Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7FCB16B6175111EC8D2A3722C4F9AE02.roa
File:                     7FCB16B6175111EC8D2A3722C4F9AE02.roa (raw, json)
Hash identifier:          BEIgK3O7SaFfmvnXuudxvNqnEJFGtTYbWVAvUD/sJ80=
Subject key identifier:   4F:E9:01:17:65:74:18:48:8D:61:DA:42:BC:F4:DF:46:10:76:16:97
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       071C
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7FCB16B6175111EC8D2A3722C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 23:44:19 +0000
ROA not before:           Wed 02 Sep 2026 23:44:19 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     58780
IP address blocks:        220.101.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 22:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1820 (0x71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Sep  2 23:44:19 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a98b4d3-ab01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:83:b3:9b:1c:5f:d2:82:30:10:c1:4c:e8:
                    ce:77:9a:43:43:c7:aa:11:6c:fc:90:d1:13:0d:8d:
                    c6:ec:1b:82:3e:68:43:57:fa:ae:15:db:44:43:cf:
                    89:09:ad:97:06:c6:1f:39:69:bd:02:1e:ad:52:27:
                    b3:88:bc:a5:a6:88:7a:93:6b:a8:99:c5:8d:43:5f:
                    5c:8c:36:7b:72:ce:b2:c8:88:5d:f2:cc:16:24:08:
                    69:9f:6f:7d:77:99:37:dc:2f:4d:98:8b:09:9a:62:
                    f9:0b:91:58:86:ed:3d:a9:e2:90:fc:e5:3e:ad:db:
                    f1:d4:ac:e0:01:89:cd:e3:9f:f1:07:c4:8e:34:cc:
                    2b:e2:2a:c3:a0:b9:73:37:76:3b:cf:ba:23:1e:62:
                    a3:c8:3f:49:22:f2:57:ca:98:73:ba:de:6f:70:1c:
                    3a:51:9d:42:74:64:85:21:7b:36:73:21:d7:48:57:
                    6b:1d:ad:f9:57:88:fa:76:86:a9:e1:2a:80:52:6a:
                    b8:a8:31:8b:ec:2f:17:04:fa:3c:50:0e:91:bf:d2:
                    d6:2f:cc:b6:10:b6:d5:72:5c:43:3a:62:c4:8f:16:
                    22:43:cb:5f:c0:dd:ac:f5:3a:64:ef:03:2e:6b:cd:
                    1e:66:91:76:48:99:04:6f:8b:7c:89:f4:3f:ef:44:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E9:01:17:65:74:18:48:8D:61:DA:42:BC:F4:DF:46:10:76:16:97
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7FCB16B6175111EC8D2A3722C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.101.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:3a:f8:9e:26:34:55:4f:ee:e5:34:db:d2:cb:e1:d5:85:df:
         7b:67:8a:45:99:94:b5:c8:7d:a7:9d:98:60:83:de:4a:4d:10:
         14:67:35:35:58:44:f8:13:e8:6c:bb:56:15:a0:80:6a:e6:b2:
         c1:bc:67:1c:d6:aa:f5:25:aa:df:d3:0e:ee:50:04:2c:8b:ae:
         6b:2e:91:75:eb:f9:e1:ea:c0:03:36:83:cf:3b:9a:81:1d:04:
         7f:2c:12:00:87:46:b8:76:f5:10:2c:2b:2c:47:db:d5:71:33:
         0e:3c:c4:12:3e:81:4f:81:a8:07:aa:50:9f:5c:8d:fb:27:a6:
         c8:2a:67:aa:79:4c:f8:10:ab:88:27:67:91:6e:ed:d5:cd:9b:
         4a:98:ff:05:c9:c7:cd:fa:3d:0d:99:a1:bb:51:ba:1c:fe:a8:
         f4:87:67:d3:01:98:42:7b:9d:75:be:c4:e8:6c:5c:3e:e0:9f:
         9f:ee:ba:22:a7:a5:ea:c1:b1:51:d5:f4:e8:e0:70:82:8e:98:
         8d:cb:85:5f:71:0a:87:bd:ae:70:37:e2:a7:1f:a7:eb:ac:aa:
         5d:ff:bd:1e:64:73:13:48:9d:d6:4a:07:61:66:06:93:b7:23:
         7e:f0:ff:5a:0c:3e:7b:9d:2b:40:82:ec:be:7b:5c:51:4c:74:
         7a:86:65:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 08:52:21 2026 by rpki-client