Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/BCB00D18AA3411F199884E135211F970.roa
File:                     BCB00D18AA3411F199884E135211F970.roa (raw, json)
Hash identifier:          ioGTh9GFvQ4kQHCP2Gi/w+boq7++x3V3C4G94SC7Uro=
Subject key identifier:   69:36:05:15:4A:78:D6:84:94:7D:F8:78:A6:1D:00:DC:99:66:2B:12
Certificate issuer:       /CN=A91A6D85/serialNumber=8B17C26151F1141D69C15834B44E18EB1867FE3B
Certificate serial:       05
Authority key identifier: 8B:17:C2:61:51:F1:14:1D:69:C1:58:34:B4:4E:18:EB:18:67:FE:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/BCB00D18AA3411F199884E135211F970.roa
Signing time:             Sun 06 Sep 2026 20:51:31 +0000
ROA not before:           Sun 06 Sep 2026 20:51:31 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     152586
IP address blocks:        163.52.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl
                          rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6D85, serialNumber=8B17C26151F1141D69C15834B44E18EB1867FE3B
        Validity
            Not Before: Sep  6 20:51:31 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9dd252-ad53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f2:c5:0b:99:d0:df:39:7d:c2:e3:21:2b:2f:
                    f6:9d:6f:c4:0a:40:67:cd:a0:67:a1:84:89:85:f8:
                    7d:10:8f:46:46:dd:41:44:d2:7f:7f:3c:3b:38:50:
                    ca:58:fd:0e:9f:48:f2:a0:36:26:01:bf:72:6d:2d:
                    a8:e2:19:5b:ef:d0:eb:27:9e:38:7a:52:e0:f7:9f:
                    69:e9:ba:dc:15:80:01:64:eb:40:b8:63:54:16:5d:
                    a1:20:dc:55:62:54:dd:6b:c1:75:f7:56:3e:3d:e2:
                    a8:7b:8b:92:6a:2e:2c:d6:0a:cf:de:a5:4b:01:51:
                    b8:d5:ae:9f:57:3f:a4:da:14:f8:26:a7:bd:e4:3a:
                    8e:1c:e6:d4:53:4c:79:da:df:58:20:6a:94:79:1e:
                    fa:a6:8e:23:d6:22:39:85:1b:18:c4:b9:da:11:bb:
                    a5:ab:16:f2:d1:22:89:22:0d:ed:c9:0a:07:24:c0:
                    7d:9e:ee:6a:1e:8d:fc:d0:23:65:26:85:29:ae:5b:
                    e3:b9:45:6c:67:f7:32:fd:bc:46:b6:bc:ec:ec:e3:
                    70:80:da:6d:9f:a6:a4:8f:b3:c7:6c:ad:64:da:8a:
                    74:74:24:45:a4:40:87:f5:47:8b:e9:d2:5b:02:03:
                    9d:2d:27:cb:97:85:a6:70:54:55:dd:a3:02:02:04:
                    93:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:36:05:15:4A:78:D6:84:94:7D:F8:78:A6:1D:00:DC:99:66:2B:12
            X509v3 Authority Key Identifier:
                keyid:8B:17:C2:61:51:F1:14:1D:69:C1:58:34:B4:4E:18:EB:18:67:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/BCB00D18AA3411F199884E135211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:39:f9:ea:4d:e7:dc:f8:4c:d7:eb:77:14:36:6c:9d:79:65:
         7e:95:06:f3:d3:04:5a:67:25:18:8b:b8:25:53:7d:94:af:3a:
         b4:ba:bb:56:66:ab:db:97:dc:1b:9a:02:ae:a6:e8:35:19:ae:
         ad:87:53:fc:21:14:27:c3:cb:35:35:54:43:14:c5:2f:5e:78:
         29:2d:fe:72:a8:37:08:d7:87:3a:19:01:65:08:25:32:ef:a9:
         db:60:f7:e8:49:80:11:85:a0:d7:b3:8c:c3:8b:28:5a:32:6a:
         6d:e6:1d:ba:4c:38:8b:a3:5a:59:e2:a8:e8:cc:0a:54:cd:3d:
         74:71:12:b0:eb:a0:78:98:bc:0c:6d:5d:54:82:49:02:3b:d1:
         5a:ad:d9:11:c6:e7:df:37:41:91:28:44:ee:70:94:c3:c9:d7:
         f4:81:d6:3a:62:c2:2e:73:8d:3c:9a:03:97:d3:1d:42:7f:77:
         e7:d8:cf:b4:46:25:c9:2b:7b:f7:19:1c:5f:24:58:f0:9e:63:
         68:1b:7e:91:67:0b:75:78:c9:2c:bf:61:58:eb:3a:71:3f:64:
         8e:94:dc:19:e7:1a:20:24:3c:23:72:98:08:6d:21:2c:8d:fd:
         3f:d8:e8:e8:c7:65:40:8c:a3:1d:d4:97:3a:8d:31:fc:5f:10:
         83:21:26:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:49:05 2026 by rpki-client