Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/9A7D9276665111EEAD781D28C4F9AE02.roa
File:                     9A7D9276665111EEAD781D28C4F9AE02.roa (raw, json)
Hash identifier:          BJaSiVoSokQxrhGiLv/oX18AGrZPY90wOA5NxAdk59c=
Subject key identifier:   CB:EC:B0:BF:0F:57:8D:A6:0D:10:38:A2:56:D8:67:C9:92:6E:14:CC
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       07F6
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/9A7D9276665111EEAD781D28C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:25:25 +0000
ROA not before:           Wed 27 Aug 2025 00:04:59 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     9464
IP address blocks:        110.164.246.0/23 maxlen: 23
                          2403:6200:7802::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2038 (0x7f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Aug 27 00:04:59 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4aec5-553c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:d8:9c:21:d6:32:85:b3:8d:46:90:be:8d:
                    f4:8d:27:b9:63:cf:f6:c5:d3:f4:dc:b4:ab:37:1c:
                    ec:56:ba:bc:0a:e2:8d:cc:8d:3e:aa:34:57:37:ff:
                    ad:9a:15:cd:a8:66:d2:01:d3:b4:83:4f:0c:42:07:
                    fe:59:51:cd:2f:57:d5:0b:8e:c0:39:b6:fd:fd:3f:
                    b8:7d:3d:ea:2f:1c:e4:02:ed:0a:7c:a4:85:0e:c7:
                    cc:e3:da:bc:03:46:98:83:01:e5:e8:6d:12:7a:ad:
                    4e:8d:e6:c2:8d:47:55:7f:e1:bd:a1:21:9d:d6:99:
                    4d:cf:86:90:6e:25:0a:32:18:3e:e0:22:e7:e5:80:
                    79:53:25:a9:a6:b6:8d:fd:0c:99:c5:e5:44:8f:58:
                    81:03:fe:60:75:4c:02:c9:50:06:43:4a:49:6e:a2:
                    e4:ce:2c:4e:e9:17:cf:0c:8c:56:e4:6c:00:85:4e:
                    2d:d6:44:30:95:29:f6:71:d5:43:4d:c8:dc:0e:3a:
                    90:c8:67:33:06:0c:a3:bb:ca:a3:ae:ee:c2:4c:39:
                    5f:be:58:53:dc:b6:45:47:95:24:f0:f8:e3:1b:c0:
                    f9:7d:c8:b0:8e:ae:05:0e:ec:f3:a0:9b:2b:06:2c:
                    a5:35:ab:79:73:43:f2:94:71:a0:79:f5:60:02:12:
                    20:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EC:B0:BF:0F:57:8D:A6:0D:10:38:A2:56:D8:67:C9:92:6E:14:CC
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/9A7D9276665111EEAD781D28C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.246.0/23
                IPv6:
                  2403:6200:7802::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:16:c2:a3:5e:0a:1d:34:96:d3:73:77:e5:05:68:04:9b:4e:
         a3:80:4b:26:ce:a5:50:ce:2c:01:41:f6:16:76:63:8c:a2:4e:
         da:a6:fa:cc:cb:19:98:95:c0:e5:2c:31:01:99:23:ea:3f:d5:
         c0:76:cc:4c:00:f2:34:a1:cd:69:60:61:a7:60:e8:64:1d:bd:
         b6:f1:96:21:2e:48:b1:5f:dc:c6:10:d3:d9:90:77:d1:1b:65:
         fb:96:3a:c6:07:05:9f:9f:5c:ae:2a:98:f1:78:26:b4:67:56:
         a4:2a:c4:73:f7:34:c1:17:aa:92:4f:be:84:27:c9:36:c0:9a:
         14:bf:1e:49:77:c2:ee:ff:3b:53:a9:9a:7a:22:66:22:8b:f4:
         b1:76:eb:03:e4:bb:ae:ae:d7:82:e8:dd:4c:b7:0a:0d:2b:ce:
         f8:a5:80:b5:fe:db:1e:89:de:63:e3:bc:57:3d:86:c8:0c:86:
         84:35:83:08:6c:8c:cb:c8:42:c3:7c:67:1d:9d:42:44:14:e4:
         94:7d:8a:ed:ec:55:c6:ef:b1:0a:ed:6b:71:de:c7:fc:51:91:
         c6:87:e2:b6:75:c0:e0:4b:f1:53:9b:bd:4a:03:53:cb:94:f8:
         c0:52:ca:8b:43:f3:ad:85:16:3a:3c:dd:45:03:49:89:62:0c:
         6d:c7:aa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:43 2026 by rpki-client