Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A1366892BB2411F1B871EC5D6911F970.roa
File:                     A1366892BB2411F1B871EC5D6911F970.roa (raw, json)
Hash identifier:          La8ELqkqya9LQDJ+XcYpYbrqjsgNkI4L77M3LxPEreA=
Subject key identifier:   7E:74:23:90:A0:0A:78:52:9F:99:7E:7E:30:B4:15:99:5A:65:F9:D0
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E17
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A1366892BB2411F1B871EC5D6911F970.roa
Signing time:             Fri 02 Oct 2026 15:27:10 +0000
ROA not before:           Fri 02 Oct 2026 15:27:10 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149046
IP address blocks:        163.52.139.0/24 maxlen: 24
                          2001:df7:7ac0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28183 (0x6e17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:27:10 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcd4e-1f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:66:ce:98:0c:b2:44:18:49:42:94:82:b8:
                    31:04:60:b9:68:43:08:bc:3a:b9:64:16:60:3c:92:
                    cb:bf:d6:16:c0:74:14:6f:ec:d5:4c:a6:a2:3b:4e:
                    60:91:ef:92:e4:e0:32:74:80:2b:50:12:40:37:c2:
                    b4:86:e8:17:1a:2b:f6:46:73:78:cc:be:af:7e:c6:
                    5c:6f:17:ae:d8:a5:bf:d8:30:43:aa:ac:82:1f:81:
                    8b:ac:c7:63:84:e2:96:b0:23:aa:bc:27:1c:f1:66:
                    29:39:09:96:9e:99:48:6b:85:6c:3f:b5:6e:8f:47:
                    83:b4:22:10:7b:22:6f:31:ed:38:c4:86:d1:2e:11:
                    3d:0e:72:18:1d:04:49:fd:b9:f5:ec:02:1e:22:7a:
                    17:24:b6:81:85:67:45:35:b3:34:96:ae:78:7b:a6:
                    62:ad:4e:3b:02:38:95:75:6a:a5:0d:e2:66:f9:8a:
                    b0:60:47:c0:25:0b:aa:01:c5:7c:e6:5e:6d:b1:38:
                    7d:65:fc:ca:8b:2f:1f:b0:60:f3:a4:75:11:00:7a:
                    19:1a:a9:b7:c3:b1:be:8e:68:a5:60:e7:30:07:8c:
                    13:23:9a:8e:d4:ad:20:ea:11:c1:4b:78:07:cd:da:
                    0f:dc:71:9d:43:95:97:49:e2:3a:77:08:dd:b9:2c:
                    35:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:74:23:90:A0:0A:78:52:9F:99:7E:7E:30:B4:15:99:5A:65:F9:D0
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A1366892BB2411F1B871EC5D6911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.139.0/24
                IPv6:
                  2001:df7:7ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:2d:18:fc:ec:a9:7a:89:46:3f:21:23:15:fb:e4:c8:75:97:
         80:f8:a7:cf:ef:29:89:6b:be:5a:ba:c7:b9:76:65:c0:5b:7c:
         46:9e:0c:d5:1b:b8:04:8d:e1:22:39:fd:1d:e6:39:d5:af:40:
         e5:4f:75:67:59:d6:d7:00:f0:e1:c3:f6:2a:20:84:49:ee:92:
         7c:b9:64:42:98:cd:1a:54:33:51:32:24:d0:bc:d9:79:f2:30:
         71:1f:fb:03:0a:30:30:29:99:c9:09:b2:2f:00:85:1d:75:1d:
         f2:f2:82:cd:28:89:ab:5d:b9:25:ee:27:2e:01:06:2a:1c:d0:
         d0:79:81:2c:3f:c3:85:01:e0:61:f9:ff:4a:d0:97:73:9e:b6:
         e9:2a:48:42:46:4f:ca:38:bd:c5:07:37:8c:6d:e9:71:d3:e4:
         a9:3b:45:a1:49:25:d4:97:89:10:c6:84:a2:03:48:15:bf:3d:
         fe:9d:e2:d2:bd:26:d0:ce:93:7e:c4:d5:9e:29:47:10:90:32:
         9a:13:91:1b:f8:12:c6:38:ff:1d:72:13:19:c4:bc:1d:d0:34:
         93:e0:4d:fc:49:52:d2:4e:19:94:64:c6:a0:6c:d5:fe:a5:4e:
         18:26:96:ad:28:91:bb:30:c4:e0:9e:cd:3e:8e:20:80:de:5e:
         24:ec:bf:28
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICbhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyNzEwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2Q0ZS0xZjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtYtmzpgMskQYSUKUgrgxBGC5aEMIvDq5ZBZgPJLLv9YWwHQUb+zVTKaiO05g
ke+S5OAydIArUBJAN8K0hugXGiv2RnN4zL6vfsZcbxeu2KW/2DBDqqyCH4GLrMdj
hOKWsCOqvCcc8WYpOQmWnplIa4VsP7Vuj0eDtCIQeyJvMe04xIbRLhE9DnIYHQRJ
/bn17AIeInoXJLaBhWdFNbM0lq54e6ZirU47AjiVdWqlDeJm+YqwYEfAJQuqAcV8
5l5tsTh9ZfzKiy8fsGDzpHURAHoZGqm3w7G+jmilYOcwB4wTI5qO1K0g6hHBS3gH
zdoP3HGdQ5WXSeI6dwjduSw1UQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFH50I5Cg
CnhSn5l+fjC0FZlaZfnQMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTEzNjY4OTJC
QjI0MTFGMUI4NzFFQzVENjkxMUY5NzAucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAozSLMA8EAgACMAkDBwAgAQ33esAwDQYJKoZIhvcNAQELBQADggEB
AD8tGPzsqXqJRj8hIxX75Mh1l4D4p8/vKYlrvlq6x7l2ZcBbfEaeDNUbuASN4SI5
/R3mOdWvQOVPdWdZ1tcA8OHD9ioghEnukny5ZEKYzRpUM1EyJNC82XnyMHEf+wMK
MDApmckJsi8AhR11HfLygs0oiatduSXuJy4BBioc0NB5gSw/w4UB4GH5/0rQl3Oe
tukqSEJGT8o4vcUHN4xt6XHT5Kk7RaFJJdSXiRDGhKIDSBW/Pf6d4tK9JtDOk37E
1Z4pRxCQMpoTkRv4EsY4/x1yExnEvB3QNJPgTfxJUtJOGZRkxqBs1f6lThgmlq0o
kbswxOCezT6OIIDeXiTsvyg=
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:41:37 2026 by rpki-client