Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/ACBE9D886BCE11F190D386B58047A888.roa
File:                     ACBE9D886BCE11F190D386B58047A888.roa (raw, json)
Hash identifier:          wzA3Q1n/Ym5vQVGakgnRQ0/0/5N1KiNndOy36YFgSvE=
Subject key identifier:   C8:DB:B1:85:D6:78:75:F8:F7:39:37:B0:B0:29:E5:80:31:ED:CD:D7
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       3710
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/ACBE9D886BCE11F190D386B58047A888.roa
Signing time:             Fri 19 Jun 2026 11:04:43 +0000
ROA not before:           Fri 19 Jun 2026 11:04:43 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        117.121.247.0/24 maxlen: 24
                          182.54.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 14:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14096 (0x3710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Jun 19 11:04:43 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a35224b-550a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:06:5b:34:7f:9b:5c:fe:65:9d:f9:f5:37:
                    50:01:90:2d:8f:26:80:c2:71:dd:0a:4e:f9:5b:5e:
                    28:9d:84:d2:c9:e4:4c:f2:3f:3a:7f:83:cf:03:f9:
                    71:69:ca:72:f7:85:52:9d:77:5b:b0:1b:27:5f:c5:
                    87:d7:f6:15:34:e0:61:c2:1c:d7:b5:75:6f:0b:fb:
                    8c:f4:fc:02:de:27:7f:63:bd:55:c3:e3:e0:2f:a0:
                    2f:07:e0:c9:ac:ef:25:a6:99:c3:62:a9:8e:ed:24:
                    1d:39:5b:eb:30:05:3f:fc:46:d9:0f:49:ef:85:7c:
                    a5:58:ff:cb:a7:e4:2b:1d:15:4a:4d:47:af:f7:9d:
                    c9:6f:e5:f7:f4:3d:a9:7e:c4:e0:44:4f:c8:60:11:
                    43:3d:7a:1b:0d:c3:f7:91:96:f9:e7:66:75:1f:be:
                    ff:91:e7:24:41:12:df:a4:ca:af:ba:8b:2e:18:28:
                    51:84:cd:df:30:4c:f3:f5:65:8c:53:65:8e:8f:45:
                    91:2c:48:e7:23:2a:89:c1:39:c9:ee:50:7f:4d:e2:
                    42:cd:e4:8b:48:96:97:d2:48:46:36:1f:28:09:a3:
                    ee:18:a1:83:9c:2c:9c:a0:7d:0f:81:c3:5b:7d:8f:
                    ac:5e:a9:49:42:cf:73:9a:d5:d2:87:09:5b:8d:3f:
                    74:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DB:B1:85:D6:78:75:F8:F7:39:37:B0:B0:29:E5:80:31:ED:CD:D7
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/ACBE9D886BCE11F190D386B58047A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.121.247.0/24
                  182.54.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:b1:62:b8:c7:ec:71:38:18:2c:18:26:7a:62:d1:2a:7e:59:
         8e:1f:bf:a6:1c:e6:b7:fd:0f:41:04:a9:0e:44:f3:fb:3f:d1:
         9f:dd:9b:78:39:97:45:54:f7:97:c4:09:77:06:f2:9f:48:6a:
         c9:b0:3b:82:e4:20:7f:9b:37:a5:72:fb:dc:54:80:53:01:ff:
         9b:7e:e2:2c:f7:4c:e2:25:f5:8f:d2:8a:a5:eb:d9:ef:f8:c9:
         97:6c:4e:f1:5d:fa:9a:1c:d0:88:90:ca:ff:8f:cf:e1:b2:9f:
         99:ef:c6:52:78:b4:3e:55:34:38:b2:98:a0:00:23:88:24:10:
         95:c7:95:20:b4:1a:23:1d:07:6b:7e:90:54:f8:d4:c0:03:75:
         33:c7:37:6a:99:a4:90:df:35:8e:bc:1f:d8:e5:b2:35:47:d9:
         96:56:42:aa:de:25:1e:df:f8:2a:99:f3:1b:b8:8f:e3:17:3c:
         ea:ee:b2:84:82:d5:fd:4a:2a:2e:9b:51:35:62:c2:1a:e3:15:
         4c:f8:1d:06:56:54:23:32:a8:0e:e2:d2:a3:12:7c:19:fc:cf:
         8a:f6:50:20:42:27:f4:e6:33:0a:55:3d:5f:cc:7b:86:f8:5e:
         f8:f7:cb:fa:80:d0:74:e2:78:59:67:cb:72:6f:6f:d6:d4:0f:
         da:13:4e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:45 2026 by rpki-client