Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6769F04C700E11EFB014A77BC4F9AE02.roa
File:                     6769F04C700E11EFB014A77BC4F9AE02.roa (raw, json)
Hash identifier:          02RW4iM3D4AUJdBkc4do5c9pnROxNPR4x/v4oSwnGHw=
Subject key identifier:   A8:38:65:B5:73:CF:31:A7:3E:E1:46:20:54:7F:32:DA:CF:1F:1F:19
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F32
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6769F04C700E11EFB014A77BC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:37:08 +0000
ROA not before:           Fri 02 Oct 2026 15:37:08 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     56156
IP address blocks:        117.122.112.0/22 maxlen: 24
                          2001:dc8:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28466 (0x6f32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:37:08 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcfa4-3981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:bc:cf:da:8c:dd:11:fe:51:1e:47:d7:22:
                    00:9b:27:9e:2a:58:c3:95:c9:d9:ed:32:8d:2b:53:
                    fc:97:b3:68:b3:f8:f5:5f:64:4a:5e:b9:4e:00:e8:
                    87:13:24:0d:b9:fc:59:95:f6:9c:09:55:f7:e1:18:
                    37:c2:26:17:58:c7:b5:03:d6:d9:77:7b:78:43:06:
                    43:3a:e5:2d:67:9a:c7:f0:3d:32:24:a4:b1:d7:67:
                    45:53:22:24:77:0f:20:43:3a:a6:50:27:77:71:67:
                    8f:ed:3b:eb:4b:08:de:ab:25:fd:59:a6:aa:c6:d4:
                    de:25:d1:30:91:f3:87:41:c9:c9:19:6c:f0:21:bd:
                    ca:8d:78:43:a8:d5:55:81:a3:ac:3e:5a:9d:c1:65:
                    07:05:ba:38:6b:b4:b3:75:c3:d4:4c:6c:25:ea:85:
                    9d:68:e1:10:0a:b9:30:38:da:cf:7c:af:10:a5:da:
                    55:39:e9:bb:3c:bb:c5:35:8d:80:ea:18:51:5f:2b:
                    6c:04:36:81:60:df:32:63:9e:6b:b1:fa:9e:81:0a:
                    35:e4:95:bc:37:93:42:b7:57:69:75:c9:ad:d9:bc:
                    a6:9a:e9:64:0a:a5:39:b8:3e:74:8c:6f:ae:e3:59:
                    ce:69:be:8f:73:14:a6:5a:ed:81:1f:67:f5:67:43:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:38:65:B5:73:CF:31:A7:3E:E1:46:20:54:7F:32:DA:CF:1F:1F:19
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6769F04C700E11EFB014A77BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.122.112.0/22
                IPv6:
                  2001:dc8:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:3f:bc:53:c7:b8:19:fc:51:83:1f:c4:f0:06:21:cf:cf:de:
         78:00:a4:18:f7:0c:02:ad:56:f9:e5:cc:a1:11:a3:e4:58:4c:
         75:c6:c7:11:da:fb:24:5c:b5:36:a4:80:28:98:17:39:30:8c:
         6d:9e:ff:9f:b5:99:01:87:8e:f9:94:3e:a0:80:4a:6d:69:e8:
         b8:fe:3c:4a:e7:95:58:6a:c6:83:81:23:d4:a2:0a:40:da:9a:
         aa:f6:26:59:e0:f3:16:d1:e0:7b:c0:a1:e5:75:43:b4:88:7e:
         98:f3:1c:f9:10:37:65:ab:a8:20:67:f7:08:fc:6f:b2:9e:58:
         d1:eb:68:ba:14:d0:ad:20:d7:42:64:2b:b3:a7:82:5b:25:33:
         e2:9e:b8:de:6d:f2:16:e4:a2:73:30:ba:3b:d3:db:aa:c4:5c:
         82:7e:34:d8:94:13:4a:47:4b:69:35:2f:09:f6:48:09:47:3a:
         da:94:36:76:38:62:1e:8e:47:dd:ce:72:d5:13:a7:ee:fb:47:
         e7:e0:2a:44:58:dd:51:cb:75:0b:5f:8f:15:05:2d:55:78:55:
         d2:d4:36:44:20:16:60:92:c5:c5:2a:b8:4f:df:c7:46:0b:9b:
         12:73:aa:24:ea:86:d4:53:9c:53:4d:12:6f:fb:75:2f:00:91:
         52:4c:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:46 2026 by rpki-client