Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/65037DC0F72B11EE94855861C4F9AE02.roa
File:                     65037DC0F72B11EE94855861C4F9AE02.roa (raw, json)
Hash identifier:          ALXw9emohfHu8jtOihihgw6+ozvc9A3Vbn9Sd2N0eTc=
Subject key identifier:   33:52:0C:65:43:F0:26:57:6E:61:04:A0:27:91:7E:34:41:0B:09:C7
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3833
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/65037DC0F72B11EE94855861C4F9AE02.roa
Signing time:             Thu 08 Oct 2026 15:15:37 +0000
ROA not before:           Thu 08 Oct 2026 15:15:37 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     7018
IP address blocks:        175.29.4.0/22 maxlen: 24
                          175.29.128.0/21 maxlen: 24
                          203.76.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 14:28:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14387 (0x3833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 15:15:37 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac7b399-b4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ad:e1:d8:f7:17:7d:42:53:99:70:89:11:ce:
                    c9:9c:a0:f8:74:db:ff:58:12:9e:97:8a:32:49:81:
                    37:fa:3c:8d:f7:45:e7:3b:8e:d0:5c:13:71:61:56:
                    66:7e:90:bb:37:9e:6d:44:be:06:4a:55:ca:58:d9:
                    67:9e:11:e6:60:4f:8d:96:50:46:2d:d3:da:ad:1a:
                    4f:b1:ff:65:3b:57:f7:bc:ab:7d:e2:43:4b:b5:66:
                    fc:99:2c:72:bf:c5:ba:cb:4a:a0:78:da:eb:ac:e1:
                    c2:f8:da:e9:1e:41:e9:76:fc:1b:76:32:47:78:b2:
                    62:6f:64:d5:c2:6a:ed:63:a0:51:86:7b:8a:4d:d2:
                    ef:ce:f5:e5:b7:fc:fd:53:10:9e:71:47:4c:1a:eb:
                    aa:fd:52:70:f5:6b:cb:af:3e:5e:60:de:c7:37:7f:
                    9d:43:97:10:90:c5:25:a5:d8:c9:41:59:7c:8a:b0:
                    63:d6:92:50:6e:8e:ca:0f:7c:62:5c:c2:c3:82:01:
                    85:62:df:fb:f2:b9:14:43:8d:53:53:13:22:ea:bc:
                    4e:40:3a:ec:69:dd:71:10:07:31:f1:f0:55:e0:d9:
                    01:da:f9:e4:fd:fa:d2:8e:4c:95:e7:1d:8f:86:a4:
                    ab:e4:4a:0d:91:a9:04:1e:a3:b9:56:5b:67:89:2f:
                    61:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:52:0C:65:43:F0:26:57:6E:61:04:A0:27:91:7E:34:41:0B:09:C7
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/65037DC0F72B11EE94855861C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.4.0/22
                  175.29.128.0/21
                  203.76.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:d9:58:13:4b:f3:3d:1f:98:70:a5:03:37:bf:03:b9:49:6f:
         39:ed:63:59:e5:a6:ef:dd:ef:a3:69:32:49:f9:c8:86:6a:a3:
         97:12:f5:ec:7a:6a:4b:11:66:21:ee:01:c0:c0:1e:49:1e:fd:
         52:21:80:70:de:ae:04:1b:9d:13:09:c3:84:77:b6:45:15:9e:
         44:49:4d:75:ad:cc:c3:f9:98:e0:18:94:2e:a1:03:e0:ba:67:
         c8:03:1d:27:c8:8f:cb:3c:f1:72:01:3f:6e:fd:7d:61:bb:4a:
         eb:29:4a:40:40:ed:d5:03:a3:25:2b:b7:29:5e:38:d3:d1:99:
         7d:ac:32:c4:65:da:12:1e:2f:8e:99:56:9b:3c:5e:f3:76:c4:
         0d:3c:e0:18:c3:e1:74:07:7b:48:81:2f:68:4f:55:04:1a:cb:
         39:24:4b:6f:0b:69:80:de:ef:3e:27:3b:57:68:9f:cf:cd:e6:
         27:65:d5:d0:c6:20:36:bc:d6:83:12:c4:d6:eb:70:09:a6:bf:
         c3:fb:cf:d6:79:00:60:cb:98:8e:39:10:52:15:fa:6b:9b:d5:
         87:c1:1c:50:3b:80:8d:de:3f:13:6c:85:96:88:c6:2f:8a:a9:
         18:18:38:2e:91:a0:36:00:88:f3:31:67:53:a7:bc:73:14:64:
         a9:7d:bf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 14:44:37 2026 by rpki-client