Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/D5C188B88DBD11E9877F5B11C4F9AE02.roa
File:                     D5C188B88DBD11E9877F5B11C4F9AE02.roa (raw, json)
Hash identifier:          GeaS1wm5HUzDhRPnFMwxNijLtG7Ej2e1/5+Wkd8XMhE=
Subject key identifier:   72:CF:88:F1:EA:02:77:B3:85:D9:3B:E8:DB:5A:69:6B:86:2C:B7:4C
Certificate issuer:       /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
Certificate serial:       357E
Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/D5C188B88DBD11E9877F5B11C4F9AE02.roa
Signing time:             Thu 30 Jul 2026 15:10:38 +0000
ROA not before:           Thu 30 Jul 2026 15:10:38 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     7693
IP address blocks:        140.149.0.0/16 maxlen: 16
                          140.149.0.0/17 maxlen: 17
                          140.149.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 14:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13694 (0x357e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
        Validity
            Not Before: Jul 30 15:10:38 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6b696e-1c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:13:41:39:3d:eb:d4:3d:2a:a5:00:57:de:2b:
                    2c:9b:84:38:c3:6b:19:bc:4c:76:22:3e:86:ce:08:
                    d6:c3:bb:3c:d3:44:09:8c:ba:57:d5:de:52:83:98:
                    22:e8:60:96:b6:87:c4:fc:10:2f:36:24:90:ee:a8:
                    20:56:61:d2:fb:25:10:96:a1:c1:5c:17:ca:eb:e5:
                    56:39:d1:be:31:e6:d9:5b:8e:e0:04:96:41:13:f9:
                    ec:43:5f:11:a4:f6:91:3d:3a:a7:28:cd:71:fe:0c:
                    7f:8a:51:51:17:90:ea:79:b8:fc:d9:9e:1d:dd:64:
                    14:5b:67:8d:73:6e:26:cc:39:b3:55:ce:ef:eb:02:
                    df:b4:69:3c:1a:d8:f1:e7:7d:32:26:c0:3c:06:57:
                    80:e5:e8:05:37:ad:60:4e:f8:10:bf:d0:f4:4a:7f:
                    f2:5f:41:53:08:a4:81:24:91:af:34:5a:79:09:25:
                    7f:00:a4:0f:c5:c9:14:4e:e1:41:03:48:ee:0d:f6:
                    52:eb:a8:12:a3:0e:b3:ed:ff:1a:fa:19:af:e3:e6:
                    9b:c6:28:15:07:f2:5e:ad:cb:18:94:c4:32:d0:23:
                    84:22:cf:94:32:5a:b0:39:34:4d:ba:a3:80:cd:0a:
                    7f:12:99:cd:8d:48:65:66:e3:86:62:3a:14:f1:be:
                    dc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CF:88:F1:EA:02:77:B3:85:D9:3B:E8:DB:5A:69:6B:86:2C:B7:4C
            X509v3 Authority Key Identifier:
                keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/D5C188B88DBD11E9877F5B11C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         56:b1:14:c9:d4:d7:36:ef:c8:23:41:b4:e8:cc:dd:1e:03:f2:
         01:ff:fb:da:bd:e4:25:67:62:c3:97:0c:86:fc:52:19:af:67:
         84:1b:82:db:74:7c:e2:1b:b1:13:69:ea:c5:3f:2a:d9:f0:8e:
         85:a2:56:1b:9c:31:11:30:64:a4:fc:a8:0e:bb:0e:d4:1c:3c:
         2b:16:d2:a1:21:19:a5:0c:61:f2:ca:81:1e:dd:fa:54:69:38:
         e4:cf:eb:07:93:58:15:0a:b5:17:75:b2:c0:d1:12:e0:d2:dc:
         00:64:84:83:dc:bf:f2:78:c8:dd:92:95:94:68:a1:2a:ba:81:
         9f:31:90:49:10:3c:f6:f9:10:bb:62:29:32:8b:b2:4d:7d:e9:
         5c:d1:b2:a2:d5:a0:57:f3:18:b6:89:1d:60:b0:8f:9f:70:3a:
         f8:0e:68:8c:2a:8c:1e:92:44:6f:ca:f7:3e:a8:7b:8b:72:f5:
         33:e1:df:57:45:0d:86:cf:21:25:13:54:2a:d6:b0:d8:6f:e4:
         ec:af:a1:12:19:06:a6:1d:fd:d0:3e:36:51:e8:7c:ba:42:f9:
         2a:80:d9:da:f3:9f:74:8c:dd:c3:fc:d2:11:c7:a9:17:ff:27:
         eb:b2:a4:af:72:56:a2:af:70:0b:88:35:7f:73:df:90:dd:91:
         53:16:e0:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 4 22:25:32 2026 by rpki-client