Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/5E5DF206BCA411EDBD39730EC4F9AE02.roa
File:                     5E5DF206BCA411EDBD39730EC4F9AE02.roa (raw, json)
Hash identifier:          0Ijz+UY/qG59jnxM6F9e8jT0AK5gXL4f9XftWto6NZg=
Subject key identifier:   2E:7E:AB:62:3E:C2:1D:06:33:31:94:EA:D9:67:49:EC:FB:53:02:DD
Certificate issuer:       /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864
Certificate serial:       027B
Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/5E5DF206BCA411EDBD39730EC4F9AE02.roa
Signing time:             Mon 13 Jul 2026 02:28:10 +0000
ROA not before:           Mon 13 Jul 2026 02:28:10 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     9738
IP address blocks:        203.9.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B19F8, serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864
        Validity
            Not Before: Jul 13 02:28:10 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a544d3a-aac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:25:71:24:50:b5:54:cf:80:aa:31:89:52:
                    31:f3:3b:9c:f8:4c:47:6a:1e:4a:e0:d9:1c:c1:b1:
                    b3:a3:ef:79:0c:c6:8a:87:bc:fa:ba:ef:59:af:3b:
                    a4:ee:60:07:f4:69:94:b4:3a:ce:35:4b:a5:dd:20:
                    3b:7d:08:62:98:39:5b:ab:f5:be:04:40:eb:3a:ae:
                    dc:8a:e1:bd:64:d7:08:c8:1c:81:04:b8:1f:e2:38:
                    66:2b:29:29:1a:23:76:93:82:4a:26:fa:d6:b4:23:
                    14:cf:74:f3:b2:6f:4f:62:d6:dc:8e:46:bd:a5:41:
                    bf:16:4d:38:5b:4c:70:3e:98:8a:70:92:47:18:9a:
                    fb:35:c1:55:9b:09:43:5b:c4:5c:b1:77:18:cb:7f:
                    62:4c:15:7d:72:12:df:11:ea:4e:35:fb:c8:19:29:
                    ef:34:16:13:7e:1d:53:f2:c5:9a:92:fc:ce:5a:f8:
                    95:e5:bc:c9:66:6f:fe:e7:cc:d7:0f:16:a4:b6:e5:
                    34:1a:f8:81:74:7b:fe:49:0d:a9:ba:b5:81:d1:8f:
                    cc:b4:fb:49:f6:04:7f:23:d3:dd:13:55:f3:e9:59:
                    a7:14:15:62:f0:d1:79:e9:29:e0:9a:55:30:a7:26:
                    89:28:22:4e:38:64:17:49:4c:34:6e:6a:0b:e5:17:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7E:AB:62:3E:C2:1D:06:33:31:94:EA:D9:67:49:EC:FB:53:02:DD
            X509v3 Authority Key Identifier:
                keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/5E5DF206BCA411EDBD39730EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.9.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:ab:33:40:d4:f9:35:e6:da:ce:8a:ca:8c:55:15:67:d1:0b:
         28:5f:0d:e6:77:5d:8e:bf:aa:51:7b:f9:1b:b8:d6:39:e9:27:
         74:69:fd:15:f5:84:29:95:24:fb:75:68:5e:0b:72:7c:6a:89:
         c7:e7:24:53:70:6e:ae:de:48:1b:2c:c0:12:43:7e:30:6a:a7:
         67:aa:fd:ad:36:91:c8:0f:d9:fb:5d:36:bf:f7:b9:80:49:d3:
         a8:8c:c3:07:11:77:84:df:ff:f4:fd:26:0c:21:3d:0e:78:13:
         7a:df:e9:bd:7f:0f:db:49:1c:dd:a0:6c:be:fc:3b:24:29:0a:
         53:d1:02:dd:14:33:66:be:60:da:66:ea:e3:4b:dd:99:eb:09:
         a8:5a:3f:80:81:ad:9a:27:04:ba:a5:3a:22:4a:32:cc:b6:fd:
         09:db:80:a1:3d:29:82:49:4d:e4:9f:78:a6:c3:3d:f6:aa:ae:
         12:2b:4d:d4:ed:33:c1:32:ad:3c:26:bd:43:65:e3:51:5a:71:
         b0:2d:73:b7:57:86:b7:9d:a2:2c:d2:a3:38:83:70:d5:b6:ea:
         30:8b:a5:10:bd:83:f1:c9:39:8a:6e:be:48:76:82:b2:48:28:
         af:0f:31:70:9a:e3:6b:41:8b:08:38:31:ef:42:82:f9:b2:f0:
         2c:1a:cc:68
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE5RjgxMTAvBgNVBAUTKDc2NEJCODQ3OEJGRjhDQzhCRkYxNEU4RkI2QUFEQzI4
RUQ1RTQ4NjQwHhcNMjYwNzEzMDIyODEwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU0NGQzYS1hYWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtUAlcSRQtVTPgKoxiVIx8zuc+ExHah5K4NkcwbGzo+95DMaKh7z6uu9Zrzuk
7mAH9GmUtDrONUul3SA7fQhimDlbq/W+BEDrOq7ciuG9ZNcIyByBBLgf4jhmKykp
GiN2k4JKJvrWtCMUz3Tzsm9PYtbcjka9pUG/Fk04W0xwPpiKcJJHGJr7NcFVmwlD
W8RcsXcYy39iTBV9chLfEepONfvIGSnvNBYTfh1T8sWakvzOWviV5bzJZm/+58zX
DxaktuU0GviBdHv+SQ2purWB0Y/MtPtJ9gR/I9PdE1Xz6VmnFBVi8NF56SngmlUw
pyaJKCJOOGQXSUw0bmoL5RfxiQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC5+q2I+
wh0GMzGU6tlnSez7UwLdMB8GA1UdIwQYMBaAFHZLuEeL/4zIv/FOj7aq3CjtXkhk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTlGOC9DQUU2QjRDRUJD
QTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pNaV84VTZQdHFyY0tPMWVT
R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RrdTRSNHZfak1pXzhVNlB0cXJjS08xZVNHUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjE5RjgvQ0FFNkI0Q0VCQ0ExMTFFREEzNzA3ODBEQzRGOUFFMDIvNUU1REYyMDZC
Q0E0MTFFREJEMzk3MzBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAywlAMA0GCSqGSIb3DQEBCwUAA4IBAQB2qzNA1Pk15trOisqMVRVn
0QsoXw3md12Ov6pRe/kbuNY56Sd0af0V9YQplST7dWheC3J8aonH5yRTcG6u3kgb
LMASQ34waqdnqv2tNpHID9n7XTa/97mASdOojMMHEXeE3//0/SYMIT0OeBN63+m9
fw/bSRzdoGy+/DskKQpT0QLdFDNmvmDaZurjS92Z6wmoWj+Aga2aJwS6pToiSjLM
tv0J24ChPSmCSU3kn3imwz32qq4SK03U7TPBMq08Jr1DZeNRWnGwLXO3V4a3naIs
0qM4g3DVtuowi6UQvYPxyTmKbr5IdoKySCivDzFwmuNrQYsIODHvQoL5svAsGsxo
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:31 2026 by rpki-client