:e6:21:d6:64:66:61:3c:3a:ff:6d:a8:a0:e9:fc:10:e4:
         bf:b1:80:45:71:41:13:b6:b7:83:e6:22:e2:e0:12:5f:e4:0a:
         6e:66:03:77:99:7c:01:2f:a6:a5:22:0d:a0:7e:ee:1b:b9:c3:
         04:60:eb:5a:e3:34:fb:3e:f6:19:0a:c7:12:65:68:09:ce:ae:
         a1:d8:3a:4e:5d:f0:f2:7d:c6:6c:7f:14:de:d5:4d:80:fa:20:
         a2:b4:c4:44:95:d6:68:c8:54:fd:fc:0a:49:00:27:e1:55:f3:
         dd:90:a9:03:6f:81:ac:e0:8b:bd:09:16:69:bb:9f:16:f4:46:
         3c:d6:48:d4:bd:7d:25:39:da:24:eb:60:74:38:54:70:e9:8e:
         e2:d2:83:cd:f4:fb:c8:44:cd:6d:c3:05:8e:1b:68:2d:7e:34:
         09:a8:88:1c:c8:32:3d:f9:be:1c:57:ca:13:98:86:24:92:94:
         89:08:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:41 2026 by rpki-client