Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B88F65049AB611F1A85C11C64311F970.roa
File:                     B88F65049AB611F1A85C11C64311F970.roa (raw, json)
Hash identifier:          xHqlLzVPPIyi+9RP4Uhd/nQXiAksoICjKZK9VptHjn0=
Subject key identifier:   31:A0:84:94:96:86:74:21:AE:40:12:21:1A:84:28:26:85:30:53:BF
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       0251
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B88F65049AB611F1A85C11C64311F970.roa
Signing time:             Fri 02 Oct 2026 14:32:47 +0000
ROA not before:           Fri 02 Oct 2026 14:32:47 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     4637
IP address blocks:        61.13.160.0/20 maxlen: 24
                          61.16.40.0/21 maxlen: 24
                          202.52.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Nov 2026 03:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Oct  2 14:32:47 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6abfc08e-1744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cf:01:fc:cd:c9:9f:e7:80:20:70:6b:1d:4a:
                    9c:83:c0:04:3d:0f:a2:b3:54:6b:27:e2:6f:d9:11:
                    dd:00:c0:ad:0d:5c:85:b3:08:86:41:04:ca:91:62:
                    36:44:5a:92:e0:91:0f:94:34:20:2a:58:6e:e9:f9:
                    94:55:18:5b:06:85:c4:1f:c3:42:df:1e:54:fc:73:
                    2a:a7:b7:1c:79:01:c6:95:74:fb:e3:68:ee:83:74:
                    4f:be:85:65:98:f8:bf:27:dd:ed:37:3e:52:3b:5c:
                    ca:73:a0:0b:a6:42:03:d1:25:bf:a9:bc:79:a9:d7:
                    d4:e8:a6:11:5e:b6:e1:c5:bd:26:cb:02:88:31:bb:
                    86:e7:7b:e5:2f:b9:96:9f:2d:ae:f8:8d:8a:8c:c7:
                    16:fe:87:8d:76:2b:42:6a:2c:21:fb:3f:85:a9:29:
                    f7:bf:69:1d:a6:bd:48:6b:e0:a7:42:22:c3:d3:0c:
                    a2:6f:45:85:6b:98:59:c6:91:59:14:b6:8f:d5:cc:
                    f3:a7:14:17:ca:6c:0d:10:76:32:f1:b6:97:db:e0:
                    75:c1:2e:38:44:50:af:9a:6d:cb:9d:6d:8e:5d:40:
                    d6:0a:a1:dd:7f:cd:11:de:e0:97:60:30:40:31:27:
                    b2:e7:c4:3a:12:ad:42:73:8d:b0:b3:f9:48:1d:60:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A0:84:94:96:86:74:21:AE:40:12:21:1A:84:28:26:85:30:53:BF
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B88F65049AB611F1A85C11C64311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.13.160.0/20
                  61.16.40.0/21
                  202.52.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:6d:f8:31:21:06:ae:3a:9b:ea:c1:69:46:ed:11:7d:5c:43:
         13:fe:af:64:4d:86:24:3d:e4:1d:8d:be:59:29:a3:33:16:b2:
         c2:25:bb:43:6a:64:65:a2:4d:7c:44:b6:64:bb:da:5c:85:cc:
         76:c4:84:7a:c8:b7:8d:22:54:c3:46:45:6d:ec:da:f7:22:9e:
         3a:bf:ed:25:37:fb:d1:e5:5f:ac:f1:ec:82:56:84:5a:34:9d:
         6a:29:b2:3d:15:05:bf:98:1a:fb:9c:d3:53:b1:01:67:92:dd:
         05:d7:9e:16:e4:9c:2f:b8:d3:e9:54:e9:5f:33:4e:27:d2:86:
         06:6b:9f:b8:ff:3d:18:26:b6:47:2f:fd:53:7b:bb:3c:bf:cf:
         4c:37:c1:af:d2:96:e2:5f:2c:89:c5:21:6a:2a:9e:c0:db:5a:
         c4:81:05:20:16:75:a9:84:07:47:db:82:da:7c:ec:26:d4:3f:
         43:71:7b:e6:6f:84:9e:65:59:eb:0e:45:4f:ea:1e:ba:28:e3:
         64:b7:7f:09:89:5b:31:15:24:c1:6a:fd:97:07:73:a9:c5:ef:
         88:94:1e:0f:ae:0a:50:f4:8d:f3:0f:7a:f0:f0:1f:ec:3c:d6:
         40:b4:6a:cb:07:dc:2a:57:51:11:eb:de:d5:b0:84:65:78:d0:
         e5:d3:20:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:23:35 2026 by rpki-client