Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/16C1510E310711EE8328F181C4F9AE02.roa
File:                     16C1510E310711EE8328F181C4F9AE02.roa (raw, json)
Hash identifier:          BygtTxYKrmCNHrtIIR14xC6HQhHRaQIo8/DRZk+SHVs=
Subject key identifier:   5E:3B:4E:DA:D5:1B:38:01:42:4C:2C:18:E8:EB:EA:CC:06:EB:F8:A7
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0382
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/16C1510E310711EE8328F181C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 02:34:00 +0000
ROA not before:           Fri 05 Jun 2026 02:34:00 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     397423
IP address blocks:        202.126.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 02:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898 (0x382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  5 02:34:00 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a223598-b2d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7b:7b:8f:49:fa:5f:99:2a:3d:75:59:f9:df:
                    6f:57:a3:87:64:df:ee:dc:1b:8f:5d:f0:fd:db:e9:
                    3d:19:56:1e:90:f6:38:d6:c8:09:a5:45:99:98:66:
                    45:4f:65:cb:51:33:d0:54:f7:51:a5:52:dc:c4:f9:
                    49:ab:ce:0a:10:86:74:d1:00:46:8d:40:23:24:ad:
                    43:fa:15:4a:4e:4d:1b:51:c4:83:5d:1b:7a:81:cc:
                    70:2e:ee:04:95:e6:cf:74:81:f5:1b:49:ef:96:3a:
                    c2:2a:68:c5:4c:21:5a:f5:29:3e:1b:da:fd:b2:95:
                    bb:1e:3b:92:d1:76:c7:17:30:1d:2d:fb:85:01:17:
                    98:d5:23:4a:25:63:f4:9b:cb:a6:97:e4:ae:ba:d7:
                    74:77:09:98:02:4d:e5:7a:85:bd:f9:1a:b5:bd:ac:
                    ec:7a:c0:9f:5e:ad:62:1c:fb:77:c5:f9:da:6e:e8:
                    04:0f:db:46:c3:91:4e:e0:6a:e2:ea:e9:b4:ba:8d:
                    0e:ae:b9:59:22:a2:06:45:48:77:ad:ee:e6:d2:64:
                    a1:97:10:79:f0:4a:98:5d:dd:5a:19:d3:e7:1e:15:
                    88:2e:2b:c0:20:07:00:42:72:39:9c:d5:cc:06:5b:
                    0a:72:69:2e:b7:7c:90:b6:8a:84:71:25:78:7a:e5:
                    3e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3B:4E:DA:D5:1B:38:01:42:4C:2C:18:E8:EB:EA:CC:06:EB:F8:A7
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/16C1510E310711EE8328F181C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:7f:23:d3:fc:ea:c0:73:23:a5:23:56:ab:7b:c5:66:07:47:
         98:46:b2:c3:9f:3e:8a:a4:7a:e7:b1:fc:09:1a:80:29:b4:44:
         3d:2a:37:f0:a8:5d:13:f0:e7:1c:47:1f:17:dd:74:58:e8:25:
         69:99:2b:f8:87:e6:84:d8:99:14:96:f1:a3:2e:09:fe:d1:30:
         4f:3d:a5:2e:ff:52:b9:28:f5:fb:76:96:78:27:7c:dd:2c:d1:
         a6:c0:a3:47:80:61:8d:82:df:a4:14:f1:ce:8d:c0:44:ee:ce:
         fa:47:9d:48:a9:5c:6f:ee:4a:9e:4b:d8:c1:94:3e:7a:a3:98:
         47:88:e0:17:ac:00:80:5c:f4:28:3d:93:46:42:e6:62:5c:ad:
         07:87:39:81:54:d1:f8:d5:9f:ee:fd:f7:91:2c:b7:eb:c7:dc:
         f5:39:44:16:97:34:fa:03:e9:7b:00:07:63:ce:8a:06:8b:88:
         84:96:54:12:d3:e2:4d:fd:fb:74:ed:bc:3b:aa:d0:71:e2:f1:
         be:ba:d4:50:69:fd:4c:e3:98:ce:59:34:ae:dc:df:7c:d6:da:
         0a:2d:26:db:05:6d:ba:1f:d7:1d:15:78:f5:d7:80:f9:99:d8:
         91:1e:ee:48:67:e3:97:c0:0c:e0:6c:21:83:d3:18:2a:36:58:
         5c:d5:0d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:44:39 2026 by rpki-client