Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F059F2A463E011ECB11B2C79C4F9AE02.roa
File:                     F059F2A463E011ECB11B2C79C4F9AE02.roa (raw, json)
Hash identifier:          RMLsOrzKG2qocHmazYp8j7isqrsGv9nATnofGuXICyg=
Subject key identifier:   87:8C:18:A0:B0:5B:C8:99:3B:E3:82:B0:80:53:14:98:26:7C:09:65
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6D66
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F059F2A463E011ECB11B2C79C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:21:25 +0000
ROA not before:           Fri 02 Oct 2026 15:21:25 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     131122
IP address blocks:        117.122.2.0/24 maxlen: 24
                          2001:dc8:2002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28006 (0x6d66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:21:25 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcbf5-ddcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a9:55:db:b7:2f:23:75:40:f9:81:69:b2:d2:
                    b0:68:7c:0d:b7:c3:63:e1:4f:fc:a3:89:ca:bf:ba:
                    dd:ee:5e:eb:a2:08:eb:77:0d:87:96:69:6e:51:2c:
                    7a:d0:97:e1:68:75:64:0a:3a:a0:82:2e:ec:b2:5a:
                    e2:f3:a7:42:ce:3e:d2:f0:41:84:64:07:a3:b9:e7:
                    34:06:ea:72:6e:d8:5a:5d:77:cf:4f:90:eb:c3:23:
                    38:d8:73:cc:9d:49:8a:2c:a8:09:06:a9:97:a8:e0:
                    1c:2f:1a:c1:8d:35:ce:f7:03:ea:7a:2d:b5:8e:58:
                    cf:b4:0b:36:3b:51:55:e0:f5:26:7d:35:f8:77:65:
                    46:d0:94:c5:49:86:e2:cd:18:63:69:06:7b:bc:a3:
                    12:7c:9a:f9:45:04:a2:2d:01:03:ad:20:c6:40:cc:
                    14:e6:db:1f:fa:4f:90:f8:9a:ca:98:aa:c9:e4:d1:
                    36:36:7f:91:28:3a:1e:e7:46:f3:13:e2:72:d4:d3:
                    c1:70:e8:3d:10:05:4d:e7:cc:1e:b3:cf:fa:9a:68:
                    f7:f2:c8:f9:c4:09:f1:b4:47:82:06:da:20:7e:8f:
                    04:4f:89:52:bf:4e:43:63:a1:0e:ff:08:35:46:e5:
                    dc:d0:06:2b:64:37:13:7f:b0:a5:a6:8d:fa:e7:ec:
                    41:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8C:18:A0:B0:5B:C8:99:3B:E3:82:B0:80:53:14:98:26:7C:09:65
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F059F2A463E011ECB11B2C79C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.122.2.0/24
                IPv6:
                  2001:dc8:2002::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:f1:30:d1:ac:4d:c5:b7:e9:14:af:ab:e9:3b:3e:3a:9f:13:
         de:c5:5a:c9:c1:99:55:04:c4:c2:23:83:9d:5b:18:2e:f1:15:
         e8:7f:a4:70:8f:9c:4c:ce:4e:88:a7:25:98:aa:f3:25:f1:48:
         4f:36:2d:ea:0f:fb:1b:09:7e:94:3d:22:a7:b7:47:73:ee:cf:
         90:d4:3f:ca:2c:69:cc:05:26:a1:1a:26:c1:85:6b:70:37:13:
         ed:61:e6:c6:c3:e0:96:84:d7:c9:26:15:21:a3:e7:2d:0a:f5:
         10:af:41:93:5e:28:8c:24:f6:17:67:e4:31:be:51:03:dd:5a:
         77:b9:3c:0c:ab:0d:fd:85:65:cb:35:5e:6b:08:ce:43:72:25:
         f7:2e:00:1c:3e:74:bd:39:89:86:fc:d2:29:56:fe:32:b5:d9:
         b2:ee:0a:97:43:b3:ee:45:58:38:1b:32:d1:2f:af:31:8d:7d:
         8a:d4:84:19:e9:33:b9:ac:20:22:0a:45:fd:32:50:0b:71:ae:
         c5:d7:a4:4d:22:17:3a:0c:bc:3e:fd:be:d7:bc:5d:79:3b:34:
         99:84:f0:cc:a5:92:7d:db:9f:b8:b0:6e:8c:7f:84:65:60:b9:
         55:24:85:c6:b7:65:d1:bf:e1:9a:fd:bd:2f:82:67:f2:ee:77:
         66:70:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 17:08:34 2026 by rpki-client