Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B772717A9AB611F1A85C11C64311F970.roa
File:                     B772717A9AB611F1A85C11C64311F970.roa (raw, json)
Hash identifier:          d/1nKtzVJFOAvD5GcQzX2uqaT0vrUxJNjX9GjTKmfrM=
Subject key identifier:   64:67:C3:25:7B:E7:49:01:3B:6D:CA:3B:26:7D:9F:E9:F1:B3:AF:9D
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       0250
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B772717A9AB611F1A85C11C64311F970.roa
Signing time:             Fri 02 Oct 2026 14:32:45 +0000
ROA not before:           Fri 02 Oct 2026 14:32:44 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     197537
IP address blocks:        61.13.160.0/20 maxlen: 24
                          61.16.40.0/21 maxlen: 24
                          202.52.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 03:34:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Oct  2 14:32:44 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6abfc08c-fa96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:93:a2:63:bb:87:bc:d4:88:22:54:ba:cf:91:
                    aa:f0:8f:dc:82:50:8a:e2:ec:90:78:9f:f8:74:81:
                    65:fc:92:5a:8c:37:ad:f5:fe:07:02:cf:7b:79:7c:
                    df:db:c8:c6:1e:d3:70:24:c9:5d:79:0d:d7:b6:3f:
                    9a:63:35:aa:db:ee:de:6f:52:fa:69:db:b4:bf:5b:
                    9f:bb:65:c5:ff:dc:6c:2e:fe:2c:90:fa:70:c7:04:
                    07:fc:95:5b:89:10:eb:19:00:97:50:c0:78:af:94:
                    4a:15:9e:d5:ea:00:19:8c:49:7f:18:2e:32:3d:d7:
                    b7:fb:20:f0:e3:f8:19:90:e5:e4:75:86:26:35:b2:
                    19:63:2f:d7:97:9b:45:f9:d0:7f:d7:ab:bb:ab:e3:
                    25:08:50:9d:21:a8:ad:1a:71:3e:54:ac:7a:87:c1:
                    01:d3:36:ee:22:a8:87:8a:43:a2:a8:dd:66:d2:23:
                    61:af:b8:b8:f1:42:fe:f6:95:72:ec:6c:27:60:96:
                    25:4f:61:cd:45:2a:e0:18:c0:83:d2:6f:21:f4:73:
                    fd:73:40:d2:d6:29:3f:67:9d:47:7b:0f:c4:83:46:
                    2b:92:d7:47:6e:ab:e2:39:2d:03:47:6d:1b:e3:4e:
                    7c:10:ca:6c:91:81:23:58:1a:47:39:7a:f3:00:3a:
                    2a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:67:C3:25:7B:E7:49:01:3B:6D:CA:3B:26:7D:9F:E9:F1:B3:AF:9D
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B772717A9AB611F1A85C11C64311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.13.160.0/20
                  61.16.40.0/21
                  202.52.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:fc:1a:5e:85:85:48:59:b1:23:98:f7:b0:dc:7b:3d:e9:33:
         1e:08:ee:62:92:17:27:66:f9:16:f6:5b:cf:08:4e:d0:65:b4:
         e6:af:a0:d3:8a:0e:47:d4:92:03:53:10:86:b2:68:fe:43:84:
         5e:f4:5a:d8:07:c6:9d:91:4e:ad:d0:d9:e6:73:0a:99:77:c4:
         92:47:74:d7:e3:ac:41:16:f8:37:ac:d0:da:4a:79:7c:e6:7f:
         ee:f7:12:30:b2:48:10:5d:d0:26:3b:91:fe:9c:59:1d:70:42:
         38:cb:3c:b3:c0:c2:ee:eb:73:a8:6c:73:55:cc:4b:4f:ac:23:
         38:22:a1:fd:a8:73:f3:b3:41:03:ed:92:88:cf:f7:a4:53:2b:
         9d:ad:23:a4:68:36:16:b1:56:11:b9:ce:aa:10:0b:b2:2b:77:
         af:d8:59:6c:13:f2:ad:cc:4a:14:95:67:d2:2a:f1:e1:09:69:
         0d:38:3b:2d:6e:c3:5f:6f:1f:7d:c9:ce:04:3d:69:8f:cf:29:
         2b:e2:59:60:16:ce:bc:77:4d:41:07:d0:d8:01:2d:4c:36:06:
         8b:cb:18:65:09:bc:13:eb:79:b1:d3:c7:7f:8a:a1:9c:c7:5b:
         af:cf:cf:d2:26:cb:b0:83:79:70:bd:7e:f1:28:72:2d:c1:70:
         ea:2a:e8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 19:08:38 2026 by rpki-client