Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/666C21CA29C011F1A3F09FCF91833773.roa
File:                     666C21CA29C011F1A3F09FCF91833773.roa (raw, json)
Hash identifier:          R/g3k5D9oKLbcYrSfdUWVh7n1eRtnbw0+zncu1mfi20=
Subject key identifier:   10:4D:09:0E:66:4F:12:83:94:23:68:6F:85:57:FB:86:79:F2:02:1C
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       05
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/666C21CA29C011F1A3F09FCF91833773.roa
Signing time:             Fri 27 Mar 2026 09:36:16 +0000
ROA not before:           Fri 27 Mar 2026 09:36:16 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     16552
IP address blocks:        63.219.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 17:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Mar 27 09:36:16 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69c64f8f-7424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:ea:a7:93:7d:66:18:04:f8:51:64:f7:ec:
                    f9:e4:a3:40:6c:a9:16:f5:16:29:b2:88:46:ea:ff:
                    b0:94:68:cd:83:1e:32:f8:8a:70:e0:8d:b5:63:31:
                    16:34:81:40:9e:59:7b:20:4f:5a:98:98:f9:34:c8:
                    a8:c2:8f:12:40:05:2f:ae:6f:64:f7:c5:87:d7:e1:
                    fa:09:28:45:83:1b:50:4e:b1:63:a9:a1:0a:33:29:
                    06:de:7d:6d:60:ed:fc:d8:71:56:fb:a1:fa:b5:81:
                    d0:42:8e:71:0a:4c:3f:8f:5e:e1:e1:e6:8c:09:1a:
                    f0:7a:dc:c7:ad:d7:bb:61:76:e5:a2:de:7a:31:4e:
                    6d:24:2a:41:01:36:b3:2f:65:75:a1:16:e2:4c:c4:
                    52:6d:3c:bd:75:49:8f:4a:ab:eb:98:19:39:5e:0b:
                    e3:1f:c7:99:73:a7:a1:2d:7f:30:b2:3a:1a:95:88:
                    ba:81:ad:ff:dc:51:c6:87:7c:19:40:60:53:a8:89:
                    44:3f:04:66:0e:8d:b7:2f:bf:1b:1c:0d:a4:30:65:
                    82:63:78:65:7a:db:a2:d8:89:9b:53:71:ed:97:e0:
                    2b:f8:87:05:4f:7e:c7:b0:f4:b5:6d:88:8a:e3:64:
                    df:44:5e:0d:ed:ff:53:1b:80:83:fd:6d:96:ac:82:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4D:09:0E:66:4F:12:83:94:23:68:6F:85:57:FB:86:79:F2:02:1C
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/666C21CA29C011F1A3F09FCF91833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.219.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:23:be:cc:e6:85:1e:00:10:47:9c:c0:6c:82:1a:f1:55:51:
         e1:64:d6:e8:e9:38:17:42:39:60:13:34:5a:05:03:bf:03:0b:
         d1:1a:17:ab:2f:68:48:ee:97:c7:75:bf:b3:fe:3f:bd:c5:a2:
         ca:31:b4:ac:75:e0:2e:96:2f:6b:81:21:c3:d2:90:d7:f6:91:
         60:60:72:75:0c:be:7d:44:cc:f6:91:41:e3:7b:50:24:61:12:
         05:f8:92:1e:67:23:66:1b:0d:dc:34:76:4c:3f:2d:7e:12:fb:
         3b:b6:c6:64:f2:57:5e:a3:4f:8b:0a:32:48:71:22:b1:34:bd:
         38:4f:2f:cb:4c:54:7e:6c:c2:dc:b6:f0:8d:ee:99:83:00:04:
         c7:79:0f:83:08:28:ae:6a:ae:c3:ca:28:4a:21:f6:00:95:5c:
         d6:94:f2:24:71:12:7c:80:33:70:32:ff:da:77:bf:d2:03:1d:
         40:fb:34:1d:84:fa:c1:d7:c4:d0:7a:c6:00:d0:81:3a:62:0c:
         1f:e3:a2:29:de:59:02:19:e3:3a:96:0c:4b:28:2f:1e:bb:a9:
         a3:4f:e9:e9:1a:9b:48:1d:f9:ea:7a:9a:2c:54:79:56:64:c5:
         bf:91:4f:98:70:05:8e:1e:96:f2:9d:cf:b0:89:fb:c7:06:97:
         15:f8:bb:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 28 18:58:25 2026 by rpki-client