Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/B842F0DEDB8A11F09F03163163D3641D.roa
File:                     B842F0DEDB8A11F09F03163163D3641D.roa (raw, json)
Hash identifier:          jXyFKKhv3NiyhdxhvyOkChDU44D4bw0UZftZE74S4M8=
Subject key identifier:   C1:31:58:C5:F5:24:20:F4:C9:AA:33:20:A6:16:8F:F2:E5:3E:56:6E
Certificate issuer:       /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial:       1E7B
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/B842F0DEDB8A11F09F03163163D3641D.roa
Signing time:             Fri 02 Oct 2026 17:28:48 +0000
ROA not before:           Fri 02 Oct 2026 17:28:47 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        45.126.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 16:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7803 (0x1e7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
        Validity
            Not Before: Oct  2 17:28:47 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abfe9cf-8962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:80:2a:5d:6d:9c:8a:02:c1:01:07:f6:2b:03:
                    09:74:47:09:9f:a6:e7:95:9a:14:e3:65:b4:4d:bf:
                    d4:5f:24:a5:e2:f3:0d:d9:c7:b9:a4:28:86:60:57:
                    e0:d2:4f:91:7b:6d:2a:62:db:1a:7b:02:1b:46:5a:
                    f6:d5:39:e4:f2:8e:37:6a:dc:83:8e:26:04:35:f2:
                    a5:5e:bf:63:6b:0b:9b:ee:72:c8:8e:86:e9:dd:32:
                    44:dd:f4:5c:ab:51:b6:fb:6c:15:92:e3:5b:8c:84:
                    4e:84:41:63:3b:be:d1:04:10:94:17:e6:d5:b0:7d:
                    bd:22:b5:a3:b4:9c:50:77:4f:dd:14:b9:2a:2d:f6:
                    96:be:e2:66:58:77:15:0c:21:98:89:29:a4:f1:8b:
                    ba:df:f5:f3:5d:54:fa:25:c8:43:2c:de:b3:48:c9:
                    9a:d4:3d:98:1b:e9:9f:57:f3:2a:e3:38:0e:42:1f:
                    7a:57:97:aa:ce:b5:ea:98:97:c1:c5:b1:f2:70:d1:
                    5c:70:ae:d2:6e:17:20:fc:b4:10:bb:60:22:ac:55:
                    0e:ee:70:c8:fa:a9:60:d9:b9:0e:43:00:55:2c:6e:
                    ff:80:ad:37:66:4d:e9:5c:43:6c:d9:66:ee:77:60:
                    df:af:d2:52:e2:f2:b4:f4:ef:c5:e1:2c:30:e7:25:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:31:58:C5:F5:24:20:F4:C9:AA:33:20:A6:16:8F:F2:E5:3E:56:6E
            X509v3 Authority Key Identifier:
                keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/B842F0DEDB8A11F09F03163163D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:ef:7a:3f:0d:ff:5a:ae:97:9c:12:a3:de:6b:3a:21:57:47:
         b0:8c:c4:85:44:92:b6:65:07:dc:fe:cc:e7:fc:23:95:70:30:
         93:3c:a7:6e:16:d4:b6:89:3c:65:d3:32:dd:14:55:b2:c6:c7:
         9d:b3:45:04:18:2f:ed:7e:59:da:b2:9d:88:65:b9:3c:8e:fe:
         84:f0:d3:f4:db:a4:c1:d9:41:6c:15:48:04:c7:01:bb:d1:db:
         a8:53:20:16:5d:ab:f3:c5:c6:b0:af:fa:32:66:49:e8:f1:45:
         dc:97:2c:41:a2:55:d5:71:5d:bc:22:04:e3:b3:b6:e8:51:bd:
         10:20:01:17:ac:d2:43:b6:5d:01:84:10:de:eb:64:22:a3:b6:
         33:64:b9:b4:07:a1:35:53:ed:70:84:10:15:9e:9d:e9:14:14:
         a4:38:de:05:f3:50:59:dd:09:ba:b7:b9:03:18:f3:ea:ca:79:
         4b:77:94:84:88:05:4a:63:e1:c2:17:5a:0a:a2:90:26:78:72:
         9e:4c:ef:d7:c6:3f:06:de:47:d8:7e:51:c9:3f:ae:37:cf:a5:
         a5:1e:0b:88:37:f3:f8:e8:50:95:c5:82:33:6f:0e:40:e4:6a:
         65:7a:f7:2b:d0:70:da:a7:7a:22:25:52:6d:3c:eb:e9:cd:a9:
         2f:7d:af:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:05:07 2026 by rpki-client