Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/117F7230ADD611F1A3F789A53C11F970.roa
File:                     117F7230ADD611F1A3F789A53C11F970.roa (raw, json)
Hash identifier:          MvbalvbytGaLCVL9NlFOUAL6a0UY6goTUEonuI/BFVs=
Subject key identifier:   79:69:16:6A:03:CD:90:EC:6B:6A:E8:F0:9F:45:E4:8F:2A:39:1C:BB
Certificate issuer:       /CN=A91A038D/serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
Certificate serial:       CB
Authority key identifier: 90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/117F7230ADD611F1A3F789A53C11F970.roa
Signing time:             Fri 11 Sep 2026 11:43:55 +0000
ROA not before:           Fri 11 Sep 2026 11:43:55 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     154245
IP address blocks:        45.117.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A038D, serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
        Validity
            Not Before: Sep 11 11:43:55 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6aa3e97b-1729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:4c:62:24:c5:ee:0a:57:32:e9:29:cf:1d:
                    ac:e4:3c:15:8e:19:6b:23:09:c7:58:12:5c:97:14:
                    71:53:33:b3:37:fe:a3:25:09:19:0b:2c:bb:a4:0d:
                    e1:ac:94:c3:02:9e:39:64:00:89:70:b1:19:9e:07:
                    ce:6b:2b:6d:66:6e:17:bb:4a:83:22:b8:bf:f1:e9:
                    e6:55:d8:e7:f8:7d:db:bb:62:78:f3:36:c1:cb:ae:
                    40:8e:47:e5:90:2c:e1:f6:cf:2e:bf:e9:e1:47:2b:
                    bb:a6:1f:25:92:39:57:e4:59:c2:b1:b2:1c:46:20:
                    b9:58:42:db:0a:92:73:b4:52:6c:d0:90:15:42:a0:
                    58:d8:ca:2d:c5:f7:84:88:32:38:31:6b:55:81:05:
                    fa:4c:95:9c:04:36:2e:d5:ed:43:50:98:69:ab:8b:
                    34:e8:81:7f:b7:b4:54:86:97:50:c9:11:2e:f9:8a:
                    77:0b:26:a4:d8:b9:73:24:6e:ba:37:f4:4b:60:17:
                    db:11:39:75:6e:6a:1e:29:90:82:01:e7:12:56:49:
                    60:bb:44:59:e5:21:4b:6a:ed:7e:82:97:90:84:9b:
                    12:b9:dc:f0:45:54:27:d7:65:38:0e:eb:7a:4c:a3:
                    75:8b:e7:d2:30:4f:83:53:4e:c3:c8:f9:85:e9:82:
                    73:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:69:16:6A:03:CD:90:EC:6B:6A:E8:F0:9F:45:E4:8F:2A:39:1C:BB
            X509v3 Authority Key Identifier:
                keyid:90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/117F7230ADD611F1A3F789A53C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:b4:f8:d4:dd:aa:be:9d:46:b9:07:d1:6a:a0:c8:fd:de:b1:
         55:aa:3a:8c:90:21:b1:a3:9d:0a:5c:20:81:56:e5:42:f3:25:
         ef:2a:b7:95:15:33:a0:49:ae:6b:d5:cc:20:39:f0:18:3f:20:
         6f:d7:d7:c9:f9:66:68:ca:d9:4d:d8:35:bd:48:36:f1:22:1c:
         43:04:32:ea:02:f0:07:97:84:f8:3c:17:9f:95:d2:a5:51:35:
         0f:99:83:3e:c4:f7:c3:6d:e1:27:44:54:8e:0d:36:a4:0e:f9:
         48:5d:73:a0:5b:d6:7c:90:9a:cd:99:fd:e6:77:36:5c:25:b3:
         d1:37:b6:74:9e:de:0e:4d:27:20:ba:82:67:16:3c:ff:98:a0:
         53:dd:b0:86:6f:ad:d4:c1:2e:68:0c:5a:32:4a:30:bb:bc:0c:
         4d:43:89:2b:4c:59:d4:51:da:fa:4f:70:05:9f:ba:34:27:5a:
         78:7f:72:78:6c:27:a6:43:34:db:d1:6d:99:34:47:6f:0e:5d:
         53:59:a3:8d:39:60:6c:41:86:da:b6:4b:54:75:ca:7a:5e:c3:
         60:91:18:71:c6:48:f0:84:d1:d7:bd:d5:b8:24:e3:26:ba:51:
         40:80:51:6f:21:00:8b:b6:a2:4c:c8:6f:13:25:45:0e:26:e3:
         ed:52:8b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:34:28 2026 by rpki-client