Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/BE48D4AA927D11EF9651FC4AC4F9AE02.roa
File:                     BE48D4AA927D11EF9651FC4AC4F9AE02.roa (raw, json)
Hash identifier:          GdbfGtYS8h77XRd1qyihe8+9mJGRbTVbLdhWwXMqNGc=
Subject key identifier:   D5:AB:1D:C8:7A:CF:CD:D8:90:22:87:74:3F:D5:FF:4A:48:E2:BF:FC
Certificate issuer:       /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF
Certificate serial:       0172
Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/BE48D4AA927D11EF9651FC4AC4F9AE02.roa
Signing time:             Sat 05 Sep 2026 04:55:43 +0000
ROA not before:           Sat 05 Sep 2026 04:55:43 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        202.0.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl
                          rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 05:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF
        Validity
            Not Before: Sep  5 04:55:43 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9ba0cf-5b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ba:e2:94:19:00:16:ab:a3:f0:e8:4b:ee:77:
                    17:91:9d:43:18:3a:36:56:fd:d2:45:7e:1c:c1:6e:
                    ac:c4:a3:c4:de:d7:1b:57:ab:3b:13:ad:99:e6:03:
                    9d:aa:2f:04:d8:43:63:9f:ee:00:15:e4:c8:c7:9b:
                    a4:67:07:94:67:e7:3c:4c:61:09:00:37:3e:38:41:
                    63:2c:d5:74:39:93:c5:04:99:9e:22:ca:da:1a:1f:
                    c3:2b:91:b7:7b:6e:08:d0:dc:69:57:92:47:2a:0b:
                    53:48:69:a4:96:9c:f7:05:6f:45:72:ef:22:c3:af:
                    f2:21:cf:64:ed:fa:07:ce:6b:99:3f:07:ba:30:12:
                    7b:65:9a:79:05:c0:26:45:e4:ca:16:5b:da:82:01:
                    21:09:46:d3:d4:a8:ac:1b:ee:82:91:3c:e0:c0:79:
                    89:00:d8:a5:cd:8e:93:a0:96:78:2d:ef:1f:27:67:
                    ce:df:cd:be:fb:19:f6:dd:1c:1b:87:2a:d3:ec:cd:
                    39:c7:62:8a:5f:27:81:ee:3c:b6:67:9e:46:ad:dc:
                    d9:52:02:9a:3c:a7:a3:90:50:0c:07:9e:67:91:f2:
                    96:62:a8:87:3a:ee:95:4c:5b:6d:0e:7b:69:10:6d:
                    fe:44:03:7b:64:20:f2:1c:11:bf:42:88:81:96:32:
                    78:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AB:1D:C8:7A:CF:CD:D8:90:22:87:74:3F:D5:FF:4A:48:E2:BF:FC
            X509v3 Authority Key Identifier:
                keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/BE48D4AA927D11EF9651FC4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ae:40:98:58:f2:55:62:2b:68:7c:59:f5:dd:c5:54:a6:1c:
         47:1b:f2:cb:e8:17:f3:12:5d:a3:a6:13:83:55:f5:3d:2b:82:
         ec:94:1b:14:f1:7e:ce:ea:52:ee:09:20:51:ca:64:59:f7:e3:
         a8:ae:df:b0:bd:b2:e6:e6:00:92:8d:f0:ad:30:d6:66:61:61:
         98:d9:d6:32:d4:39:05:c8:3f:62:3d:59:60:24:4f:6b:c3:dd:
         8c:82:5e:6a:9c:90:05:b5:a0:bd:f3:fc:54:e1:0c:19:5a:8e:
         6b:ba:9c:09:4d:b1:c6:6c:c6:c3:a7:f7:18:39:61:38:6e:d9:
         58:cc:19:9e:07:1e:0f:10:e3:f4:8c:f0:3e:13:6c:3d:08:64:
         81:a8:82:0d:d8:49:a9:84:af:bf:67:8f:3b:c0:e7:55:34:2e:
         e4:35:b9:4f:e1:ea:80:16:36:bb:8c:f5:05:4d:08:76:16:ee:
         d2:cd:9d:67:46:9d:b5:c0:0f:2b:1a:e8:59:0e:3d:24:45:0a:
         87:d4:f3:80:d4:63:43:cb:f1:d4:7a:b6:dd:bf:10:22:b4:ac:
         1c:ed:92:82:59:b3:22:b1:88:e6:32:ba:fe:78:85:e4:c9:2c:
         8a:c5:5f:f0:50:7f:75:78:6c:3a:27:4a:05:50:a7:38:60:59:
         ab:67:37:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:10:04 2026 by rpki-client