Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/86ED876641FA11F1981D4479BF833773.roa
File:                     86ED876641FA11F1981D4479BF833773.roa (raw, json)
Hash identifier:          XFL6mI4Gu2G+uhcQv/+L+HI2iPFP+/lJsT4aQySwhRg=
Subject key identifier:   17:9A:3A:6D:7C:83:12:CB:65:76:4E:8A:EB:03:90:D3:40:65:87:C2
Certificate issuer:       /CN=A91964B3/serialNumber=E71F870E72BD226E7BFA3AAB1A918AB462326C5F
Certificate serial:       7D
Authority key identifier: E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/86ED876641FA11F1981D4479BF833773.roa
Signing time:             Thu 22 Oct 2026 06:42:59 +0000
ROA not before:           Thu 22 Oct 2026 06:42:59 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9498
IP address blocks:        177.4.96.0/20 maxlen: 24
                          177.6.32.0/20 maxlen: 24
                          177.177.32.0/20 maxlen: 24
                          177.177.112.0/20 maxlen: 24
                          177.203.80.0/20 maxlen: 24
                          177.203.160.0/20 maxlen: 24
                          179.198.240.0/20 maxlen: 24
                          179.255.80.0/20 maxlen: 24
                          179.255.192.0/20 maxlen: 24
                          186.242.160.0/19 maxlen: 24
                          186.244.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.crl
                          rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91964B3, serialNumber=E71F870E72BD226E7BFA3AAB1A918AB462326C5F
        Validity
            Not Before: Oct 22 06:42:59 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6ad9b073-7306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:eb:c5:ee:36:fa:57:ca:30:ab:e2:b1:e9:
                    09:36:56:af:58:3c:8d:1f:53:a9:bb:d9:16:3f:98:
                    a6:45:26:9c:86:11:d5:ed:76:4a:33:5e:65:2b:4f:
                    7c:63:91:dc:23:5d:aa:8e:cf:07:d5:34:bf:93:e3:
                    f8:49:d1:5e:64:6d:c3:29:b3:13:f7:c2:02:5f:19:
                    39:63:64:05:21:97:79:1a:f3:0b:a7:81:f9:dc:4b:
                    e2:f8:24:77:79:ca:e2:16:db:57:cd:fd:4a:aa:54:
                    ed:03:79:2a:f0:7b:23:28:b1:ef:4a:15:e5:c1:8e:
                    22:90:10:c4:d2:8d:75:2b:93:b3:24:50:87:6a:22:
                    39:e7:5e:24:57:9e:00:ee:1a:0a:96:74:e7:5d:3e:
                    94:1a:c8:4a:21:80:a7:a4:16:a8:51:e9:ad:2c:0b:
                    dd:4d:6e:cc:5b:33:f2:87:12:4c:38:41:b4:29:bb:
                    05:9d:06:0b:38:2a:b7:3a:91:e3:38:fc:b2:c8:ba:
                    ee:7e:6b:14:8e:e3:74:5f:d1:86:7e:db:b3:dd:ca:
                    e7:fe:24:8f:96:5d:36:6a:04:69:01:d5:55:cd:04:
                    17:1a:2f:63:91:41:8f:03:ca:f3:9a:79:5e:df:ca:
                    c1:73:a0:08:ae:c2:e6:17:76:b3:9e:3f:15:c0:92:
                    2e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9A:3A:6D:7C:83:12:CB:65:76:4E:8A:EB:03:90:D3:40:65:87:C2
            X509v3 Authority Key Identifier:
                keyid:E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/86ED876641FA11F1981D4479BF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.4.96.0/20
                  177.6.32.0/20
                  177.177.32.0/20
                  177.177.112.0/20
                  177.203.80.0/20
                  177.203.160.0/20
                  179.198.240.0/20
                  179.255.80.0/20
                  179.255.192.0/20
                  186.242.160.0/19
                  186.244.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:a3:5d:82:55:19:f4:2c:6f:eb:da:2b:2f:fd:e6:f9:b1:49:
         98:18:50:9b:6b:7a:2e:a8:aa:d4:a5:e3:c2:05:aa:6e:58:b3:
         ed:eb:4a:44:db:44:3e:5d:1c:7b:10:a0:4e:0e:9b:b0:05:f8:
         ba:3a:98:79:07:09:25:74:54:54:21:ce:f0:9f:80:67:69:8a:
         2a:af:9b:5a:b6:20:a3:ff:ea:a2:2f:8b:ad:62:f2:64:51:ee:
         fd:0d:91:e3:84:95:76:22:fc:a1:c9:0b:82:a0:d7:79:c0:c3:
         6e:22:1c:07:2d:85:6d:51:86:3c:6f:79:36:28:ac:aa:45:89:
         87:54:61:c9:99:93:50:27:d3:07:70:a1:b9:f7:d6:a4:cb:83:
         b2:d8:48:c0:f4:49:e8:46:8d:7f:0b:e3:43:d9:d9:df:5c:a0:
         0f:b0:62:c9:41:db:c0:6c:86:6d:30:e4:92:af:5c:6a:3c:db:
         b0:89:5b:49:08:49:28:78:6b:04:ff:87:32:56:40:98:16:f0:
         c3:d4:74:5a:93:8b:38:70:28:c5:2b:1a:85:ab:19:5d:6e:09:
         75:2e:a3:ed:f3:47:73:7f:e4:a6:90:64:5a:33:f1:1b:5d:e9:
         5f:30:b7:30:4a:f8:f0:05:0f:7f:ea:9e:3b:8b:1d:2e:6f:e7:
         f6:94:7a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:33:46 2026 by rpki-client