Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/2732E7CE940C11EE9B034255C4F9AE02.roa
File:                     2732E7CE940C11EE9B034255C4F9AE02.roa (raw, json)
Hash identifier:          oeJziMFcs5KqgB6D/zIWYVcGCVVhZtUiFk9Z90GZchU=
Subject key identifier:   02:57:A0:AB:DA:32:31:20:6C:F9:15:15:38:FC:E4:F0:D7:EF:D5:89
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       0252
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/2732E7CE940C11EE9B034255C4F9AE02.roa
Signing time:             Tue 16 Jun 2026 08:50:32 +0000
ROA not before:           Tue 16 Jun 2026 08:50:32 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139076
IP address blocks:        116.204.234.0/24 maxlen: 24
                          116.204.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Jun 16 08:50:32 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a310e57-d93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:20:06:6b:f6:6d:47:f9:7f:15:ac:58:44:bd:
                    27:17:1a:86:01:0e:65:0b:9b:34:d3:7c:47:fd:94:
                    53:15:d5:b9:f0:c5:a1:c8:bb:a3:5a:db:d4:31:93:
                    88:71:e8:e3:55:7f:e7:20:5f:ee:d5:fd:c3:0d:0c:
                    ce:4e:a0:6c:b6:d1:b6:67:7e:8d:57:5f:e4:ae:33:
                    71:b1:99:f0:6f:f7:19:2d:7f:88:c3:f5:a9:ae:4a:
                    05:cb:f5:e1:c2:ad:1e:a1:44:84:ac:16:63:19:79:
                    6b:60:50:79:ae:02:73:6f:5a:dd:e3:f1:de:95:09:
                    70:10:dd:00:e3:8c:a9:3d:74:2d:41:cf:b1:5b:55:
                    79:06:39:39:71:3d:f0:3e:3c:24:3e:7b:a2:d4:ce:
                    7e:6f:9c:e6:09:07:d3:67:44:67:bb:07:d5:c1:0d:
                    74:63:96:65:90:08:87:e0:c5:82:34:41:f0:8e:d0:
                    08:44:4c:e6:33:32:e1:dd:e3:54:2f:ba:4d:17:cb:
                    ad:0c:76:2b:18:21:27:35:3f:d2:32:ba:7e:e3:ff:
                    95:9f:e1:c7:93:34:f2:cc:92:06:a5:82:c6:76:e8:
                    67:cb:f1:e3:db:d9:a8:5a:ef:05:ae:09:85:d6:79:
                    d3:76:01:33:9f:c7:00:b2:ac:6b:bd:81:e2:af:de:
                    02:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:57:A0:AB:DA:32:31:20:6C:F9:15:15:38:FC:E4:F0:D7:EF:D5:89
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/2732E7CE940C11EE9B034255C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:b7:c9:88:45:fd:26:0c:7e:3d:f4:07:79:e7:64:96:dc:58:
         50:8f:82:63:a4:b5:9b:c7:da:a1:f1:92:1b:2f:36:7d:ea:8d:
         45:df:53:29:4f:4f:d2:d5:9b:cd:0a:ef:8c:2e:f9:73:9c:59:
         83:35:39:67:e0:b8:0e:ce:11:69:27:46:e0:1f:fd:d2:d3:ad:
         a2:eb:a1:e7:23:9c:36:6d:29:2a:f0:61:4e:68:64:05:15:ab:
         e6:b0:2d:53:ee:1a:88:d3:99:21:bc:bd:13:54:ca:93:91:f9:
         d9:e9:8c:74:14:d3:8c:69:17:58:3f:d4:9c:40:b6:a3:3e:18:
         3d:8f:82:f4:e6:b1:b8:ca:3b:5d:d7:aa:16:43:a6:aa:8d:b5:
         84:1e:fd:41:56:8e:0a:52:9d:69:52:aa:c8:8f:4e:bf:7f:f7:
         cf:a0:d8:36:df:48:13:f4:c1:03:45:7e:c1:d6:81:11:ac:c6:
         9b:99:a8:16:3a:3c:7f:2e:51:4a:8e:fd:f0:42:52:ee:6e:ef:
         49:4c:ba:42:3f:83:83:69:b4:f9:17:36:8f:e6:11:c0:78:0d:
         5a:c0:02:b9:b4:7d:8e:8f:31:c5:43:4a:a8:f6:0f:f1:1b:a3:
         cc:f6:81:82:bb:a4:0d:38:d0:de:e5:5f:31:40:15:30:bc:c0:
         dc:3f:df:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:35:34 2026 by rpki-client