Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/9EFE48D0A69B11F1A765D2433411F970.roa
File:                     9EFE48D0A69B11F1A765D2433411F970.roa (raw, json)
Hash identifier:          +fhWHGp90OeGaOUocgTgh/4qn/dq/1VpTitl9fn3JeM=
Subject key identifier:   93:14:56:83:B3:5A:CA:3A:B6:A6:79:34:98:A6:DD:D1:7F:AC:7C:A1
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       23E8
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/9EFE48D0A69B11F1A765D2433411F970.roa
Signing time:             Mon 02 Nov 2026 16:26:34 +0000
ROA not before:           Mon 02 Nov 2026 16:26:34 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     63099
IP address blocks:        220.158.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 15:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9192 (0x23e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Nov  2 16:26:34 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6ae8b9ba-7abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:48:cb:bf:f9:99:58:30:7d:4e:83:a3:ae:ee:
                    8a:c9:d5:fe:9b:8b:65:be:a1:11:82:80:39:2b:60:
                    55:e6:d4:ab:04:a5:30:ca:79:9c:60:04:3e:16:f9:
                    f7:76:9f:82:a3:67:5f:9a:3f:a8:01:9c:de:ec:9d:
                    05:8e:62:34:37:8f:90:c7:2c:87:e5:c8:b8:7b:0c:
                    bc:99:d2:c4:53:6e:d9:fa:fa:c8:55:dd:b0:c3:58:
                    b6:93:61:ee:80:cd:04:1c:be:25:d5:1f:bf:0c:52:
                    7e:1a:6f:49:74:8a:84:a6:5b:de:6b:b5:14:db:0a:
                    e4:50:46:25:9a:77:7d:b2:b2:17:6c:a0:07:45:71:
                    59:8a:05:d2:61:0b:01:ec:ce:ee:d3:20:b0:7e:c9:
                    3f:71:61:6a:ce:df:44:a9:5b:99:8e:f9:5d:d1:77:
                    a0:c0:c4:86:27:56:b0:30:14:e4:af:71:8c:27:08:
                    61:10:ae:6a:22:ad:3d:27:4c:1a:ea:02:77:b5:88:
                    c4:cc:a4:7e:cc:1a:6b:e7:f5:e5:f4:dc:ee:51:2d:
                    41:f5:50:9a:1b:b5:86:d1:f1:6d:f3:88:6a:51:81:
                    c1:7f:f1:91:a3:a2:3e:82:ca:89:e9:64:d0:8b:67:
                    30:d2:a1:6a:42:a2:f9:99:97:3f:a2:68:d6:c0:f8:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:14:56:83:B3:5A:CA:3A:B6:A6:79:34:98:A6:DD:D1:7F:AC:7C:A1
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/9EFE48D0A69B11F1A765D2433411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.158.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:91:35:80:f1:13:a2:af:37:db:f0:3c:37:8d:9e:8c:80:03:
         7d:e4:06:c4:cb:7e:53:11:c3:99:49:c3:71:b5:e4:c7:d4:32:
         8d:1d:58:ad:11:fa:65:d2:c1:cc:fd:05:3c:04:7b:bd:61:d7:
         86:b0:6a:ad:61:da:22:f8:4d:c8:4b:f4:84:2d:f3:86:60:be:
         12:00:85:81:6a:93:50:1f:7b:e2:6a:2d:36:78:96:d2:b7:55:
         24:52:77:0b:02:b3:5d:d9:35:98:0e:ce:1b:15:d0:a5:61:c7:
         ce:c1:5e:f9:de:33:d3:a6:ad:78:8e:3e:86:70:45:b2:ac:7f:
         02:03:0a:d2:db:19:69:27:f9:65:ee:c3:41:4c:c0:43:ec:8e:
         9a:d7:c3:68:02:9b:4b:64:eb:2a:1d:6f:4f:bc:6e:72:ac:a4:
         e7:15:2e:89:31:61:1b:fb:c8:1b:df:e8:82:b4:77:ce:51:75:
         b1:c8:d3:58:cc:73:89:cc:06:e1:df:8d:4f:ed:24:f7:1f:47:
         66:cf:e2:62:5c:c7:32:14:6f:eb:2d:b1:12:84:24:c6:9b:db:
         b7:95:45:6f:a0:6d:6d:85:aa:ef:ca:95:a8:33:d2:13:6b:21:
         d4:46:c5:86:39:01:08:14:af:ef:ff:57:00:a0:14:d9:7d:f3:
         09:7b:61:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:37:31 2026 by rpki-client