Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/E107B344D73B11F18A9FEF2B2566CEF9.roa
File:                     E107B344D73B11F18A9FEF2B2566CEF9.roa (raw, json)
Hash identifier:          SvYY40ibLa4xe+vH4bQ7EtmgCWY9a5elJyAchvvmGtM=
Subject key identifier:   9C:A3:93:1C:24:58:BC:CB:97:03:6E:0E:AC:3E:B4:75:A4:25:F2:C5
Certificate issuer:       /CN=A91AA7E7/serialNumber=E93DDFFE3B4EAF881F29A127A226DDA3B49A0FF2
Certificate serial:       04
Authority key identifier: E9:3D:DF:FE:3B:4E:AF:88:1F:29:A1:27:A2:26:DD:A3:B4:9A:0F:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6T3f_jtOr4gfKaEnoibdo7SaD_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/E107B344D73B11F18A9FEF2B2566CEF9.roa
Signing time:             Tue 03 Nov 2026 04:59:47 +0000
ROA not before:           Tue 03 Nov 2026 04:59:47 +0000
ROA not after:            Wed 01 Mar 2028 00:00:00 +0000
asID:                     9923
IP address blocks:        202.50.60.0/23 maxlen: 24
                          2001:df7:cdc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/6T3f_jtOr4gfKaEnoibdo7SaD_I.crl
                          rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/6T3f_jtOr4gfKaEnoibdo7SaD_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6T3f_jtOr4gfKaEnoibdo7SaD_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 09:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA7E7, serialNumber=E93DDFFE3B4EAF881F29A127A226DDA3B49A0FF2
        Validity
            Not Before: Nov  3 04:59:47 2026 GMT
            Not After : Mar  1 00:00:00 2028 GMT
        Subject: CN=6ae96a43-5db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:88:55:81:be:e3:bb:55:1e:00:75:ea:74:ba:
                    6c:42:26:30:5c:2a:7a:ab:64:a6:e8:a8:3c:a2:fb:
                    ad:d2:36:19:60:06:bb:76:92:b3:4f:8a:94:a7:f6:
                    36:f6:96:8a:74:4f:b4:bc:27:e8:2a:ac:12:c3:b9:
                    e3:93:f7:52:a3:09:c3:79:73:1e:d6:8d:79:ff:d2:
                    94:16:52:02:e5:f4:18:cc:19:52:6f:9b:e6:d3:10:
                    d6:28:ce:18:84:54:22:81:df:67:f1:84:36:9c:ef:
                    5d:80:45:8c:24:5f:b0:52:53:c5:1b:be:1a:27:ae:
                    54:17:3c:70:7e:43:85:5f:45:b0:00:29:b2:93:af:
                    3b:61:f5:96:61:3d:79:55:40:00:48:42:b2:8c:56:
                    6f:1b:8e:88:b1:e2:df:d6:3f:62:98:8e:02:92:25:
                    49:eb:4e:9d:05:59:51:5d:c7:ff:f7:87:00:e4:d0:
                    80:cd:e2:6a:c4:6d:4e:d2:90:21:61:12:0f:52:88:
                    99:59:0f:31:bc:d7:f6:49:20:71:90:7d:f9:94:b7:
                    2a:57:af:ea:d6:e3:04:ae:7f:67:2a:7d:fb:2f:cc:
                    ea:b5:55:c7:6a:25:9a:4a:73:28:d2:91:ec:82:87:
                    46:fb:0a:2f:eb:55:9a:61:fc:fa:bf:77:1c:62:5c:
                    fa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A3:93:1C:24:58:BC:CB:97:03:6E:0E:AC:3E:B4:75:A4:25:F2:C5
            X509v3 Authority Key Identifier:
