Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/DB175658E9D711EBA3549B09C4F9AE02.roa
File:                     DB175658E9D711EBA3549B09C4F9AE02.roa (raw, json)
Hash identifier:          3bV0TzjiZh3KuPq0SqliImca0k0LkcZjFA0YvIEuGRg=
Subject key identifier:   7B:66:8D:2F:7C:DD:36:70:51:EB:C3:3A:57:C6:8E:98:79:D6:64:97
Certificate issuer:       /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
Certificate serial:       095C
Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/DB175658E9D711EBA3549B09C4F9AE02.roa
Signing time:             Tue 16 Jun 2026 20:24:17 +0000
ROA not before:           Tue 16 Jun 2026 20:24:17 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     54994
IP address blocks:        45.116.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl
                          rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 20:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2396 (0x95c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
        Validity
            Not Before: Jun 16 20:24:17 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a31b0f1-fb4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:10:ea:32:22:24:11:25:12:d4:72:af:bc:5b:
                    49:15:bc:69:1d:af:14:35:3b:8c:6b:e6:11:1f:83:
                    8d:25:5d:87:44:11:e8:5f:b0:bd:be:22:25:b1:84:
                    c8:60:9f:10:ce:4f:10:fa:e8:91:cf:4f:22:66:bf:
                    95:35:55:50:55:95:48:3c:6e:23:eb:6c:26:6b:d0:
                    6e:57:42:d0:74:ee:ed:35:b3:7b:3c:fa:1a:a3:08:
                    31:72:d9:ce:95:e5:89:f4:24:79:aa:4f:8c:d8:eb:
                    f2:94:8e:63:9e:0a:60:3c:85:68:e4:eb:9c:f6:5b:
                    79:44:3a:95:c5:ee:1d:ca:51:1f:25:5f:18:e8:10:
                    40:17:de:7a:a2:cf:6d:f1:34:d0:de:87:77:ba:12:
                    a6:99:d1:72:8b:28:fb:22:60:b0:7f:ad:36:3c:af:
                    b3:b4:f4:7c:8b:9c:f8:12:e7:a2:d1:39:38:da:1c:
                    f0:25:0e:cb:a4:31:7f:a3:20:d4:e5:dd:b5:ef:4e:
                    7f:09:a9:80:d7:c8:3b:12:6c:ec:c6:38:72:93:cb:
                    86:a3:d1:89:a2:67:ff:c0:e2:bd:57:84:91:67:c8:
                    70:f5:c2:01:6a:2d:ca:46:b9:be:20:83:ac:df:2f:
                    0c:4f:ba:b7:39:36:75:81:37:2e:94:e6:61:90:24:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:66:8D:2F:7C:DD:36:70:51:EB:C3:3A:57:C6:8E:98:79:D6:64:97
            X509v3 Authority Key Identifier:
                keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/DB175658E9D711EBA3549B09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:2f:6d:ea:cf:4d:3a:ba:66:46:1e:cb:ce:85:9c:10:a7:ef:
         a3:7f:7a:3d:bc:c4:7d:cd:5b:4e:b6:87:b6:8e:c4:97:6d:cc:
         6e:98:b8:e3:ff:5f:00:81:85:25:17:a8:fa:db:f2:8f:4d:f8:
         80:0f:b7:52:30:d2:6d:30:3d:df:59:0a:c0:4b:d4:d9:95:32:
         88:bb:b7:ad:9e:00:f9:41:61:e7:ec:da:c0:d6:2c:a0:dd:5a:
         fa:52:7e:20:94:d4:b7:14:1a:fc:3b:10:43:d0:58:fd:56:87:
         a7:bc:74:3b:00:d2:74:c3:1b:7c:ef:b6:8e:de:dd:c1:6b:53:
         5e:3d:74:a8:3a:14:88:38:ce:2e:7c:24:4f:a0:e3:0e:45:cd:
         a6:7a:e2:f6:c1:53:f6:39:05:b2:0d:2c:2f:57:d1:b3:08:f2:
         16:dd:bc:9f:b0:f7:7f:17:3d:e2:82:d7:49:c6:85:80:20:0b:
         2d:51:a4:8c:d4:12:3e:e4:3a:9b:52:21:85:25:f3:60:96:ea:
         bd:e4:e0:83:85:83:ff:8a:94:55:88:bb:37:e2:73:b6:15:20:
         f2:01:8e:5f:5e:5d:f4:e0:a7:62:60:5f:83:e3:db:8e:67:28:
         a6:4b:22:6b:ab:98:3b:91:63:e6:40:56:9f:4b:b8:bc:cd:a3:
         fb:32:c7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:20:53 2026 by rpki-client