Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/663066BA8CFD11EEB48A7871C4F9AE02.roa
File:                     663066BA8CFD11EEB48A7871C4F9AE02.roa (raw, json)
Hash identifier:          XBgLYhWWdVrP+Aj23LDllxdulelF70E8BThhf9P/nxM=
Subject key identifier:   86:89:44:59:12:68:9F:D9:55:4A:CB:34:C4:80:8C:44:D0:C4:60:FB
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5E8D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/663066BA8CFD11EEB48A7871C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:18:43 +0000
ROA not before:           Thu 28 Aug 2025 14:55:47 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151868
IP address blocks:        36.50.62.0/23 maxlen: 24
                          210.79.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24205 (0x5e8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:55:47 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60cc3-1e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a3:bf:89:bf:94:ae:aa:cd:6d:5d:ad:89:ec:
                    2d:dd:65:6a:04:ea:30:47:e7:e2:35:a1:2d:20:36:
                    55:ee:f3:b2:6e:1a:64:9b:93:1b:6f:79:24:1e:a9:
                    0f:bc:45:0e:ee:7c:76:c2:45:7c:d9:55:20:27:90:
                    48:0c:87:d3:ae:6a:a3:7c:c7:12:94:93:52:ea:bc:
                    c8:ed:e7:6e:80:49:51:09:6a:69:d5:3a:b8:84:a7:
                    c5:5c:5c:2a:c9:b4:25:b4:9a:9f:9b:65:4e:86:b3:
                    06:15:a6:bf:ca:61:09:5a:8a:a8:be:b7:c1:8d:58:
                    39:18:d8:4c:30:9e:2a:3a:79:b5:d8:61:63:e3:ba:
                    df:2a:e6:0c:67:cd:a3:ec:50:42:e1:d9:1a:52:c3:
                    ae:78:61:65:99:61:5c:e0:fe:1e:95:ed:23:b6:e6:
                    05:f6:53:13:04:8f:00:4f:82:ff:87:18:27:ea:92:
                    41:08:2b:6a:94:2d:5b:99:b6:dd:82:a2:01:85:f3:
                    d1:2d:e5:30:4c:8b:74:d7:31:ed:d0:25:1b:eb:6b:
                    35:07:76:95:00:6b:7b:cb:91:5a:a1:2c:27:03:f7:
                    37:09:fb:c4:df:80:d9:8e:b0:00:b8:bd:71:98:38:
                    5c:9d:00:c9:19:4f:34:f3:f3:b8:f5:58:9d:68:41:
                    32:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:89:44:59:12:68:9F:D9:55:4A:CB:34:C4:80:8C:44:D0:C4:60:FB
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/663066BA8CFD11EEB48A7871C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.62.0/23
                  210.79.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:05:37:8c:9f:08:54:5c:ed:9b:72:fa:b7:75:9d:25:58:8e:
         ca:ca:6e:16:a4:45:cb:3b:3b:03:79:29:22:ef:ed:78:05:93:
         46:7e:72:e5:22:3e:13:8a:c4:5c:e0:50:6d:b9:a1:1b:5c:cd:
         0c:a4:15:ad:41:3e:96:04:22:04:64:0a:b0:35:85:c9:bf:73:
         cf:1a:4b:43:46:29:f6:fa:09:2f:0a:4e:1b:77:66:55:dc:87:
         c9:3c:72:f6:bc:12:99:a6:41:36:41:36:48:a6:72:68:c0:ce:
         af:d7:88:05:4e:8b:0c:6e:4f:0e:24:65:df:c1:ac:95:6a:09:
         0e:00:e4:8a:17:1a:2f:e4:7b:44:8e:cd:f0:9e:ae:89:7d:7f:
         50:6c:ad:8a:5f:0b:c8:10:6f:15:39:16:70:3d:65:66:98:13:
         81:5f:3a:55:20:16:a3:8f:5b:1b:c8:d3:12:be:2b:1a:34:e5:
         af:92:33:a9:9f:49:b3:b1:b5:63:aa:3a:8f:03:fe:45:1a:35:
         12:14:04:36:db:02:16:3f:a9:bc:01:b7:63:b5:66:10:05:93:
         66:14:21:42:0a:5b:e4:93:7d:e4:b8:1d:40:43:c5:4d:34:97:
         c5:4c:23:d5:92:6f:60:a7:a0:c6:98:64:9b:9a:fc:d5:41:d9:
         be:d6:16:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:08 2026 by rpki-client