Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/132BB03C29F411F1A9D9FDE9A2833773.roa
File:                     132BB03C29F411F1A9D9FDE9A2833773.roa (raw, json)
Hash identifier:          zAHGRDXYndBzUXQxorw1NkRKqw4rmC3oXM3Dg7Io5P8=
Subject key identifier:   22:30:F5:86:00:B9:7B:A1:0E:24:DC:AC:EA:72:72:5C:57:07:8D:5F
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       014C
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/132BB03C29F411F1A9D9FDE9A2833773.roa
Signing time:             Tue 28 Jul 2026 19:40:16 +0000
ROA not before:           Tue 28 Jul 2026 19:40:16 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     23875
IP address blocks:        63.216.59.0/24 maxlen: 24
                          63.216.61.0/24 maxlen: 24
                          63.216.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Aug 2026 19:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Jul 28 19:40:16 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6905a0-031c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:9b:60:5d:85:be:b9:26:01:df:c7:a2:f2:
                    39:48:28:05:33:4c:fc:3d:50:cc:41:8f:4a:82:c2:
                    7d:1c:af:8a:bd:9d:00:bc:d1:a6:61:56:7c:52:56:
                    40:39:e7:91:04:99:75:49:ef:d8:48:5c:a0:91:5d:
                    e0:c9:67:b8:28:d5:fd:4f:58:a8:ba:61:45:85:cb:
                    34:e8:76:77:a5:2d:34:14:d4:db:66:20:ff:54:37:
                    75:c4:35:f3:10:c4:2d:86:82:9a:84:7d:36:d2:d6:
                    98:a4:b1:90:04:ef:ef:00:8e:12:46:be:90:72:90:
                    2b:11:f3:20:ae:b8:4a:9e:c9:10:99:8b:0f:4a:81:
                    c4:89:97:33:10:6e:60:ea:4b:a4:83:d0:03:df:7c:
                    63:e8:1a:58:53:12:fc:fe:22:b8:71:58:26:b2:cf:
                    3e:7e:4e:2a:f9:35:13:d7:e7:43:2e:e5:19:4f:ee:
                    2b:78:a4:03:06:fa:cc:a4:be:b0:d8:92:5c:91:dc:
                    19:f5:ea:9f:80:09:25:06:ed:55:63:39:91:38:b1:
                    b6:79:15:35:a0:b7:78:c8:e8:20:39:1a:54:db:a3:
                    7e:08:34:c5:09:13:01:22:8f:1f:90:2f:94:0f:9c:
                    d3:47:da:17:4d:5c:16:a2:93:7d:86:23:48:84:ab:
                    26:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:30:F5:86:00:B9:7B:A1:0E:24:DC:AC:EA:72:72:5C:57:07:8D:5F
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/132BB03C29F411F1A9D9FDE9A2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.216.59.0/24
                  63.216.61.0-63.216.62.255

    Signature Algorithm: sha256WithRSAEncryption
         aa:78:a0:92:e8:06:49:b1:1f:f4:19:4d:5c:91:c2:64:63:d6:
         71:40:3c:58:55:f1:38:61:e9:de:d8:fa:c1:0d:69:30:4c:51:
         17:a3:93:f6:c7:3f:2b:70:83:42:d0:24:06:58:59:5c:9d:05:
         19:8c:76:46:a3:eb:ef:13:82:7d:f2:08:25:01:f6:08:80:4f:
         79:18:31:14:fe:05:5b:89:66:89:03:7a:5d:3e:2a:51:39:3f:
         bc:c4:01:99:30:b9:8c:ae:83:da:28:bb:60:4d:b5:02:53:0c:
         36:da:8b:2b:76:a0:34:a9:ee:77:12:c1:46:87:25:65:42:9c:
         aa:0d:51:98:99:6f:02:ad:6a:34:e8:72:b4:87:be:7b:7c:74:
         a9:55:dc:52:5b:54:c1:12:d6:3f:78:00:fc:ca:e2:ae:21:13:
         82:da:2f:99:de:66:13:81:56:2a:6a:7a:42:d7:66:01:b8:a7:
         75:d2:2f:7c:78:65:0b:5b:bc:76:49:a9:ac:6d:f2:11:0e:39:
         f0:7a:5b:c7:0a:18:a7:ba:28:45:d8:3e:fd:78:0d:42:04:97:
         63:93:c5:49:0a:17:2a:8b:01:cf:30:64:46:54:73:e2:51:f5:
         da:2b:e5:63:63:2d:05:e5:d2:6d:24:2d:9b:88:34:0c:fe:0e:
         62:61:03:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:42:20 2026 by rpki-client