Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/8FEB939CD76111F1900D31393166CEF9.roa
File:                     8FEB939CD76111F1900D31393166CEF9.roa (raw, json)
Hash identifier:          dCcqcaTLpoVF9ZCJZvO5RfhUEAACTujN99lmGRgy+kk=
Subject key identifier:   E4:6D:D7:DC:55:AB:51:26:11:EE:B8:63:83:59:CF:8B:19:6F:55:46
Certificate issuer:       /CN=A91AA7E7/serialNumber=E93DDFFE3B4EAF881F29A127A226DDA3B49A0FF2
Certificate serial:       06
Authority key identifier: E9:3D:DF:FE:3B:4E:AF:88:1F:29:A1:27:A2:26:DD:A3:B4:9A:0F:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6T3f_jtOr4gfKaEnoibdo7SaD_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/8FEB939CD76111F1900D31393166CEF9.roa
Signing time:             Tue 03 Nov 2026 08:35:45 +0000
ROA not before:           Tue 03 Nov 2026 08:35:45 +0000
ROA not after:            Wed 01 Mar 2028 00:00:00 +0000
asID:                     155078
IP address blocks:        202.50.60.0/23 maxlen: 24
                          2001:df7:cdc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/6T3f_jtOr4gfKaEnoibdo7SaD_I.crl
                          rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/6T3f_jtOr4gfKaEnoibdo7SaD_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6T3f_jtOr4gfKaEnoibdo7SaD_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 09:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA7E7, serialNumber=E93DDFFE3B4EAF881F29A127A226DDA3B49A0FF2
        Validity
            Not Before: Nov  3 08:35:45 2026 GMT
            Not After : Mar  1 00:00:00 2028 GMT
        Subject: CN=6ae99ce1-2e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:90:a0:63:94:8f:68:99:ae:05:d7:83:07:
                    0a:ee:9c:ce:6a:93:ae:fb:bf:a1:95:7a:d0:5f:f0:
                    9f:a3:64:22:69:53:12:59:08:b5:98:8a:0d:a7:db:
                    23:5f:98:83:ea:4f:e6:5b:13:1f:d5:2a:5d:ec:82:
                    9b:49:f6:32:d3:d5:4e:81:a8:58:a4:14:16:08:b4:
                    94:af:b6:9c:ce:5c:d9:48:b0:75:3e:ca:15:b3:52:
                    20:c4:7b:c8:29:01:6d:a1:f9:7b:2e:2d:f0:24:e2:
                    c8:bf:a4:ea:d7:70:45:ea:c4:0e:22:e4:d5:86:ec:
                    48:c2:f0:fa:6a:0e:33:42:c1:bc:84:cc:01:59:d8:
                    20:00:d0:0f:fa:ce:bb:d2:d8:98:b5:51:fb:11:a9:
                    77:13:0a:0c:6d:6f:c0:65:27:ad:d6:c9:b6:99:18:
                    8c:5a:52:d8:9c:45:d1:e0:79:1c:47:07:54:b4:7b:
                    84:b5:1d:4e:ae:1f:ca:4b:a1:e9:bb:62:8d:92:02:
                    de:5c:19:d6:1d:f3:ca:a5:7a:c7:e7:80:d6:d4:0d:
                    02:e3:75:f9:36:77:c2:fb:4d:6c:0f:e4:a3:c2:0e:
                    eb:63:6c:66:d9:9a:04:6c:74:92:94:fb:21:9a:90:
                    b4:41:ba:ca:d4:6f:a3:d2:72:81:38:cc:b0:dc:92:
                    ef:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6D:D7:DC:55:AB:51:26:11:EE:B8:63:83:59:CF:8B:19:6F:55:46
            X509v3 Authority Key Identifier:
                keyid:E9:3D:DF:FE:3B:4E:AF:88:1F:29:A1:27:A2:26:DD:A3:B4:9A:0F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/6T3f_jtOr4gfKaEnoibdo7SaD_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6T3f_jtOr4gfKaEnoibdo7SaD_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA7E7/86F4F092D73B11F196DD949C2466CEF9/8FEB939CD76111F1900D31393166CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.60.0/23
                IPv6:
                  2001:df7:cdc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:16:81:c3:d7:1c:9e:ed:d1:87:90:91:51:7f:05:c8:6f:07:
         96:77:da:3f:a3:4a:b8:ec:a6:0e:df:65:58:8a:3e:eb:70:ce:
         f4:ad:57:83:99:8f:f2:cc:a2:4d:7f:aa:de:9f:3e:4a:5f:32:
         ee:fc:b6:f2:3d:db:a7:29:02:c9:e1:f5:a5:0f:0f:0b:6b:4c:
         85:30:13:72:b9:77:ca:eb:92:19:ed:c5:a3:7f:8d:8a:f7:f1:
         5f:64:ec:c3:67:cc:fc:c1:f8:b0:d8:a6:e7:7f:9e:57:f8:42:
         2d:ed:7e:32:d8:14:6b:4f:35:d5:09:03:be:c1:05:59:eb:3d:
         4a:f0:97:3e:e1:a8:64:63:d9:82:e0:56:e1:c2:32:b1:ac:1c:
         2d:0f:c1:5d:43:92:b9:27:95:8e:aa:10:72:4f:94:9b:bb:3c:
         c3:01:78:73:2b:04:93:cb:ae:18:fa:66:3c:1f:7a:fa:f0:94:
         f0:03:46:60:1c:ac:22:e2:e4:e1:29:34:ea:45:24:dd:b1:c5:
         b5:19:3e:5a:c3:3a:44:55:d0:01:73:cd:68:23:2d:07:9d:ac:
         0d:de:56:78:0b:d3:ac:9f:ba:61:60:2c:b9:39:49:98:f7:f9:
         f8:42:2f:92:57:c5:b8:e2:3b:c1:fd:80:fd:9a:14:f0:61:2b:
         c0:c7:df:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:41:44 2026 by rpki-client