Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/675D716092EE11F0990BEA65C4F9AE02.roa
File:                     675D716092EE11F0990BEA65C4F9AE02.roa (raw, json)
Hash identifier:          jtbMRSEVQ51mXNPxNjjcWYvkijtGUVJPAl99fO9did8=
Subject key identifier:   72:50:CC:83:85:04:D0:1F:44:31:FE:B3:99:80:AD:3B:E5:78:78:5A
Certificate issuer:       /CN=A91AC567/serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
Certificate serial:       D4
Authority key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/675D716092EE11F0990BEA65C4F9AE02.roa
Signing time:             Tue 29 Sep 2026 07:56:52 +0000
ROA not before:           Tue 29 Sep 2026 07:56:52 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     131247
IP address blocks:        202.66.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl
                          rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
        Validity
            Not Before: Sep 29 07:56:52 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abb6f44-89dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:b6:8e:d6:2d:57:0d:01:45:d0:dc:12:8e:
                    5f:73:3c:c9:de:a9:26:8b:12:4e:3c:52:69:17:ce:
                    c3:b3:a2:e3:f2:db:0f:35:c7:b9:23:dd:07:35:07:
                    2b:45:a5:01:1c:5f:18:58:44:ad:89:20:2a:3b:ec:
                    b0:5b:49:62:70:90:7e:d2:89:1a:dc:af:1a:d7:cb:
                    9e:26:ea:58:6c:fd:96:64:8f:ed:3b:13:fc:a1:a6:
                    c9:d4:a7:dd:4b:eb:74:2e:c5:80:6d:03:44:e2:a9:
                    ed:90:ff:57:d5:a7:3e:8b:81:1f:33:e2:02:e4:c9:
                    18:1e:ff:4d:cf:33:d6:f6:e2:84:2d:b1:c3:d1:03:
                    f9:7a:18:e3:e3:5e:d4:33:75:ca:93:60:0c:96:7e:
                    60:e7:5e:ec:77:c1:94:06:02:ae:27:90:bc:e5:7d:
                    07:82:e0:5d:ba:d6:26:98:eb:03:3b:d1:f2:5f:3d:
                    26:43:2d:74:d0:30:34:dd:ad:23:e1:67:de:c8:24:
                    a8:fe:53:93:ce:fe:9b:3b:69:68:34:65:1f:62:30:
                    8e:df:70:11:fa:e0:f4:fd:83:23:07:62:92:0e:40:
                    9f:23:e1:d8:6c:bf:18:5b:95:7f:9b:01:55:7c:7c:
                    6c:5e:35:8f:3d:18:0c:f7:c1:fe:84:fc:7a:3a:d7:
                    76:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:50:CC:83:85:04:D0:1F:44:31:FE:B3:99:80:AD:3B:E5:78:78:5A
            X509v3 Authority Key Identifier:
                keyid:85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/675D716092EE11F0990BEA65C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.66.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:26:4f:30:a5:bb:6f:a8:8e:cb:84:17:90:9d:9d:ec:6d:2c:
         9a:b9:02:c1:7f:9c:25:df:48:67:d5:21:d7:f9:b8:27:60:c3:
         3d:11:80:88:b6:11:c7:52:f6:cf:25:8c:60:22:bc:cc:a3:4e:
         f5:5f:f6:cb:03:e6:eb:d0:43:8e:81:05:43:53:88:b5:a2:a8:
         e0:c3:f4:2a:f0:31:76:fe:71:fd:2c:c6:4b:e4:95:4c:b6:d0:
         49:72:8c:5e:dd:06:03:f1:a1:23:49:52:b6:88:24:d6:00:65:
         bc:26:46:f6:42:b4:a3:b8:87:b6:79:c3:bd:52:a9:55:24:16:
         f7:bf:6b:7d:bf:22:c8:40:a1:b8:a2:ba:e7:a5:d3:84:90:51:
         29:02:2a:b2:b1:2f:e5:7f:63:32:67:2e:07:35:5d:06:55:e3:
         fe:94:93:6e:7d:8f:5a:70:31:3d:47:d3:8a:90:3e:68:75:24:
         fd:ee:23:30:78:96:c4:b0:27:b3:5f:40:e8:90:2d:39:db:49:
         60:5d:2c:dd:b5:80:0e:80:27:63:99:22:1f:7a:a4:84:61:14:
         41:d7:e3:86:e9:0d:95:c0:fb:ca:44:25:af:c3:bc:08:cb:78:
         bd:47:91:e4:7f:80:6e:a1:23:b9:43:a1:8a:c9:15:49:bd:7c:
         78:a0:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:58:53 2026 by rpki-client