Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/795E775CBD7B11F182EB58B66911F970.roa
File:                     795E775CBD7B11F182EB58B66911F970.roa (raw, json)
Hash identifier:          r0uKeirlP+BUrH5zH9qvtx1weVr+VrXu/913rYMa7E0=
Subject key identifier:   86:FA:6B:12:89:DD:F7:84:2D:A0:95:0F:B0:9A:03:9B:19:CF:A4:48
Certificate issuer:       /CN=A91A2BF7/serialNumber=B868AEAD2C066EB644444DB0475522833624A142
Certificate serial:       04
Authority key identifier: B8:68:AE:AD:2C:06:6E:B6:44:44:4D:B0:47:55:22:83:36:24:A1:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uGiurSwGbrZERE2wR1UigzYkoUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/795E775CBD7B11F182EB58B66911F970.roa
Signing time:             Thu 01 Oct 2026 09:37:54 +0000
ROA not before:           Thu 01 Oct 2026 09:37:54 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     139303
IP address blocks:        163.52.64.0/24 maxlen: 24
                          2001:df7:6840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/uGiurSwGbrZERE2wR1UigzYkoUI.crl
                          rsync://rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/uGiurSwGbrZERE2wR1UigzYkoUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uGiurSwGbrZERE2wR1UigzYkoUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 10:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2BF7, serialNumber=B868AEAD2C066EB644444DB0475522833624A142
        Validity
            Not Before: Oct  1 09:37:54 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abe29f2-0ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:12:de:98:79:d7:2d:ec:dc:47:26:72:90:
                    3d:28:90:fa:c4:c7:eb:bc:86:92:ff:73:e5:a9:74:
                    81:dd:6f:c0:57:33:62:cb:91:b9:9e:a3:40:7b:bc:
                    1b:6d:b1:ae:79:88:d1:27:81:04:fa:5b:09:b1:28:
                    70:31:01:7f:32:88:30:bb:26:bc:b3:28:52:70:06:
                    05:ab:8d:58:90:89:44:fc:cb:3d:4b:e0:63:c2:da:
                    0b:b6:ea:96:c5:e3:5b:57:c4:11:28:30:5e:43:f2:
                    41:52:f3:6a:ef:43:3f:10:72:6d:ba:71:35:19:35:
                    47:99:52:d5:24:e4:8b:12:4c:c3:a5:7d:74:63:58:
                    07:b5:dd:85:ba:30:a1:b1:70:c2:b0:71:2d:80:f9:
                    67:2b:1c:b0:d6:ba:d0:13:25:3d:ee:ac:7b:cd:91:
                    d1:c3:37:0a:23:20:76:35:fd:47:75:da:e7:67:ae:
                    99:6f:3d:89:d6:24:2f:4a:28:5d:6d:14:3a:6e:ce:
                    5c:74:99:e3:f0:af:87:3c:f1:b7:a4:b4:df:40:dc:
                    2e:94:a5:f9:70:5d:68:c5:12:c7:f9:09:1a:c9:3f:
                    97:7f:b4:08:3c:c2:da:26:cc:ba:70:7e:7a:bc:cd:
                    8c:8f:ab:4a:4b:17:e8:d1:60:88:b7:41:7d:8c:81:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FA:6B:12:89:DD:F7:84:2D:A0:95:0F:B0:9A:03:9B:19:CF:A4:48
            X509v3 Authority Key Identifier:
                keyid:B8:68:AE:AD:2C:06:6E:B6:44:44:4D:B0:47:55:22:83:36:24:A1:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/uGiurSwGbrZERE2wR1UigzYkoUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uGiurSwGbrZERE2wR1UigzYkoUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BF7/BCBF6B7EBD7A11F1B517E9846911F970/795E775CBD7B11F182EB58B66911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.64.0/24
                IPv6:
                  2001:df7:6840::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:50:ab:16:10:d6:6a:1e:4b:8d:86:97:f3:00:6f:89:2b:04:
         be:cf:02:6a:58:08:6e:24:4b:88:d0:f7:9a:5d:38:79:79:28:
         7e:33:30:b9:5b:a8:14:c0:88:64:4f:93:1d:57:41:bf:8e:0b:
         fb:f0:d0:35:e8:c3:22:2c:0e:a7:24:71:7b:cd:39:b4:72:3c:
         c0:b4:46:49:4f:9c:7c:b4:a8:25:9e:44:c2:58:c6:50:b7:a4:
         ca:de:b6:c1:41:d9:58:bf:fd:31:7b:1a:05:fa:a8:d5:f7:57:
         23:89:b3:24:d5:eb:43:c9:b8:a5:f3:9c:14:bf:3b:6d:b1:51:
         23:0c:b6:aa:69:10:12:2b:9b:96:30:44:c3:da:44:60:89:74:
         d6:a2:03:64:aa:52:88:20:39:44:73:7a:7a:4b:43:f9:a7:a2:
         e8:ba:a7:08:28:c9:ef:dc:97:d4:59:2d:f3:93:0c:5c:31:ee:
         17:15:30:72:9a:e6:ca:32:5a:04:e0:f7:d3:cd:b1:81:e5:01:
         e6:bc:b7:80:8d:37:3e:e8:f5:44:d7:a8:10:9a:a6:e4:e2:88:
         e0:12:75:ff:77:ed:3c:48:5a:d9:c6:b4:e7:14:50:fe:fc:e5:
         3f:fc:6a:4b:5f:57:dc:1c:67:a4:81:76:e0:e4:30:66:88:24:
         55:44:26:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:43:35 2026 by rpki-client