Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/76CBE6E64EA911EC9C441B57C4F9AE02.roa
File:                     76CBE6E64EA911EC9C441B57C4F9AE02.roa (raw, json)
Hash identifier:          ywVwohGRPq8nXpfC6BCKShasj6R0l2pUrEdM+7+1e6c=
Subject key identifier:   45:8D:55:D4:18:10:28:09:22:A9:77:9E:BC:CC:51:DE:7A:2C:BB:40
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F13
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/76CBE6E64EA911EC9C441B57C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:36:00 +0000
ROA not before:           Fri 02 Oct 2026 15:36:00 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45554
IP address blocks:        202.47.142.0/24 maxlen: 24
                          2001:dc8:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28435 (0x6f13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:36:00 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcf5f-7ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1d:e6:63:01:4b:f3:76:42:60:76:8b:36:a2:
                    05:91:61:37:66:eb:26:2a:66:94:26:e3:30:01:6e:
                    1c:22:ed:3e:90:09:68:b0:b1:63:0c:e3:fa:37:c5:
                    f5:17:7d:c0:49:ad:1d:94:4a:da:5b:aa:8f:18:a7:
                    f5:96:ac:4c:1d:38:e0:dc:2b:41:28:e6:73:c3:69:
                    0e:bb:40:80:f6:29:7b:03:d6:40:25:39:d6:fe:fe:
                    ee:aa:9f:18:74:a3:e3:8d:c6:b3:02:fd:b6:e3:49:
                    88:25:58:b3:88:e4:da:0e:05:d2:a6:f9:bf:de:96:
                    1b:c2:bd:c1:53:b6:d3:98:1e:0e:90:45:6a:83:14:
                    6d:a3:e6:f8:4a:82:fe:cf:f9:05:8b:22:f8:14:e8:
                    9c:6f:0d:ba:07:bb:ce:75:03:50:87:44:b2:f8:2e:
                    7e:f5:28:14:d8:15:83:86:58:ac:00:28:a1:02:c0:
                    da:1d:3f:34:45:6c:9d:05:8f:d6:5f:ed:33:03:e6:
                    e9:1a:33:05:3e:e4:54:10:f8:14:4c:1b:17:cf:85:
                    8a:35:6b:42:82:e5:a9:20:c1:a2:79:1e:ab:0d:b0:
                    63:21:9c:4c:86:11:07:bb:73:1e:cc:ec:87:7f:57:
                    b3:ad:55:3f:06:7e:1a:3f:80:34:24:91:c4:b2:29:
                    b9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8D:55:D4:18:10:28:09:22:A9:77:9E:BC:CC:51:DE:7A:2C:BB:40
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/76CBE6E64EA911EC9C441B57C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.142.0/24
                IPv6:
                  2001:dc8:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:9e:3c:da:28:89:c2:e3:77:91:a3:74:53:94:9e:98:ff:82:
         10:7e:58:94:87:c2:c5:13:84:18:ab:6b:3e:b9:76:d4:cc:69:
         3e:0a:67:04:24:b0:bd:61:9c:ab:80:9f:09:d9:17:a7:53:a5:
         77:df:54:38:7a:89:6e:6d:e9:9b:da:61:47:ed:b7:10:97:24:
         e7:b3:31:ee:aa:16:1b:ca:5b:bf:b5:34:78:21:1f:83:4f:fe:
         ff:e3:c2:28:91:46:7d:bc:69:25:c6:68:68:4b:f0:a2:2b:36:
         ac:ab:df:fa:e6:29:79:4d:88:7e:22:0d:83:13:f2:e4:de:43:
         49:e0:f2:2c:ff:22:0b:bb:80:04:7c:d6:e8:66:8f:87:9b:db:
         af:e7:9d:02:dc:36:8e:16:3a:a0:50:8e:2c:b9:9b:88:cc:8b:
         4e:1e:10:dd:52:1e:f7:50:65:d2:72:89:ba:f8:b7:7e:1e:66:
         b4:ad:71:b6:b7:6b:0f:1e:65:c3:19:80:45:29:92:e1:6c:a6:
         11:6f:60:fc:e6:b9:d2:94:6d:ce:12:ad:09:a5:94:c6:27:37:
         8d:d1:77:57:53:f5:2f:fa:5b:1a:96:8c:d9:59:5f:a1:8a:9a:
         eb:c6:4d:2e:2f:ae:73:78:42:9a:87:6c:71:55:18:89:8f:c1:
         9e:d3:3d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:42:40 2026 by rpki-client