Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/80B14A70A33611F188644B746211F970.roa
File:                     80B14A70A33611F188644B746211F970.roa (raw, json)
Hash identifier:          nlY3R/ZMOLyVEcNF52UHT/oYi5mxfkCr24rlMOWjlsE=
Subject key identifier:   87:43:54:A3:F8:26:5F:6A:9F:FD:7D:5B:F5:76:7F:D8:65:73:F5:35
Certificate issuer:       /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial:       01A8
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/80B14A70A33611F188644B746211F970.roa
Signing time:             Fri 28 Aug 2026 23:16:31 +0000
ROA not before:           Fri 28 Aug 2026 23:16:31 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        64.251.192.0/21 maxlen: 24
                          64.251.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 04:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
        Validity
            Not Before: Aug 28 23:16:31 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a9216cf-910f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:7b:c7:f2:66:df:b8:18:d4:86:c0:3e:aa:
                    af:d5:26:81:e7:8e:69:a3:05:0d:7f:e8:1f:74:e9:
                    8e:76:48:52:e5:d2:b6:83:a5:4c:96:55:d2:a4:ae:
                    69:68:28:98:f3:03:ca:d1:b1:ac:e9:0a:a0:92:88:
                    bb:68:9e:2d:63:4a:2d:3a:3b:af:88:e3:46:74:f8:
                    96:6a:62:a9:aa:67:88:e3:a7:4d:a7:de:a4:d4:b1:
                    ea:1a:8c:f7:10:a5:fe:b7:03:19:5c:50:74:76:3e:
                    8e:6c:52:c9:c4:f0:7a:5b:f9:74:e9:fd:41:f3:63:
                    b5:bc:06:2f:b9:99:ee:ed:c6:15:b7:5c:51:7b:27:
                    49:50:ac:47:00:02:7a:10:12:5c:eb:59:1a:d8:63:
                    6b:fd:3d:4d:c7:6b:ae:99:7b:9d:90:5b:66:53:62:
                    98:c5:d7:2e:83:89:8b:38:01:f1:49:de:8a:35:de:
                    98:0f:f2:6f:01:f7:77:6f:85:dc:25:bb:20:63:03:
                    fa:4d:57:1e:ff:0f:ff:b4:51:9c:0c:d2:a6:87:4d:
                    b1:da:77:05:0a:19:e8:c3:01:72:93:cb:dc:87:5c:
                    9d:8e:f9:ff:6e:9b:35:12:e5:d8:de:e5:4d:33:04:
                    9f:79:41:a7:6a:11:dc:2c:a9:96:98:17:b8:99:a5:
                    07:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:43:54:A3:F8:26:5F:6A:9F:FD:7D:5B:F5:76:7F:D8:65:73:F5:35
            X509v3 Authority Key Identifier:
                keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/80B14A70A33611F188644B746211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.251.192.0/21
                  64.251.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:77:38:f6:4f:2c:f9:1a:87:6c:cd:65:15:5b:55:39:89:00:
         ed:4a:e7:fb:bf:81:4f:8a:a1:02:ee:77:a2:35:64:ad:60:36:
         45:b0:bb:a5:a5:d0:59:fb:97:45:7a:7f:66:0c:e2:5d:0c:98:
         e0:e2:46:f6:2b:4b:95:c8:3a:6c:34:61:e7:f8:5a:1f:94:88:
         7a:62:50:35:2e:00:17:90:75:84:3b:24:16:ae:7d:08:35:92:
         9c:71:3f:93:4f:0e:01:02:ec:6e:6e:e8:25:40:5c:b7:d9:ee:
         ad:f9:40:3d:9c:80:4f:54:f1:22:ff:8d:ab:8e:b8:13:49:89:
         4b:64:2d:1d:97:cd:0f:d2:eb:d3:25:68:8d:3e:62:b0:59:50:
         01:b8:07:07:de:96:a5:aa:06:23:73:b0:8a:fc:8d:ef:5d:e1:
         32:0e:0e:2f:85:50:e0:bb:ea:f7:e0:56:a1:2a:5a:ca:26:61:
         8d:b2:0d:5e:20:bf:ab:fd:3e:b0:00:4d:08:a6:18:eb:b1:b2:
         4a:a4:7e:17:2f:bf:d7:d0:af:4a:96:a1:53:f8:3f:99:c2:0b:
         e7:3b:bc:22:83:a1:c4:6d:d6:88:08:54:db:8a:41:45:9c:de:
         f0:c1:4f:97:d5:dd:d0:52:8e:08:72:23:b9:f2:53:29:5c:66:
         80:f1:98:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:49:28 2026 by rpki-client