Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/3A8D72EC50E511F1B3C6CC42C3833773.roa
File:                     3A8D72EC50E511F1B3C6CC42C3833773.roa (raw, json)
Hash identifier:          G9gjTmASAxWaSGyTQLyM5wPNBpCQflf0owj+nNRdQME=
Subject key identifier:   A8:BC:21:6F:05:7D:67:CC:12:D4:85:9D:C1:5F:F4:A9:E7:24:32:AA
Certificate issuer:       /CN=A91A3660/serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Certificate serial:       7E
Authority key identifier: 37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/3A8D72EC50E511F1B3C6CC42C3833773.roa
Signing time:             Sat 05 Sep 2026 07:58:17 +0000
ROA not before:           Sat 05 Sep 2026 07:58:17 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154156
IP address blocks:        121.46.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
                          rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:48:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3660, serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
        Validity
            Not Before: Sep  5 07:58:17 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9bcb99-6422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0c:45:93:13:84:6c:24:0f:98:b2:ef:2e:cb:
                    5a:9e:3e:2d:7e:a8:23:ed:e6:60:1e:96:45:dd:59:
                    2e:6a:b6:1d:26:2a:c1:41:05:48:35:47:c5:8c:b8:
                    20:16:e6:c1:1c:a2:63:9b:63:5f:38:05:6c:11:37:
                    bb:58:a5:8f:a4:c3:ca:9e:8a:2e:c4:fa:b9:b9:fa:
                    a9:fb:b5:85:76:7e:34:93:da:47:90:70:98:dc:db:
                    9f:8a:4b:3d:c3:dd:f0:98:c5:7e:f9:ed:44:d4:17:
                    bf:9a:c3:e9:5b:88:e7:46:93:ea:d7:20:85:ec:e2:
                    7a:d8:a6:0d:1e:06:54:d7:2f:96:8a:05:49:9d:8a:
                    97:99:d5:04:21:a7:23:a4:7f:79:23:82:12:6b:84:
                    8e:ee:69:f5:b9:24:b7:01:43:d9:b3:e7:b6:d0:22:
                    35:aa:c6:96:70:08:15:5f:3e:b9:30:31:ef:88:97:
                    db:49:60:29:17:e4:46:e0:62:54:82:18:d4:e7:c9:
                    d5:6e:67:e8:62:2e:f8:6f:08:c8:8c:d7:ab:e8:db:
                    1c:74:68:8c:11:38:6c:dc:96:25:c5:53:98:d4:96:
                    22:50:37:64:87:86:f9:5e:f9:e9:36:ae:4d:b2:fb:
                    40:58:bb:bb:00:4f:44:87:c1:4f:1e:71:0e:48:3b:
                    ac:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BC:21:6F:05:7D:67:CC:12:D4:85:9D:C1:5F:F4:A9:E7:24:32:AA
            X509v3 Authority Key Identifier:
                keyid:37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/3A8D72EC50E511F1B3C6CC42C3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:71:1b:f7:15:c4:cd:c0:61:19:ac:76:9d:73:38:e0:4c:01:
         e3:11:50:25:15:84:d1:99:0c:c7:02:64:0f:7f:48:01:44:ec:
         2a:61:d4:56:95:e2:58:8f:67:c8:72:9c:de:9d:e3:1d:4f:1a:
         57:d3:58:39:c3:d5:31:28:54:73:20:ab:a7:d1:87:13:13:bd:
         d8:77:70:7c:91:05:c4:e2:dd:63:9d:4f:cc:ff:23:6e:1f:4c:
         14:3a:1d:9f:58:ca:4e:e5:f9:51:05:a1:d8:cb:58:7e:7c:27:
         93:f4:b5:52:43:e9:e8:ec:7b:17:3b:35:30:fa:4d:69:46:fe:
         cb:69:98:6d:a7:3d:5c:5a:57:90:f5:55:f9:4e:74:8c:fe:df:
         e2:4b:96:a8:53:4b:fb:76:d1:20:e2:d4:fd:a1:4b:74:be:43:
         9b:6e:e7:19:5e:ca:a5:bf:5f:ce:78:55:31:a7:a8:e2:6d:a6:
         34:ee:24:a9:07:34:2f:fb:f9:00:72:53:60:32:c8:24:7f:76:
         52:24:36:54:eb:c8:8d:70:a1:e0:d3:86:a8:66:d8:b3:c4:8b:
         f7:07:70:73:40:e6:be:36:83:7f:bf:ed:20:1f:0b:f3:aa:e6:
         2a:74:de:d8:aa:a7:34:db:af:1b:24:58:35:dc:cc:26:f9:a7:
         dc:49:65:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:17:07 2026 by rpki-client