Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/E969742CB33B11EEB4D87842C4F9AE02.roa
File:                     E969742CB33B11EEB4D87842C4F9AE02.roa (raw, json)
Hash identifier:          bCgx3+w0esChZYIS5+Z1rbKv6/dbStg6H91Q9MJFw70=
Subject key identifier:   DD:84:F9:46:63:5A:99:FD:1F:CE:11:76:8B:1C:5B:45:DC:48:60:75
Certificate issuer:       /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
Certificate serial:       0747
Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/E969742CB33B11EEB4D87842C4F9AE02.roa
Signing time:             Fri 04 Sep 2026 15:16:49 +0000
ROA not before:           Fri 04 Sep 2026 15:16:49 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     24436
IP address blocks:        203.23.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl
                          rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863 (0x747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD4E0, serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
        Validity
            Not Before: Sep  4 15:16:49 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9ae0e1-4230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5b:a0:ca:49:1f:3d:88:01:55:9e:78:28:80:
                    a6:23:24:75:b7:6b:30:22:32:32:96:c8:3a:06:e6:
                    89:3f:64:7d:cd:96:2b:3f:05:51:09:8a:1b:20:11:
                    4c:d3:4a:0f:e2:57:aa:f7:d2:22:6d:ef:fc:dc:f6:
                    a9:63:c5:12:cc:85:c6:7c:5d:26:eb:07:15:02:bc:
                    8d:1f:3b:32:5a:71:fa:65:05:e7:c3:67:36:46:fb:
                    ea:19:ae:e9:a1:d0:34:0b:91:c8:1f:47:a3:7f:f9:
                    cc:59:e3:6b:17:99:24:88:5e:9f:8c:2c:75:dc:2b:
                    4a:7a:90:88:ef:a1:78:f5:f2:5e:c7:b0:2b:10:a7:
                    91:7f:01:a4:1c:6a:b3:95:2f:9e:37:be:c7:3a:29:
                    7e:21:10:6d:d9:be:4c:2a:a1:0b:a5:b0:e4:fa:71:
                    70:2a:69:c3:07:19:e8:4f:c4:67:95:a4:96:01:d4:
                    7e:32:97:b7:6a:f6:a5:3f:17:12:af:c5:e9:a4:57:
                    cf:d1:52:d4:3f:fa:34:2a:1f:cb:07:18:6c:f4:4b:
                    77:dd:96:a2:ab:7d:f7:8f:14:64:a5:56:7d:1d:87:
                    bb:fa:06:6e:77:f2:04:a1:0b:02:86:5f:d0:89:0c:
                    3b:df:b4:ef:1f:49:9b:28:ee:db:58:d4:e4:eb:e8:
                    0c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:84:F9:46:63:5A:99:FD:1F:CE:11:76:8B:1C:5B:45:DC:48:60:75
            X509v3 Authority Key Identifier:
                keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/E969742CB33B11EEB4D87842C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.23.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:75:e7:90:56:ff:79:b0:78:3f:fe:83:33:a9:11:dd:31:7e:
         6a:d8:f1:12:d8:ef:32:58:b1:ab:df:08:e0:af:de:0e:41:11:
         12:aa:c4:16:bf:74:5a:d9:fa:2f:e5:d4:13:c1:6f:4a:f2:0b:
         c4:43:d5:8e:b9:32:ab:ad:85:16:f9:80:bf:7e:d1:5b:cb:3d:
         02:61:c7:10:7e:a4:67:69:c6:7f:8e:35:6c:4d:56:f4:bb:8c:
         a4:d3:7b:25:db:60:80:76:36:17:c9:33:59:ea:b0:46:30:7f:
         26:52:12:26:66:44:60:3f:ae:65:2d:82:7b:c8:6d:fc:60:38:
         52:41:78:c9:ba:63:37:f2:db:5d:6c:17:f2:d8:97:4d:45:b5:
         38:98:13:4d:14:51:2b:28:24:90:b0:1e:2c:13:86:24:1a:bd:
         89:04:3b:62:b6:07:17:98:d3:d9:9f:6d:db:33:ca:24:8b:9a:
         08:57:88:9b:9e:4e:84:2c:2e:42:d8:84:8b:77:60:65:1d:97:
         f3:ba:24:56:e8:d4:f6:73:c1:4d:86:b4:92:9d:5d:32:88:a3:
         8b:18:be:d9:40:85:74:49:12:34:3f:47:ed:c5:95:03:bf:1f:
         4f:f6:b6:1e:c2:69:ef:5b:46:41:85:46:2d:14:d5:21:96:6a:
         5f:10:e3:63
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Q0RTAxMTAvBgNVBAUTKEQzQjRFRUJDM0Q5RjVBMUVBMjAyOTY2OTlBRTk5Mjg4
MUIxRDhERkQwHhcNMjYwOTA0MTUxNjQ5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTlhZTBlMS00MjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5VugykkfPYgBVZ54KICmIyR1t2swIjIylsg6BuaJP2R9zZYrPwVRCYobIBFM
00oP4leq99Iibe/83PapY8USzIXGfF0m6wcVAryNHzsyWnH6ZQXnw2c2RvvqGa7p
odA0C5HIH0ejf/nMWeNrF5kkiF6fjCx13CtKepCI76F49fJex7ArEKeRfwGkHGqz
lS+eN77HOil+IRBt2b5MKqELpbDk+nFwKmnDBxnoT8RnlaSWAdR+Mpe3avalPxcS
r8XppFfP0VLUP/o0Kh/LBxhs9Et33Zaiq333jxRkpVZ9HYe7+gZud/IEoQsChl/Q
iQw737TvH0mbKO7bWNTk6+gMwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN2E+UZj
Wpn9H84RdoscW0XcSGB1MB8GA1UdIwQYMBaAFNO07rw9n1oeogKWaZrpkogbHY39
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDRFMC84MzQ1NzExNjhE
N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8wN1R1dkQyZldoNmlBcFpwbXVtU2lCc2Rq
ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA3VHV2RDJmV2g2aUFwWnBtdW1TaUJzZGpmMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0Q0RTAvODM0NTcxMTY4RDdCMTFFQjhEOEJENjBCQzRGOUFFMDIvRTk2OTc0MkNC
MzNCMTFFRUI0RDg3ODQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyxf9MA0GCSqGSIb3DQEBCwUAA4IBAQB9deeQVv95sHg//oMzqRHd
MX5q2PES2O8yWLGr3wjgr94OQRESqsQWv3Ra2fov5dQTwW9K8gvEQ9WOuTKrrYUW
+YC/ftFbyz0CYccQfqRnacZ/jjVsTVb0u4yk03sl22CAdjYXyTNZ6rBGMH8mUhIm
ZkRgP65lLYJ7yG38YDhSQXjJumM38ttdbBfy2JdNRbU4mBNNFFErKCSQsB4sE4Yk
Gr2JBDtitgcXmNPZn23bM8oki5oIV4ibnk6ELC5C2ISLd2BlHZfzuiRW6NT2c8FN
hrSSnV0yiKOLGL7ZQIV0SRI0P0ftxZUDvx9P9rYewmnvW0ZBhUYtFNUhlmpfEONj
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:13:16 2026 by rpki-client