Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/3014B5BC86D011F08795B91FC4F9AE02.roa
File:                     3014B5BC86D011F08795B91FC4F9AE02.roa (raw, json)
Hash identifier:          8scL7dNlnFUP4x32Xf4udrjT4oUR9d9UCNsLcHrMMtw=
Subject key identifier:   EB:F9:CF:12:FD:C8:01:6F:34:4A:CF:02:C4:19:66:B6:C4:5E:BC:85
Certificate issuer:       /CN=A91AC567/serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
Certificate serial:       D5
Authority key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/3014B5BC86D011F08795B91FC4F9AE02.roa
Signing time:             Tue 29 Sep 2026 07:56:54 +0000
ROA not before:           Tue 29 Sep 2026 07:56:54 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154189
IP address blocks:        202.66.182.0/24 maxlen: 24
                          2001:df6:1240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl
                          rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
        Validity
            Not Before: Sep 29 07:56:54 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abb6f46-9f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6b:45:53:2e:66:1c:4b:a9:b3:db:d3:d6:7c:
                    38:22:f2:22:b6:8b:04:88:16:9a:eb:60:f7:b4:ad:
                    a7:51:cd:25:86:81:9b:7b:75:23:a9:f9:76:f5:1b:
                    75:c1:a5:01:1c:1e:74:c7:ac:7d:06:d3:c7:96:b0:
                    b5:0a:ae:d4:e9:34:7a:b3:2b:ec:bf:2a:61:c3:e7:
                    9d:42:6d:76:81:31:15:7d:f3:cd:55:c8:24:13:fa:
                    2f:5f:ae:9d:61:8c:d6:a2:57:7b:72:c1:45:f2:b8:
                    3c:b0:35:15:8b:89:21:71:11:97:75:47:24:39:6f:
                    bd:6f:f4:0b:f2:70:b0:8b:2a:d5:84:c6:53:7c:a1:
                    dc:c2:91:ce:94:1d:62:6e:cb:64:35:23:76:95:b1:
                    f4:ee:ff:17:e6:f9:39:01:87:33:73:c7:68:41:32:
                    00:29:f9:90:3b:9a:44:96:8a:a4:96:06:97:f3:9d:
                    9b:26:e8:37:71:e6:e9:9e:e0:9d:04:87:00:48:66:
                    76:20:31:fe:0d:fb:aa:ea:7a:af:bf:60:b2:ba:a0:
                    aa:00:73:d3:20:3a:f2:a5:da:db:e9:45:26:4c:b6:
                    3b:cf:ca:a9:62:0d:23:fc:3b:c1:63:f5:84:8a:17:
                    fb:e9:3f:94:d6:90:15:e8:70:4f:74:e8:27:31:92:
                    53:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F9:CF:12:FD:C8:01:6F:34:4A:CF:02:C4:19:66:B6:C4:5E:BC:85
            X509v3 Authority Key Identifier:
                keyid:85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/3014B5BC86D011F08795B91FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.66.182.0/24
                IPv6:
                  2001:df6:1240::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:81:ea:c1:d4:15:3e:5d:90:04:0d:fd:67:dc:44:8c:19:11:
         62:2c:e7:75:1d:75:6d:af:c3:dc:8c:de:26:84:09:d9:18:4c:
         47:68:ee:c4:03:1b:73:37:28:db:cb:9c:dc:99:6d:88:db:0b:
         5f:05:0c:33:3e:23:8f:ba:af:a0:b5:74:56:e1:78:7b:1c:62:
         7a:c6:27:29:59:1d:0f:22:8b:d2:d6:0f:3b:01:67:3c:26:ff:
         0e:5a:e5:45:e9:e9:ca:7e:6a:b8:ff:83:31:13:47:f2:39:66:
         4f:1b:58:90:9f:9b:1c:13:f4:c9:1f:94:0b:9b:da:50:86:27:
         12:c5:f0:21:a2:81:91:11:d0:e9:c9:a6:ab:de:87:57:85:47:
         1d:29:4f:e4:d4:53:e5:f9:f7:0b:50:19:6a:f1:da:24:f1:f6:
         d8:0d:f4:83:d0:58:7d:2c:b9:61:24:12:51:8e:ff:83:a7:04:
         65:74:6d:d8:35:34:71:03:2d:31:b2:d4:b1:be:d2:92:86:46:
         66:a4:c8:1c:eb:b3:2d:49:e5:2f:ef:d6:05:ef:5c:35:75:7d:
         71:88:15:b0:3f:a3:f8:43:8e:bf:27:da:a7:39:e1:bf:f1:a7:
         ba:77:e8:fe:e0:fc:d7:7a:b7:05:1d:cc:c2:62:ce:5c:33:21:
         59:0b:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:30:23 2026 by rpki-client