Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/0DD665AE5B6411F1BCACB5ED9D833773.roa
File:                     0DD665AE5B6411F1BCACB5ED9D833773.roa (raw, json)
Hash identifier:          Zw6PGn1J7/f1qbg4N3OXHky/Z2t3N4xuVTg/093VRwg=
Subject key identifier:   51:88:D5:FC:CC:C1:3F:BB:3C:4A:5A:6D:D0:73:1D:5C:E6:0D:CA:25
Certificate issuer:       /CN=A91F8AD4/serialNumber=A9463EDE6720BE35BAD11F5A8986DBB17A4C32AB
Certificate serial:       02
Authority key identifier: A9:46:3E:DE:67:20:BE:35:BA:D1:1F:5A:89:86:DB:B1:7A:4C:32:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/0DD665AE5B6411F1BCACB5ED9D833773.roa
Signing time:             Fri 29 May 2026 13:41:11 +0000
ROA not before:           Fri 29 May 2026 13:41:11 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     138603
IP address blocks:        163.128.244.0/23 maxlen: 24
                          2402:58a0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.crl
                          rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 10:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8AD4, serialNumber=A9463EDE6720BE35BAD11F5A8986DBB17A4C32AB
        Validity
            Not Before: May 29 13:41:11 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a199777-78ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:c5:d9:5b:39:36:3e:b2:b3:ba:d5:29:3a:
                    9a:0b:3b:ec:97:37:c2:ce:a2:37:d0:9e:95:1c:5d:
                    b7:ff:6c:01:6a:8b:f7:e9:00:59:8a:af:a3:e8:92:
                    80:c3:26:12:db:93:17:85:e3:91:8e:51:30:02:2e:
                    d0:69:4f:67:63:47:bb:1b:a1:80:c8:0b:b1:b9:5e:
                    9c:19:be:69:b2:5c:a8:66:a5:f5:e3:fe:e1:eb:9a:
                    4d:02:4c:2e:99:a4:24:e9:56:de:4c:48:38:bb:41:
                    a8:a6:46:5f:62:da:11:0e:62:64:c5:24:26:d5:ac:
                    70:21:db:32:90:04:ef:7b:92:bd:36:c1:36:41:8f:
                    b5:7e:08:64:33:4c:3a:ba:f5:99:fc:14:80:ec:a2:
                    a3:f0:4d:83:0c:97:2d:41:55:6d:71:43:be:39:19:
                    c8:26:1e:ce:f7:ff:8f:fb:fd:b9:a0:b7:31:f5:20:
                    08:4c:12:93:b1:3c:76:83:97:4e:ef:c6:e7:bc:09:
                    4f:c8:43:8b:6a:09:f4:15:de:d1:bd:4e:70:dc:b7:
                    9e:56:94:da:89:51:29:08:cf:11:e9:a5:25:b3:f4:
                    68:af:88:70:78:94:f5:e6:a5:60:a7:3e:ab:a0:00:
                    a5:c1:de:3c:7f:93:a9:5b:a5:bf:70:4f:a2:6b:86:
                    d4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:88:D5:FC:CC:C1:3F:BB:3C:4A:5A:6D:D0:73:1D:5C:E6:0D:CA:25
            X509v3 Authority Key Identifier:
                keyid:A9:46:3E:DE:67:20:BE:35:BA:D1:1F:5A:89:86:DB:B1:7A:4C:32:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/0DD665AE5B6411F1BCACB5ED9D833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.244.0/23
                IPv6:
                  2402:58a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:be:ad:87:d7:71:ee:00:5d:8d:4d:2e:04:d7:53:3a:5b:6a:
         0a:fa:70:e5:f7:fc:10:3f:58:7f:a6:b0:9a:5a:34:ce:06:fe:
         01:d0:49:ca:aa:9b:97:16:ad:f1:d2:a4:61:d9:92:c6:e9:fc:
         df:4b:78:7a:f1:32:f4:d9:b5:f7:c7:5f:d8:32:ed:33:e9:b0:
         ff:69:bc:f5:e6:3d:b1:4a:41:d7:2c:ee:71:23:5e:9e:69:0c:
         58:2a:c5:8b:da:7d:6e:e1:2c:ba:4a:f0:70:ea:c6:5a:00:eb:
         53:4b:21:e0:65:27:ae:af:b0:a2:f3:c3:ea:5f:c3:34:7e:fc:
         69:84:b5:55:61:ae:19:8b:b9:bd:8d:45:22:a0:15:7a:30:56:
         43:d2:4e:3a:06:05:49:a6:4c:36:98:7d:8d:13:33:97:a7:ab:
         ab:58:8b:f6:ed:7d:32:e8:6b:a5:05:3b:25:75:c6:81:47:fe:
         d5:36:44:bd:a0:01:3c:7a:ad:82:d5:67:30:7b:bc:c5:8c:7a:
         d9:c8:f2:0f:8b:c0:e0:c6:e9:8a:27:8f:c2:c3:14:23:ac:1c:
         c2:1a:8a:39:93:27:eb:fe:30:d2:85:9d:74:3f:c2:27:68:65:
         5f:0b:5f:aa:2c:3e:55:8b:cc:f7:ec:a3:e5:9e:c9:f3:8e:85:
         4a:92:1d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:50:16 2026 by rpki-client