Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/FFF66C16B1FA11F18EC9E9F94D11F970.roa
File:                     FFF66C16B1FA11F18EC9E9F94D11F970.roa (raw, json)
Hash identifier:          2mv9ZOAc6mHVkd+OYaS2VGBltCSWoZlTZtwkPDhN2U0=
Subject key identifier:   05:87:6C:3B:8F:8A:66:F3:E1:CA:96:4A:6D:7A:B8:E2:83:92:81:AC
Certificate issuer:       /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
Certificate serial:       35E0
Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/FFF66C16B1FA11F18EC9E9F94D11F970.roa
Signing time:             Sun 04 Oct 2026 15:10:27 +0000
ROA not before:           Sun 04 Oct 2026 15:10:27 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     141342
IP address blocks:        182.255.48.0/24 maxlen: 24
                          182.255.49.0/24 maxlen: 24
                          182.255.50.0/24 maxlen: 24
                          182.255.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl
                          rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13792 (0x35e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
        Validity
            Not Before: Oct  4 15:10:27 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac26c63-be4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:b9:f4:d5:f8:3e:24:7b:b4:b8:27:f5:5f:
                    67:76:58:5f:f4:a9:37:99:9f:92:a8:d7:25:50:1e:
                    7f:a5:df:e0:cf:55:ee:27:9c:6d:2f:67:2e:1a:13:
                    34:0d:98:20:36:70:cd:3f:55:ec:94:35:34:8c:9b:
                    3f:30:fb:95:fa:c3:9c:24:af:ad:ce:dd:e9:d0:51:
                    60:48:24:27:4e:1c:88:c9:a3:44:98:72:ff:3e:79:
                    fc:91:e2:6c:f9:f2:ed:1b:ea:e7:5f:49:72:89:52:
                    ff:cd:d8:68:38:40:cb:e9:24:0d:7d:0b:ab:9f:be:
                    92:1c:c5:7f:47:95:d3:8d:53:ce:fe:aa:65:3c:87:
                    59:8b:fa:5d:d6:ec:a6:16:02:74:94:04:11:27:ed:
                    9a:e6:4e:d8:57:42:e2:6e:c0:c2:ca:dd:14:92:55:
                    b3:ff:6d:84:5e:41:36:ab:cc:de:a6:1f:59:aa:20:
                    52:9c:56:05:e9:88:a9:d1:1a:1e:d0:a4:cc:d0:d3:
                    e7:18:b3:6b:2c:de:9e:13:e5:70:f3:a5:54:27:e0:
                    bf:54:7c:c9:66:ce:22:4c:7d:2a:b9:1c:bb:d5:30:
                    b8:f2:b8:d1:a1:c3:69:ad:5e:1e:54:24:68:7d:d9:
                    82:6d:72:2a:9b:f5:0f:88:5c:4a:6e:01:53:cb:f2:
                    f6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:87:6C:3B:8F:8A:66:F3:E1:CA:96:4A:6D:7A:B8:E2:83:92:81:AC
            X509v3 Authority Key Identifier:
                keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/FFF66C16B1FA11F18EC9E9F94D11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:89:80:23:c0:78:45:22:79:93:f9:b1:bd:2d:46:1f:0c:36:
         b8:0f:fd:c4:ef:26:f7:f6:61:fc:32:32:02:dd:d3:05:0f:a0:
         b7:9b:2c:7a:b8:ac:35:62:15:6f:c3:ec:9d:73:dd:28:ff:a5:
         9c:5c:c4:c8:35:8e:df:3c:84:ec:fd:d4:38:a2:d4:52:00:37:
         e3:16:6e:5d:37:0e:9c:b4:b8:80:f6:93:e0:26:83:4a:29:f1:
         40:fb:b4:81:8d:35:99:06:6b:5e:6d:ee:ab:9a:fd:4a:80:24:
         ef:41:df:7c:ef:a3:e5:33:87:55:72:37:71:58:a4:fd:d1:51:
         48:57:65:fb:44:3f:c5:d5:ba:79:e2:ca:cd:10:82:b5:16:f5:
         bb:3f:b8:a7:ad:6f:eb:70:2f:3f:c5:28:2e:c1:f4:d7:27:63:
         b4:d5:71:56:7b:58:fd:c4:1b:86:55:74:54:ff:f3:81:7a:66:
         7a:1a:56:e2:fe:ab:8b:ee:12:4b:e4:96:41:d5:9f:f9:d2:aa:
         d8:80:ea:6a:41:57:67:21:b6:fc:3b:3d:bb:52:3f:b7:a5:ad:
         54:31:97:de:e0:96:b0:ee:a1:58:64:bf:74:e0:0a:01:2a:99:
         07:41:0e:60:fa:53:a7:15:e1:6f:22:1d:6b:7a:31:37:59:a8:
         4e:cc:0b:7f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB
QzJFMjJEMzcwHhcNMjYxMDA0MTUxMDI3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMyNmM2My1iZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv9m59NX4PiR7tLgn9V9ndlhf9Kk3mZ+SqNclUB5/pd/gz1XuJ5xtL2cuGhM0
DZggNnDNP1XslDU0jJs/MPuV+sOcJK+tzt3p0FFgSCQnThyIyaNEmHL/Pnn8keJs
+fLtG+rnX0lyiVL/zdhoOEDL6SQNfQurn76SHMV/R5XTjVPO/qplPIdZi/pd1uym
FgJ0lAQRJ+2a5k7YV0LibsDCyt0UklWz/22EXkE2q8zeph9ZqiBSnFYF6Yip0Roe
0KTM0NPnGLNrLN6eE+Vw86VUJ+C/VHzJZs4iTH0quRy71TC48rjRocNprV4eVCRo
fdmCbXIqm/UPiFxKbgFTy/L2zwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAWHbDuP
imbz4cqWSm16uOKDkoGsMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE
NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM
VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUQ2NEQvRDkzMzNGRTQxRDZFMTFFMkE4NTA4MEIwMDhCMDJDRDIvRkZGNjZDMTZC
MUZBMTFGMThFQzlFOUY5NEQxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCtv8wMA0GCSqGSIb3DQEBCwUAA4IBAQCKiYAjwHhFInmT+bG9LUYf
DDa4D/3E7yb39mH8MjIC3dMFD6C3myx6uKw1YhVvw+ydc90o/6WcXMTINY7fPITs
/dQ4otRSADfjFm5dNw6ctLiA9pPgJoNKKfFA+7SBjTWZBmtebe6rmv1KgCTvQd98
76PlM4dVcjdxWKT90VFIV2X7RD/F1bp54srNEIK1FvW7P7inrW/rcC8/xSguwfTX
J2O01XFWe1j9xBuGVXRU//OBemZ6Glbi/quL7hJL5JZB1Z/50qrYgOpqQVdnIbb8
Oz27Uj+3pa1UMZfe4Jaw7qFYZL904AoBKpkHQQ5g+lOnFeFvIh1rejE3WahOzAt/
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:47 2026 by rpki-client