Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2BACF3E0503311F19EEBDD3DCA833773.roa
File:                     2BACF3E0503311F19EEBDD3DCA833773.roa (raw, json)
Hash identifier:          /MoUsy5V47x47FceRDaSbJt6J0MW0q3Fr+X58vRHhR0=
Subject key identifier:   69:C9:3F:AA:EA:4C:D6:B1:8F:D5:3B:B5:3E:86:90:0C:7A:08:54:AF
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       22B6
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2BACF3E0503311F19EEBDD3DCA833773.roa
Signing time:             Fri 15 May 2026 07:53:33 +0000
ROA not before:           Fri 15 May 2026 07:53:33 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     45903
IP address blocks:        162.4.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 14:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8886 (0x22b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: May 15 07:53:33 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a06d0fd-6ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:8c:19:9c:fd:60:61:b2:38:a4:33:20:35:
                    a0:0a:16:ab:0c:a9:0c:13:a4:0c:a4:b5:c4:1e:ff:
                    d1:80:ae:19:5e:1c:e2:ce:28:9f:37:ab:dd:f6:bf:
                    39:a4:00:a8:df:40:70:fa:60:89:4b:e0:61:7b:53:
                    b9:0f:a9:f3:57:80:9c:d5:a5:08:8c:f8:46:25:e7:
                    2c:6a:7b:e1:89:5c:7d:81:f7:2f:c1:07:70:0b:a7:
                    71:86:78:92:7e:95:2b:22:bd:41:88:11:84:4e:47:
                    d1:f6:fc:63:59:92:a6:d6:de:05:ac:4d:45:63:57:
                    12:15:ac:ae:e6:af:b6:9a:0c:ca:2f:73:2f:cb:05:
                    da:0b:69:f6:e1:30:c9:c8:67:cb:b4:fe:27:36:a5:
                    52:1d:05:33:93:25:7f:6e:a3:32:e8:7c:10:5f:d5:
                    ef:45:14:b1:40:ae:ce:de:86:f4:b6:39:e7:eb:a7:
                    84:a7:ba:e8:6a:fa:69:60:4c:a0:d1:27:a9:f7:87:
                    8f:e8:cb:28:a6:39:50:c8:c7:a4:3c:f8:89:46:23:
                    0c:32:63:e5:9a:8b:0e:90:57:76:56:7f:db:e2:27:
                    a1:4b:08:88:73:04:97:c0:aa:28:62:fd:b3:e5:b6:
                    9d:f6:4f:18:71:02:9e:19:c2:3f:63:a1:51:61:f6:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C9:3F:AA:EA:4C:D6:B1:8F:D5:3B:B5:3E:86:90:0C:7A:08:54:AF
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2BACF3E0503311F19EEBDD3DCA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:a8:e7:56:e7:35:16:b4:67:29:88:51:b4:19:fb:da:8f:97:
         11:38:59:45:ea:b9:33:57:20:d3:3e:47:03:71:3a:8b:11:fb:
         b4:b0:3f:00:ea:c0:d6:cd:89:7f:d8:77:37:5d:73:ea:d0:20:
         29:86:41:21:93:cf:54:69:e5:f9:f0:ab:6b:a2:ac:43:5a:4b:
         b2:dc:10:b4:29:a0:14:9e:f0:98:cc:91:c2:b6:a5:27:c4:41:
         31:28:07:33:32:b5:45:45:12:6a:5b:a0:de:a2:0d:6b:be:36:
         a7:d3:6b:e8:65:f5:05:1f:53:6f:14:45:3c:98:c7:c6:d7:2d:
         f1:b2:b9:4c:14:ee:75:f9:41:29:f3:ed:d0:75:0a:65:45:4e:
         f0:d6:4d:44:89:59:51:43:33:66:f2:d3:0e:de:d5:8e:b2:c8:
         3f:f8:30:20:f5:5a:60:9a:6d:08:0c:9c:21:23:7b:df:6b:85:
         70:85:af:2c:ef:f0:d5:d8:25:ca:2c:ba:13:ab:1f:29:ff:ee:
         5c:03:18:97:9f:17:ca:f7:f6:6f:e8:43:89:72:7f:2c:17:b2:
         57:ed:ec:70:c9:19:32:e0:d7:fb:96:f5:be:38:f1:9a:ff:01:
         5d:70:99:41:d1:b7:81:c5:28:ea:05:48:5c:47:d6:3e:f2:ba:
         61:77:6a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:38:57 2026 by rpki-client