Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/BFA0334C01EA11F192D3B8D33A6F56BC.roa
File:                     BFA0334C01EA11F192D3B8D33A6F56BC.roa (raw, json)
Hash identifier:          wKRrolzcfQ1xuhtCwjS6gZK6Z0RpDrCcw4eEeMzF3/g=
Subject key identifier:   01:E6:7F:00:58:1C:F4:4F:F6:20:91:4D:E1:CA:C9:C0:C7:15:EA:24
Certificate issuer:       /CN=A91FAB3C/serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
Certificate serial:       CD
Authority key identifier: 82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/BFA0334C01EA11F192D3B8D33A6F56BC.roa
Signing time:             Wed 22 Jul 2026 19:41:38 +0000
ROA not before:           Wed 22 Jul 2026 19:41:38 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154086
IP address blocks:        192.188.86.0/24 maxlen: 24
                          192.188.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl
                          rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAB3C, serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
        Validity
            Not Before: Jul 22 19:41:38 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a611cf1-44ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:b4:de:cf:25:b5:4b:52:b3:56:23:ee:73:
                    22:bc:25:51:86:4c:1f:d8:a0:f2:a8:96:f9:60:c4:
                    5b:2f:3a:57:eb:f7:14:63:6e:da:f6:b3:a4:3c:e8:
                    cd:0f:3b:42:a4:da:eb:fa:c3:b7:f3:2e:13:7c:00:
                    cb:4e:48:9e:3c:5f:e7:e9:24:d0:5b:dd:81:03:c0:
                    28:f2:46:a4:d4:fb:f5:b3:19:44:99:c5:2a:b1:08:
                    f3:ab:cc:d3:f4:3a:79:88:e9:a1:83:83:f7:0a:21:
                    c0:c9:01:e7:de:a0:4c:52:d0:44:04:8b:78:33:47:
                    d6:7f:45:6e:e3:d6:91:df:34:0b:06:3a:ac:b4:3c:
                    f8:26:ae:e7:e5:cd:7d:d6:6e:da:72:38:24:53:8b:
                    09:22:6b:d5:f8:46:9e:75:8d:82:b6:f5:f8:6f:38:
                    81:4d:04:8b:33:94:10:43:e6:73:7e:f9:89:11:59:
                    76:bd:95:67:11:f6:26:c0:43:97:87:94:aa:c9:9c:
                    58:86:70:40:fc:7b:ef:18:9b:8e:08:49:b3:02:da:
                    2f:e1:91:46:75:78:ba:89:be:66:71:19:dd:44:12:
                    db:c0:b1:65:02:96:d4:86:f3:80:73:d0:91:2f:ff:
                    88:bd:e2:f9:c7:c5:79:84:94:29:97:ef:71:15:a7:
                    b7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E6:7F:00:58:1C:F4:4F:F6:20:91:4D:E1:CA:C9:C0:C7:15:EA:24
            X509v3 Authority Key Identifier:
                keyid:82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/BFA0334C01EA11F192D3B8D33A6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:cf:33:33:11:1c:c8:3f:ce:d1:2b:4e:54:cc:96:fb:4d:6b:
         eb:db:e5:7d:56:2f:b8:09:cd:46:d8:40:4e:c2:c8:1a:c7:f9:
         53:4f:ee:bb:1b:c5:1d:36:bf:02:57:24:ad:98:10:8c:f4:94:
         66:02:9b:40:f4:7b:5b:58:c8:82:01:03:83:49:11:86:94:f8:
         69:96:73:d5:8f:33:ad:c3:9c:c4:7e:fe:18:18:b7:e7:e9:07:
         64:ce:e0:67:81:7e:ad:f4:28:2a:5f:a3:77:d0:c3:6a:ad:d2:
         56:f6:c6:66:b0:50:cc:40:04:f0:e3:20:39:8c:9d:be:b7:5d:
         a2:92:0a:3d:82:fc:57:e8:ce:ab:cc:bc:34:f9:a9:88:7b:a8:
         14:6d:44:29:49:d8:73:ad:45:39:6a:ab:c2:db:c3:8f:ed:d9:
         f7:08:0e:17:e6:aa:ff:7e:1b:6e:81:31:c2:72:b0:bc:28:91:
         74:7c:dd:ec:bf:36:ee:4a:68:1c:2a:cd:2b:eb:37:b1:e2:45:
         87:1f:1f:2b:d9:d8:23:68:ad:e9:68:bb:59:d0:fb:ea:33:64:
         9f:2c:19:5d:db:35:b1:ab:dd:0e:60:0b:4b:98:1f:4c:39:d9:
         3b:20:3d:31:14:e9:ed:e9:e0:d8:9b:a5:46:9d:0f:82:8a:75:
         ae:89:4c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:26 2026 by rpki-client