Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/4302A4EA9AFC11F1B7F600875911F970.roa
File:                     4302A4EA9AFC11F1B7F600875911F970.roa (raw, json)
Hash identifier:          Qax2zyC3D4kXwNYbSFHJRFkXJvaTsOR7hCX7dVLIwPM=
Subject key identifier:   F4:84:44:51:47:26:86:00:3D:C3:4B:04:6F:B0:D6:7A:53:46:3E:01
Certificate issuer:       /CN=A91AC5BC/serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Certificate serial:       51
Authority key identifier: F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/4302A4EA9AFC11F1B7F600875911F970.roa
Signing time:             Tue 18 Aug 2026 11:59:27 +0000
ROA not before:           Tue 18 Aug 2026 11:59:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        206.109.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl
                          rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC5BC, serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
        Validity
            Not Before: Aug 18 11:59:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a84491f-b993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:07:79:bf:11:5b:4c:98:ce:65:ad:26:6a:
                    5c:c5:21:7a:30:99:8b:3a:9a:d2:3d:6b:51:c1:76:
                    02:72:28:ef:99:05:dd:6e:a1:35:df:65:da:92:b1:
                    c2:67:1f:b2:95:61:e5:7c:e7:fb:87:00:1e:48:21:
                    c3:6a:49:ba:1f:eb:d4:e5:56:43:ec:36:67:0a:14:
                    d2:89:d0:e5:74:e2:08:06:37:d4:cb:ef:a1:9d:59:
                    b5:1e:1f:ef:64:e3:9d:47:06:b0:62:3b:d5:c7:6e:
                    ef:a0:df:62:30:d2:fc:e8:d9:be:f9:81:e5:06:23:
                    6a:09:e8:66:cd:87:12:3e:eb:86:85:d4:a0:eb:cf:
                    55:70:f5:86:5c:c8:02:3f:ef:a5:11:b8:8b:71:ea:
                    43:cc:0e:4c:cf:8a:e1:77:b7:84:06:63:5e:cc:55:
                    d8:be:4b:32:aa:7c:9e:d6:68:43:07:0b:9f:88:5d:
                    37:a1:14:85:24:29:dd:19:9a:1c:6a:b4:06:fc:6b:
                    37:20:7b:68:7b:2e:6d:ea:bd:6b:f8:45:18:80:b9:
                    19:93:03:f6:ad:b4:38:de:e2:dc:fd:80:fc:ad:58:
                    56:8b:e8:c8:27:b3:80:5e:de:43:21:d1:c6:fe:93:
                    d3:a3:34:4c:9e:aa:a3:d4:9d:d9:31:42:36:7c:6a:
                    4b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:84:44:51:47:26:86:00:3D:C3:4B:04:6F:B0:D6:7A:53:46:3E:01
            X509v3 Authority Key Identifier:
                keyid:F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/4302A4EA9AFC11F1B7F600875911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.109.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:11:57:cb:3e:fd:e0:10:91:83:4f:f2:08:11:5c:17:27:a1:
         9c:6f:25:4b:7f:bd:51:84:46:6a:08:74:4e:6a:1e:1f:b2:69:
         b7:14:a1:75:7b:28:2e:b6:10:8f:4a:94:6c:05:cf:80:4c:46:
         00:d5:f1:55:ca:98:b6:fe:78:5a:49:c0:88:ad:67:2f:71:72:
         17:46:86:43:2a:64:ae:8c:e6:63:03:8a:68:40:6e:94:6b:db:
         e4:59:f8:e9:38:25:28:45:8c:cc:66:36:b3:3d:d1:21:54:27:
         63:e1:d7:53:7b:ec:4b:0c:8f:47:cb:bc:2f:d9:8f:0b:b8:ef:
         23:8a:bc:ae:d6:e1:eb:c8:96:8c:f5:d5:f0:4b:4f:fc:72:32:
         a1:0c:60:d8:9b:d9:49:e3:3d:35:6c:a8:13:47:b2:84:d4:55:
         36:2e:28:e8:98:49:4a:16:24:c1:4a:9a:c7:ef:03:2e:14:bb:
         dd:3c:bd:5c:f6:fa:ee:89:7c:5d:cc:f5:f6:30:71:7d:98:5b:
         f9:aa:5d:bb:ea:e3:30:d6:f1:98:bc:34:f0:ca:49:a2:f2:4a:
         26:36:ef:9a:fc:90:4a:3e:e3:59:96:d8:03:15:51:a3:06:f0:
         63:41:34:45:0f:c7:6f:74:88:71:8b:b5:ee:18:1a:86:32:f4:
         4b:f2:7f:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:42:30 2026 by rpki-client