Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/646EC532BCAD11F1BD6243F66811F970.roa
File:                     646EC532BCAD11F1BD6243F66811F970.roa (raw, json)
Hash identifier:          RDBIduz1kC6uBFi0txSvpWj/9GMShlujWFnds0JUNSM=
Subject key identifier:   AD:A9:5E:36:EA:BA:7A:B6:53:FE:76:60:92:A0:B9:9C:D3:B0:49:2B
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E16
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/646EC532BCAD11F1BD6243F66811F970.roa
Signing time:             Fri 02 Oct 2026 15:27:08 +0000
ROA not before:           Fri 02 Oct 2026 15:27:08 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149044
IP address blocks:        163.52.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28182 (0x6e16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:27:08 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcd4c-bc82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:3c:a9:71:20:59:c7:17:33:71:3c:66:a4:
                    41:a3:bc:1c:09:1e:82:bd:29:17:00:bb:51:3f:bc:
                    2f:a2:9f:73:96:70:88:07:9e:4d:83:2f:a7:4f:d8:
                    e1:0d:40:f9:80:4b:58:ac:70:6e:52:46:9a:2e:ad:
                    ea:28:66:3a:ec:51:29:c7:b9:0a:2a:86:35:de:a0:
                    4c:b8:6e:71:1b:7b:e2:e0:78:ae:48:17:92:5a:db:
                    b0:20:85:cc:72:eb:cb:eb:4a:df:12:9a:dd:8d:3e:
                    f2:3b:09:ef:18:23:be:2d:47:88:3a:0f:68:6e:7a:
                    4f:11:28:d3:b4:ec:08:0f:67:08:e1:c8:50:5f:f9:
                    ed:8e:87:0c:e5:19:3f:81:0a:14:ac:b8:ff:14:58:
                    12:fd:b6:6e:4f:ef:59:3c:19:30:85:3b:2a:69:2b:
                    66:a8:fc:81:c6:31:0f:ed:2a:91:9e:6d:41:ea:31:
                    fa:22:5a:a2:cb:fe:dd:2a:9f:a7:88:b4:9b:f6:11:
                    bb:c1:7b:9b:4b:79:d3:8d:a6:0e:49:a3:bf:7f:4e:
                    7b:d6:81:a9:f6:7d:a7:dc:81:7d:e9:e8:3d:b5:8f:
                    2b:3c:68:29:28:ea:fe:9f:d4:88:d5:17:0e:83:67:
                    eb:e9:02:95:34:16:bf:c9:94:02:c4:12:a6:54:6f:
                    55:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A9:5E:36:EA:BA:7A:B6:53:FE:76:60:92:A0:B9:9C:D3:B0:49:2B
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/646EC532BCAD11F1BD6243F66811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:e8:10:1e:14:69:be:b6:d2:55:54:03:cc:a4:13:5f:b2:96:
         98:71:dc:15:4d:28:7a:6c:05:3e:b3:56:9b:d1:fb:59:92:42:
         f4:c2:57:92:2c:18:c5:24:da:18:a2:2c:79:ed:53:3b:2e:2a:
         67:76:d7:0b:48:3c:46:10:5b:75:9c:9b:ef:21:04:0c:9e:f1:
         37:8c:1f:a5:50:7d:08:e8:6c:6f:43:46:98:2d:b3:9a:67:0f:
         77:f5:06:4d:2f:87:0a:3f:a2:a8:d8:5b:d0:82:2d:24:10:1f:
         b8:6f:1a:b4:3a:df:40:6f:ba:8d:af:a2:30:b6:35:95:c0:a9:
         37:97:84:80:df:2d:00:70:4c:ce:82:3e:a1:19:a7:1f:66:f1:
         d5:80:39:88:78:3e:86:05:af:d3:4b:0d:4c:d5:d1:3a:5f:cd:
         b2:30:cf:c2:f8:e0:6b:0c:6b:ad:27:4d:1d:18:e2:d6:8a:e8:
         ad:09:62:6f:a5:0a:1e:4f:dc:7c:dc:aa:84:80:da:b8:54:cd:
         f1:9a:9f:0e:94:b3:47:95:87:16:9f:4a:86:7f:c0:d0:98:51:
         5a:fd:00:a6:d7:54:86:84:28:02:ba:93:b5:92:8c:c6:ea:bc:
         bd:d8:59:22:dc:f2:29:64:0e:a2:b8:52:2f:6b:10:be:a1:03:
         d7:c4:64:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:41:24 2026 by rpki-client