Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/B7BA9860DB8A11F09F03163163D3641D.roa
File:                     B7BA9860DB8A11F09F03163163D3641D.roa (raw, json)
Hash identifier:          tko+/h36KBIN5Mky2JAjS3z0hpFeYGsUcN3Jcbzdi3U=
Subject key identifier:   56:CC:AE:8E:1D:3B:65:38:2D:71:3B:3F:86:EA:DD:00:C3:65:1C:6B
Certificate issuer:       /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial:       1E7A
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/B7BA9860DB8A11F09F03163163D3641D.roa
Signing time:             Fri 02 Oct 2026 17:28:46 +0000
ROA not before:           Fri 02 Oct 2026 17:28:46 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        45.126.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7802 (0x1e7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
        Validity
            Not Before: Oct  2 17:28:46 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abfe9ce-1245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:6b:eb:21:de:1a:4c:cb:54:43:9b:7d:ad:
                    3d:65:90:2f:22:6a:95:53:c9:c7:bf:04:b2:37:d7:
                    40:46:38:4b:fa:e0:8f:f7:e1:ad:71:16:32:19:c5:
                    d7:88:98:82:d0:5b:98:71:cb:7f:2f:47:c5:8c:a9:
                    84:ae:f2:2c:76:1f:cf:b2:30:5f:de:39:0b:94:03:
                    33:ac:1e:0b:cb:89:63:76:21:99:ca:07:fb:ed:8b:
                    1b:84:b9:c5:b1:03:c4:e4:9f:26:77:6b:23:f8:6d:
                    0d:b7:09:43:19:a7:a2:6f:ca:38:be:4b:94:b7:53:
                    f0:a9:af:d5:59:7b:f3:18:3c:64:6e:e0:40:52:b4:
                    d1:d7:f1:a2:19:75:84:c4:73:67:9b:c1:dc:4e:28:
                    70:dd:68:a0:6b:06:5b:9a:d1:b7:d4:a9:23:5c:40:
                    96:c4:db:f0:77:b4:2c:43:f5:ac:0c:fc:29:85:5e:
                    46:0a:8b:74:08:21:3c:02:ae:f8:29:90:54:c0:0c:
                    8c:f5:a4:46:87:e7:0a:b7:6f:b6:b9:32:df:23:a3:
                    67:aa:4f:62:96:ff:b6:96:4b:3a:27:a4:35:5d:76:
                    e5:36:26:2d:0b:43:25:d1:f6:22:50:58:69:d0:1d:
                    67:b8:b3:f7:62:0c:14:74:97:71:43:04:3a:c9:db:
                    b5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CC:AE:8E:1D:3B:65:38:2D:71:3B:3F:86:EA:DD:00:C3:65:1C:6B
            X509v3 Authority Key Identifier:
                keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/B7BA9860DB8A11F09F03163163D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:2c:a3:f9:ee:ff:0b:d1:f9:64:61:da:18:54:13:7b:85:07:
         de:b7:0e:3d:42:b6:e8:51:4a:e0:de:14:45:cc:33:0c:e1:9c:
         d6:9b:1f:ed:a8:f7:5d:64:4e:11:1b:be:32:76:de:aa:48:d9:
         96:e0:1c:18:c8:12:b7:c5:ff:c3:0b:0c:05:a9:7d:31:61:68:
         12:5e:20:b4:39:e4:83:e8:8b:26:eb:14:6f:dd:e1:7b:9d:f0:
         b3:90:68:29:2f:0e:a8:c1:b9:99:9b:d4:93:3f:40:49:ec:a8:
         61:ad:c8:a8:e7:66:70:8e:c6:23:e4:8d:47:a1:33:ad:99:b7:
         e3:40:81:25:77:d3:1d:22:d1:cd:ae:9b:eb:5f:87:2c:81:56:
         e9:a4:7e:b7:33:8d:b7:82:ae:64:4f:55:3f:31:1a:51:47:cb:
         25:36:bb:72:1a:e8:65:8e:fc:b4:de:05:d3:01:bc:ff:bf:c8:
         40:fe:a1:ce:25:53:79:75:00:fe:db:1e:a5:78:2e:e8:95:f3:
         9e:6c:d6:31:64:51:ab:c3:2d:5c:10:98:68:49:12:ac:a6:45:
         d4:8c:c0:f5:12:c9:aa:d4:ca:78:54:fd:cf:85:70:55:d6:8d:
         1a:41:d6:dc:67:6e:15:15:56:67:db:03:51:b8:df:d2:7a:34:
         72:8c:c2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 05:37:10 2026 by rpki-client