Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/72CB80A6B56F11F1B8468D906211F970.roa
File:                     72CB80A6B56F11F1B8468D906211F970.roa (raw, json)
Hash identifier:          YOZriCYMdaLzo7RJq5HP5i5vAK2/3PvtpisZCwc+ZAY=
Subject key identifier:   A9:A6:E0:BC:17:F3:68:13:A6:1D:C0:34:73:0B:8E:87:D7:5E:BE:9E
Certificate issuer:       /CN=A91AEB42/serialNumber=9138977AABA7F4DE34C68AE34830693BC66D0FCC
Certificate serial:       15
Authority key identifier: 91:38:97:7A:AB:A7:F4:DE:34:C6:8A:E3:48:30:69:3B:C6:6D:0F:CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTiXequn9N40xorjSDBpO8ZtD8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/72CB80A6B56F11F1B8468D906211F970.roa
Signing time:             Mon 05 Oct 2026 01:49:52 +0000
ROA not before:           Mon 05 Oct 2026 01:49:52 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     132839
IP address blocks:        166.75.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/kTiXequn9N40xorjSDBpO8ZtD8w.crl
                          rsync://rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/kTiXequn9N40xorjSDBpO8ZtD8w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTiXequn9N40xorjSDBpO8ZtD8w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:50:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEB42, serialNumber=9138977AABA7F4DE34C68AE34830693BC66D0FCC
        Validity
            Not Before: Oct  5 01:49:52 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac3023f-a557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:96:ab:13:aa:d2:93:a3:a4:3a:82:19:08:
                    38:0f:92:78:09:a8:88:29:0c:99:18:c8:61:ea:67:
                    f8:25:ae:1e:dc:46:88:98:2a:28:f3:7f:d7:a1:03:
                    e0:b8:9a:10:73:76:84:ba:eb:dd:03:10:23:c5:d1:
                    88:ce:8c:22:83:cd:3e:87:af:6a:fb:c4:aa:a6:05:
                    c8:c2:fb:bb:63:bb:a0:73:7d:6a:01:ea:07:6d:a0:
                    2b:17:f3:96:c8:37:ea:16:5a:44:5b:d2:78:e0:c2:
                    6f:de:7e:c7:77:95:72:4c:e5:d0:37:e9:e7:dd:5b:
                    9b:4d:5a:73:4f:e9:71:66:77:26:b1:8d:e4:39:c3:
                    86:63:9b:d5:64:b0:2a:66:4b:0f:3f:18:c0:ab:17:
                    44:f8:67:e5:72:c1:6b:fd:73:31:aa:bc:e4:0a:36:
                    51:6a:c1:6b:03:57:2c:09:f6:d2:f9:5f:42:df:4e:
                    86:2e:78:69:99:9a:d3:8a:f4:bd:8a:b7:71:f6:a6:
                    3b:c7:0c:3c:22:3e:d3:95:46:1b:87:4f:38:5a:61:
                    8b:3d:3c:ed:9a:b4:9d:51:57:0c:a2:61:3a:55:de:
                    67:6b:03:c2:d3:f6:95:58:7c:60:d8:19:49:6e:fc:
                    b8:3e:15:18:9a:b3:ef:ff:90:a1:9b:b1:18:fa:fd:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A6:E0:BC:17:F3:68:13:A6:1D:C0:34:73:0B:8E:87:D7:5E:BE:9E
            X509v3 Authority Key Identifier:
                keyid:91:38:97:7A:AB:A7:F4:DE:34:C6:8A:E3:48:30:69:3B:C6:6D:0F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/kTiXequn9N40xorjSDBpO8ZtD8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTiXequn9N40xorjSDBpO8ZtD8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB42/16C7DFD6A7E911F1B0B38C4DA6EE528E/72CB80A6B56F11F1B8468D906211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         30:6e:ea:99:d0:40:95:33:39:27:51:9c:99:98:81:a5:57:52:
         cf:4b:46:ad:66:4d:c3:45:01:72:af:ce:83:77:d3:b7:04:18:
         ce:b5:20:b3:0c:c0:3c:00:07:76:fb:27:fe:fc:e4:5d:8e:9c:
         d5:ab:2d:8c:de:34:96:6d:10:5a:8a:88:e8:fc:66:a8:37:d7:
         28:91:53:63:3a:64:3b:de:c5:76:96:4e:2d:2e:f0:d8:45:bd:
         70:74:2f:95:f9:11:a8:f4:10:a9:c3:67:bc:95:20:17:80:57:
         dc:de:ca:12:ea:ca:6d:0f:53:13:f0:bc:69:82:97:69:dc:eb:
         31:51:b0:82:6e:76:3f:e8:d1:9e:92:c4:e4:5b:d5:e8:a9:75:
         1c:8c:6d:21:c4:5d:da:18:5d:a7:9f:28:23:3c:10:e9:3b:82:
         63:e3:0e:32:29:1c:b7:38:4d:eb:e0:13:1f:36:e0:b5:ad:f1:
         57:4a:cb:52:55:df:4e:a6:6c:0a:d9:f2:09:4f:c8:cf:13:ab:
         3f:90:86:79:e0:87:59:3c:46:c2:ec:39:a1:3a:b0:16:41:db:
         44:28:c7:f1:99:28:d6:55:25:c5:09:56:93:79:5a:e5:fc:70:
         e4:d5:73:3a:b7:87:9a:ee:4e:f6:dc:8b:d1:20:ed:99:c9:21:
         d0:59:6d:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 6 17:37:07 2026 by rpki-client