Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/803E1FB4844611F18199E4686DA30FBC.roa
File:                     803E1FB4844611F18199E4686DA30FBC.roa (raw, json)
Hash identifier:          bsrpNtxKw03lK22MF+i7ZQ9wr/WL40DdomttxRKyUuw=
Subject key identifier:   B7:16:8D:6A:64:10:A1:72:44:7E:38:06:79:96:92:51:E7:E6:9F:D2
Certificate issuer:       /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD
Certificate serial:       38FC
Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/803E1FB4844611F18199E4686DA30FBC.roa
Signing time:             Fri 02 Oct 2026 15:38:22 +0000
ROA not before:           Fri 02 Oct 2026 15:38:22 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     135932
IP address blocks:        151.158.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 14:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14588 (0x38fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD
        Validity
            Not Before: Oct  2 15:38:22 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcfee-3c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:6c:44:3c:44:83:ec:86:94:50:7e:db:a1:
                    22:1e:b7:0f:1e:d3:87:14:5a:78:4a:d3:27:dd:9e:
                    ab:64:4c:45:51:b1:b2:34:c9:c5:87:e3:29:53:8b:
                    6f:60:6f:d6:02:9e:50:02:88:18:0f:b2:c8:fe:8c:
                    2f:e5:76:3e:2d:b7:c4:3d:f4:d2:1c:1e:8e:b2:2e:
                    dc:02:be:5c:5a:80:d4:57:07:26:40:67:c7:8d:b0:
                    05:90:5e:00:20:5e:a2:c4:4c:87:ad:f5:b0:04:ea:
                    1f:ad:5f:8d:60:30:71:dd:02:9b:f3:bf:5b:16:3e:
                    6e:8f:27:9d:27:b6:f4:d3:96:f4:5b:c9:e7:46:d6:
                    6b:7e:30:87:ce:82:3f:e6:e6:c5:b2:8c:b3:ff:a0:
                    e7:df:1a:f5:a0:a1:e6:d4:75:53:91:8c:48:6c:11:
                    8e:5e:48:6e:21:83:5f:98:4e:00:eb:06:40:fd:8c:
                    06:d1:d1:c1:4f:cf:96:08:a5:57:e3:cb:ab:83:b0:
                    b6:7f:73:79:c4:28:a0:08:ac:b3:42:18:b0:f0:7f:
                    68:e8:2e:46:86:eb:7a:2b:0e:b0:95:1b:f1:06:ee:
                    78:aa:bc:ab:8e:1b:b2:b9:d7:1b:c2:9d:0a:71:52:
                    29:70:55:56:0b:b8:c1:1e:6a:15:5d:91:e5:76:e9:
                    06:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:16:8D:6A:64:10:A1:72:44:7E:38:06:79:96:92:51:E7:E6:9F:D2
            X509v3 Authority Key Identifier:
                keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/803E1FB4844611F18199E4686DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:47:ec:e9:a2:34:7e:fc:ff:5a:bd:f4:24:b9:59:d0:e2:1b:
         1c:6e:37:c9:d9:72:ec:b2:84:fb:b0:08:36:9a:b5:4c:b2:85:
         07:36:ba:9e:6b:de:38:31:a3:17:ee:cc:4f:02:42:91:a5:16:
         2e:07:0f:84:06:c6:9a:56:b1:88:74:23:71:21:b9:fa:e9:c2:
         fa:e0:fc:6c:0b:6b:84:6f:17:26:90:b7:60:a6:d2:ac:d7:a6:
         5f:f5:c1:36:27:7c:36:98:e1:69:e5:5d:0d:df:4e:58:11:b6:
         f3:82:88:39:47:50:02:90:0d:48:1b:b7:71:c5:72:06:43:b9:
         20:4a:80:1b:b6:73:cd:02:1b:dc:d1:85:0a:94:3d:48:0b:32:
         94:fa:1d:3f:62:02:c6:33:3d:48:83:35:38:bd:52:56:fe:bd:
         21:ff:a4:23:a3:33:0f:3c:f0:47:09:11:9e:84:02:d3:8d:48:
         87:6c:ee:d2:1a:5e:10:b0:fc:4f:a3:52:71:3f:ec:8d:28:0a:
         80:64:2e:0b:48:98:e1:82:88:b3:2a:8e:20:3e:31:13:77:df:
         f6:98:21:cf:a5:4e:d2:8a:87:12:6f:2c:78:fb:a9:0c:22:1a:
         c1:49:c7:8c:ee:3b:7a:a8:d8:0a:6e:8e:68:68:42:ae:a1:fc:
         31:bc:2a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:20:54 2026 by rpki-client