                keyid:E9:3D:DF:FE:3B:4E:AF:88:1F:29:A1:27:A2:26:DD:A3:B4:9A:0F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/6T3f_jtOr4gfKaEnoibdo7SaD_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6T3f_jtOr4gfKaEnoibdo7SaD_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/E107B344D73B11F18A9FEF2B2566CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.60.0/23
                IPv6:
                  2001:df7:cdc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:11:4d:e0:c1:95:9e:8c:67:19:aa:da:66:cc:c1:36:d8:41:
         02:74:84:20:08:a0:4b:2c:18:a3:20:d6:28:91:a1:4b:50:d9:
         6f:b9:ad:e7:06:77:bd:31:09:41:15:b2:fd:f5:9b:fb:20:4a:
         e9:fb:71:4c:b2:4c:ca:ed:ee:06:6d:6e:93:b0:a7:fe:31:e0:
         1d:cc:3a:a9:ca:b3:a0:4b:d7:47:1d:dd:6a:d2:51:7b:16:ee:
         2f:8a:25:ba:18:f1:e8:1c:6f:8c:77:e3:0e:77:30:3b:d9:07:
         24:84:f7:ce:9d:37:eb:b6:af:76:28:1e:e3:ea:91:f4:29:da:
         aa:34:33:4f:7c:f9:0b:1d:5d:d9:6f:33:35:b7:1d:3b:fc:d0:
         4d:77:93:8b:d4:81:94:9d:56:28:f8:fc:cb:12:71:b9:9f:d5:
         e6:57:3c:f5:21:9d:c2:d5:89:ca:7c:35:a7:a0:81:c6:00:39:
         5a:5c:c6:28:4e:36:ae:1e:b3:85:4a:f8:07:06:ba:cb:a8:58:
         70:49:1f:52:dd:7b:cb:1e:b8:79:e5:7c:03:59:3d:d2:0a:ad:
         ea:5d:0d:9b:e0:ec:92:ff:a4:d6:3a:cd:02:dd:db:df:29:dc:
         bd:e0:19:4b:7c:17:e6:d5:18:a1:95:e6:f6:b8:b0:85:6c:c3:
         31:c5:8f:92
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QTdFNzExMC8GA1UEBRMoRTkzRERGRkUzQjRFQUY4ODFGMjlBMTI3QTIyNkREQTNC
NDlBMEZGMjAeFw0yNjExMDMwNDU5NDdaFw0yODAzMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhZTk2YTQzLTVkYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCMiFWBvuO7VR4Adep0umxCJjBcKnqrZKboqDyi+63SNhlgBrt2krNPipSn9jb2
lop0T7S8J+gqrBLDueOT91KjCcN5cx7WjXn/0pQWUgLl9BjMGVJvm+bTENYozhiE
VCKB32fxhDac712ARYwkX7BSU8UbvhonrlQXPHB+Q4VfRbAAKbKTrzth9ZZhPXlV
QABIQrKMVm8bjoix4t/WP2KYjgKSJUnrTp0FWVFdx//3hwDk0IDN4mrEbU7SkCFh
Eg9SiJlZDzG81/ZJIHGQffmUtypXr+rW4wSuf2cqffsvzOq1VcdqJZpKcyjSkeyC
h0b7Ci/rVZph/Pq/dxxiXPqBAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUnKOTHCRY
vMuXA24OrD60daQl8sUwHwYDVR0jBBgwFoAU6T3f/jtOr4gfKaEnoibdo7SaD/Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBN0U3Lzg2RjRGMDkyRDcz
QjExRjE5NkREOTQ5QzI0NjZDRUY5LzZUM2ZfanRPcjRnZkthRW5vaWJkbzdTYURf
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNlQzZl9qdE9yNGdmS2FFbm9pYmRvN1NhRF9JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTdFNy84NkY0RjA5MkQ3M0IxMUYxOTZERDk0OUMyNDY2Q0VGOS9FMTA3QjM0NEQ3
M0IxMUYxOEE5RkVGMkIyNTY2Q0VGOS5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE
AgABMAYDBAHKMjwwDwQCAAIwCQMHACABDffNwDANBgkqhkiG9w0BAQsFAAOCAQEA
sxFN4MGVnoxnGaraZszBNthBAnSEIAigSywYoyDWKJGhS1DZb7mt5wZ3vTEJQRWy
/fWb+yBK6ftxTLJMyu3uBm1uk7Cn/jHgHcw6qcqzoEvXRx3datJRexbuL4oluhjx
6BxvjHfjDncwO9kHJIT3zp0367avdige4+qR9CnaqjQzT3z5Cx1d2W8zNbcdO/zQ
TXeTi9SBlJ1WKPj8yxJxuZ/V5lc89SGdwtWJynw1p6CBxgA5WlzGKE42rh6zhUr4
Bwa6y6hYcEkfUt17yx64eeV8A1k90gqt6l0Nm+Dskv+k1jrNAt3b3yncveAZS3wX
5tUYoZXm9riwhWzDMcWPkg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 06:31:06 2026 by rpki-client