Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/63B4BE609F8611F1A5D39EA03E11F970.roa
File:                     63B4BE609F8611F1A5D39EA03E11F970.roa (raw, json)
Hash identifier:          zTI2xjB+gANhRfGLJLeHP5dpBREsQqUAEA7gE6452u0=
Subject key identifier:   57:25:9A:95:5B:60:6E:56:FA:FE:B7:6A:85:BB:4F:34:98:49:67:30
Certificate issuer:       /CN=A91B0B89/serialNumber=986120E19431E2C3FE996503BE70072213549790
Certificate serial:       3E
Authority key identifier: 98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/63B4BE609F8611F1A5D39EA03E11F970.roa
Signing time:             Mon 24 Aug 2026 06:38:17 +0000
ROA not before:           Mon 24 Aug 2026 06:38:17 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     152176
IP address blocks:        162.4.88.0/24 maxlen: 24
                          162.4.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl
                          rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 08:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0B89, serialNumber=986120E19431E2C3FE996503BE70072213549790
        Validity
            Not Before: Aug 24 06:38:17 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a8be6d9-36db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:86:94:37:5a:ae:f7:ca:da:90:54:f9:eb:
                    d7:64:78:15:01:67:8b:67:b4:b4:32:75:5c:36:5a:
                    dd:4e:23:b0:dc:08:26:e7:df:fa:7f:86:21:64:f8:
                    cf:1d:1e:19:92:b7:18:aa:4f:7d:25:90:a7:4f:41:
                    5f:ee:ea:e9:9e:1f:2b:ea:f9:d8:e1:1e:23:11:8e:
                    57:3e:28:cd:1f:bc:45:02:cb:5b:cf:7e:b5:93:b3:
                    d4:da:b5:ae:93:78:15:61:cf:a2:30:50:da:51:07:
                    ce:4b:78:70:db:83:de:60:c0:97:8c:fd:dd:78:3e:
                    c5:19:98:13:d3:b0:dc:6d:48:37:dd:4d:e9:78:cd:
                    29:67:5b:6b:57:b3:5b:fb:46:1a:32:67:f3:28:5b:
                    b0:1b:ea:73:26:20:96:2b:8d:ee:15:62:61:d4:75:
                    44:7c:54:88:df:ba:d5:ff:bc:68:2d:8a:d0:f2:42:
                    c2:6a:f5:54:f9:6f:6f:32:ee:87:8e:fd:8f:b9:8f:
                    68:fa:51:55:ec:b9:af:9c:3b:e9:b7:36:8f:bb:90:
                    79:c1:95:02:74:33:05:d8:27:d9:8e:c0:88:96:ae:
                    2f:1e:7d:a1:fd:36:eb:e1:85:5d:7c:77:7e:63:eb:
                    46:8c:17:1f:05:d2:45:7e:f9:18:d0:28:fe:41:cf:
                    2b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:25:9A:95:5B:60:6E:56:FA:FE:B7:6A:85:BB:4F:34:98:49:67:30
            X509v3 Authority Key Identifier:
                keyid:98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/63B4BE609F8611F1A5D39EA03E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:00:9e:87:d9:25:b1:17:92:53:d0:a0:5d:d8:eb:6e:25:15:
         23:16:74:c9:14:a7:d9:9f:c5:45:90:d7:3b:83:b0:e3:53:7c:
         bb:37:0d:df:6d:52:50:09:42:1a:df:c9:93:2f:de:c6:12:08:
         dc:ed:67:92:f1:a1:95:6d:b8:9b:98:fd:a8:45:f6:fa:25:cf:
         55:da:42:ca:7d:fb:ed:66:04:1e:c0:a7:40:5a:63:27:b0:7e:
         08:c1:96:12:e3:1d:96:24:bd:93:cc:a6:8e:f7:82:f1:35:14:
         65:48:07:2e:12:c2:31:6f:74:62:e2:f1:a7:25:51:e2:93:72:
         d2:bb:08:57:33:f3:39:e9:d2:0c:0f:09:f0:37:ae:72:89:ad:
         41:44:30:50:6b:99:1d:46:92:61:86:67:58:62:1a:11:a5:f5:
         1d:f6:38:a3:61:eb:3d:74:11:b8:cb:16:6b:67:4b:6e:b3:5b:
         7d:06:ba:56:87:c9:4d:58:37:de:be:41:8a:f5:7a:a6:a8:50:
         5c:a6:e7:7c:12:39:84:e4:e6:03:5f:de:b9:f0:c5:8b:cb:bb:
         ab:44:11:35:cb:27:6a:bd:9e:5d:be:0b:0c:95:83:7c:5f:50:
         74:6c:fd:9d:4d:74:fd:7f:eb:74:7e:c4:a4:43:6d:0a:87:16:
         10:5b:c5:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:41:13 2026 by rpki-client