Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa
File:                     C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa (raw, json)
Hash identifier:          guoG0mQ1CaG8urmftHkbkzgX5fPKUMP9UVITFer8ffs=
Subject key identifier:   08:70:FC:D1:D3:B6:4D:26:BF:CD:03:B6:12:A9:54:22:82:6E:64:CC
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F26
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:36:42 +0000
ROA not before:           Fri 02 Oct 2026 15:36:42 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     55318
IP address blocks:        202.59.252.0/23 maxlen: 24
                          2001:df2:4080::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28454 (0x6f26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:36:42 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcf8a-aa66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:0a:53:ec:88:19:23:04:79:88:73:80:64:
                    d4:cc:80:d5:2c:d1:62:69:2e:6d:a1:0e:96:9a:59:
                    64:3e:94:1a:3d:f4:88:07:4c:de:27:74:d2:95:e7:
                    ee:bf:5a:54:ac:15:9b:72:fa:0d:d2:8b:04:c3:7b:
                    c1:95:51:6b:60:11:69:e7:b4:9a:03:59:f1:ed:d3:
                    a1:bb:c4:d9:10:9b:70:39:63:29:c6:50:85:5c:7f:
                    62:7a:39:e6:be:c3:5a:46:7e:3d:de:d9:24:38:04:
                    7e:8c:75:64:f6:0d:fd:9a:fd:6f:f5:32:5d:51:90:
                    47:c6:d7:9d:86:ec:9f:58:ef:97:a4:9d:0e:fa:93:
                    5f:82:31:3d:6b:ec:cc:8c:03:92:aa:b1:b6:99:38:
                    fe:04:aa:47:5c:8a:d2:60:1b:d4:9a:59:4b:82:98:
                    6a:58:d3:29:f6:5b:96:a8:12:fb:b5:dc:8f:65:7d:
                    28:d8:47:5f:a3:cb:e9:42:95:55:29:4b:85:6a:99:
                    39:4f:a2:e9:52:1c:57:f2:ef:7f:5f:e6:ea:96:f4:
                    f3:47:97:e0:3b:b7:34:74:8e:f2:74:63:13:76:51:
                    e9:00:d5:7f:ff:1a:f8:be:8e:0b:25:ca:e7:85:21:
                    14:81:aa:dc:f1:c2:a7:9c:cd:69:8e:3b:39:dc:a5:
                    83:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:70:FC:D1:D3:B6:4D:26:BF:CD:03:B6:12:A9:54:22:82:6E:64:CC
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0CD5D3CE6D511EC8E85EB09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.59.252.0/23
                IPv6:
                  2001:df2:4080::/47

    Signature Algorithm: sha256WithRSAEncryption
         0f:05:7d:ac:73:1a:26:ae:2a:bf:16:1f:87:96:06:2d:0f:36:
         6a:7a:8d:78:e7:1e:3c:82:90:71:9f:85:a2:d2:09:5e:b5:44:
         ce:36:71:2d:e7:b4:2f:fb:dc:94:c0:4c:3b:18:3a:63:59:d4:
         7d:26:12:c6:a5:99:23:e7:61:ab:3a:07:cb:de:5c:c7:98:07:
         e0:a6:23:17:1b:ca:77:4a:bc:f2:5a:38:5e:b8:4a:89:dd:db:
         92:6f:cb:9d:74:fa:3d:c9:95:5a:ab:a6:c4:f0:0c:df:86:ee:
         ba:ad:7b:23:da:0c:fc:13:48:ea:6f:41:ba:3c:cb:84:28:45:
         12:bb:1d:ce:48:4c:e3:73:e6:eb:55:68:37:0f:15:f4:c7:99:
         22:a4:69:9d:3f:02:e1:99:2b:30:91:cb:52:e9:90:a7:2e:01:
         58:e9:05:f9:23:91:b8:0a:c5:5c:35:47:dc:eb:24:f1:72:52:
         ba:47:1b:ab:09:40:21:30:c6:a9:2f:75:35:e1:e0:e1:f0:16:
         1e:b4:11:01:99:43:27:b7:06:c6:3a:be:cb:e9:11:a5:01:dc:
         1e:e1:ee:b0:00:a8:be:d7:a4:90:72:dc:bb:5d:15:ef:10:ff:
         a1:ba:a3:4a:54:13:df:80:bd:f0:07:36:36:ba:ef:83:d0:f2:
         a9:27:a7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:06 2026 by rpki-client