Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F6CCABBA580311F18246AAE39B833773.roa
File:                     F6CCABBA580311F18246AAE39B833773.roa (raw, json)
Hash identifier:          Sy10tfcnlP/icaTyyPCajx/jJSM+JdeLmpgnQckiwew=
Subject key identifier:   89:83:57:85:6A:6E:42:D9:6C:37:B0:73:F8:6B:B7:74:E1:43:9D:36
Certificate issuer:       /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Certificate serial:       031D
Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F6CCABBA580311F18246AAE39B833773.roa
Signing time:             Mon 25 May 2026 06:35:47 +0000
ROA not before:           Mon 25 May 2026 06:35:47 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     9547
IP address blocks:        166.120.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
                          rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 01:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 797 (0x31d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
        Validity
            Not Before: May 25 06:35:47 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a13edc3-ed6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1a:89:e5:71:27:9e:c3:cb:27:7e:52:b2:66:
                    1c:51:1f:06:f4:61:77:b1:14:9a:a6:8e:2b:3b:37:
                    b3:e6:e8:b3:67:11:00:71:db:f8:8f:ea:7f:0b:55:
                    b2:35:d3:6d:5b:c4:99:95:de:d0:0e:14:f9:7f:96:
                    68:c4:55:38:0e:1a:13:d2:fc:cd:73:44:7d:fb:fc:
                    10:d7:51:96:77:c6:55:06:0d:7d:3f:21:83:c7:8b:
                    3f:67:12:f3:c3:a0:dc:f5:1a:5a:2e:f8:ec:3e:ad:
                    91:b6:68:52:e6:6c:8c:86:a0:19:cd:e0:30:4f:a8:
                    28:2f:ac:c0:22:c6:29:9a:0e:e3:39:d4:54:0c:42:
                    26:7d:60:e9:e5:74:a5:6f:e7:ec:dc:7c:87:41:08:
                    50:a7:6c:36:26:fc:50:82:e2:1c:45:78:7e:bb:82:
                    80:7c:89:13:20:bd:6b:3e:12:a6:60:6c:2a:b8:57:
                    91:2f:08:b2:e9:d8:47:96:ca:d7:d6:f7:34:95:39:
                    df:e6:72:be:4e:42:f4:eb:0e:fa:9b:68:a0:12:36:
                    44:fe:b8:90:72:45:63:97:49:43:12:1b:b8:a2:7a:
                    25:52:0e:1e:7a:51:13:68:f0:ba:c9:4c:54:15:6c:
                    78:09:8f:aa:2f:d8:c6:bf:e4:ae:98:bd:ea:6a:1e:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:83:57:85:6A:6E:42:D9:6C:37:B0:73:F8:6B:B7:74:E1:43:9D:36
            X509v3 Authority Key Identifier:
                keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F6CCABBA580311F18246AAE39B833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.120.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:4f:17:59:7e:cc:b4:ab:43:90:00:39:d1:22:01:9c:49:9c:
         dc:05:52:a3:57:e8:79:ae:bb:1b:db:02:38:49:13:50:2c:17:
         f2:f4:f3:98:81:e8:b5:d4:ea:11:bd:cd:56:e2:3d:48:f5:df:
         09:eb:42:49:98:7d:48:bc:0f:c0:87:4b:60:84:5c:2b:e8:9f:
         08:27:e1:00:ce:bb:2c:73:7f:7f:27:72:23:19:14:a2:fa:7e:
         ba:31:6e:72:e2:28:7c:57:92:a7:22:d7:ec:4e:7b:78:cb:32:
         70:7f:f5:fa:3a:52:c9:d2:78:de:1d:43:c9:cf:37:d2:34:c6:
         e5:11:40:a5:5b:9f:9d:95:02:dc:98:e5:dc:99:91:e4:04:65:
         6f:24:e4:2c:90:8e:1d:4f:5a:9c:88:cd:9f:eb:ce:7e:ca:a2:
         5f:55:1d:5e:32:7c:6b:f1:f4:a1:13:96:a9:ae:22:6f:3b:62:
         aa:aa:1f:9f:07:96:a8:4e:d3:66:3e:e2:f6:92:1c:f5:ef:6b:
         80:bf:67:67:0f:0b:bd:87:ad:1c:7e:16:86:a5:48:a2:d3:f1:
         0d:ce:08:93:3e:f2:76:cd:ac:eb:ae:d8:04:a6:04:d6:aa:f9:
         7f:c1:06:ee:6a:5b:71:94:5f:71:0b:ff:8d:65:50:1b:a4:12:
         6e:2e:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:51 2026 by rpki-client