Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/B8BE560A4A1311F1B8639EABC7833773.roa
File:                     B8BE560A4A1311F1B8639EABC7833773.roa (raw, json)
Hash identifier:          0shpOtzz25Mvg5oIuXMAte2E3hh2gNHtDigSWNBabd4=
Subject key identifier:   1F:46:A5:1B:0A:70:55:84:E4:F6:33:EF:71:FA:55:1A:35:EC:43:46
Certificate issuer:       /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial:       060F
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/B8BE560A4A1311F1B8639EABC7833773.roa
Signing time:             Thu 07 May 2026 12:53:19 +0000
ROA not before:           Thu 07 May 2026 12:53:19 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        117.55.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
        Validity
            Not Before: May  7 12:53:19 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69fc8b3f-3a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b6:6c:3b:19:88:7e:db:df:df:97:6e:88:17:
                    c7:3c:ca:97:ef:d8:34:dc:39:09:f9:9c:49:59:8d:
                    10:f8:07:f7:d8:5e:23:5e:51:de:4d:08:8e:af:8a:
                    ab:6e:3c:a3:37:5f:ef:9e:aa:69:4d:95:04:3f:61:
                    74:1b:6e:fd:bc:93:7a:48:28:09:8a:03:03:a8:e0:
                    cc:13:8d:2f:f3:04:be:76:6d:60:3f:f0:ab:d1:fe:
                    5f:bb:70:11:53:89:8d:48:f5:7e:54:d5:4d:66:78:
                    1b:93:4c:a3:52:fa:f6:b9:0d:3f:c6:39:62:22:66:
                    c3:8e:31:fa:a7:62:05:18:4a:1d:a8:84:b6:61:50:
                    77:55:95:0e:ac:84:70:98:ca:54:c7:66:44:5d:30:
                    09:ed:05:f6:8f:12:09:b3:0f:d7:83:3f:77:ce:3a:
                    02:7a:4f:17:5d:14:39:e3:98:2d:54:67:10:25:34:
                    aa:ba:54:7e:61:4b:bc:96:5f:be:db:f8:15:5d:ae:
                    df:0f:8d:8b:1d:e3:f5:f4:6e:0e:b2:d7:6e:fe:3d:
                    65:ad:c2:39:97:ef:4f:55:0f:29:d9:21:81:0e:b3:
                    07:47:6a:95:cc:fd:53:63:d5:a8:09:fc:ac:9f:97:
                    13:39:01:4b:cd:11:3f:14:ff:78:b6:40:8a:ec:56:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:46:A5:1B:0A:70:55:84:E4:F6:33:EF:71:FA:55:1A:35:EC:43:46
            X509v3 Authority Key Identifier:
                keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/B8BE560A4A1311F1B8639EABC7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.55.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:86:56:f6:28:89:e2:b2:38:24:bb:af:12:bb:00:6a:1c:
         47:31:9b:77:75:af:0c:5d:09:4b:59:63:50:05:6a:1f:3d:a7:
         19:9e:49:1f:db:6b:cb:93:74:56:4c:07:ea:50:bc:b5:44:60:
         23:be:ee:64:2a:c5:ae:be:66:df:36:62:2e:c8:e8:10:dc:04:
         31:64:8b:55:33:88:7e:59:a2:00:f1:34:f3:d2:28:44:f8:21:
         57:a2:a6:1c:98:ce:36:14:7d:b5:ba:90:f6:33:99:a1:61:46:
         82:6f:ae:7a:5e:08:ec:9d:5a:a7:74:13:e9:74:e5:19:56:1a:
         78:f6:4c:80:ed:1d:7b:1c:f4:bf:29:85:6b:35:b7:bb:ff:49:
         a1:87:6d:2e:8d:bc:cf:75:af:ec:18:7c:21:a2:4a:2e:87:4b:
         4c:b9:f3:62:53:d3:e7:88:b1:1e:7b:76:0f:a0:e7:73:20:33:
         40:64:44:6b:2e:3c:27:ca:e8:df:ce:2e:d7:e5:22:ef:9a:64:
         be:c4:eb:74:05:b7:81:20:13:4f:3a:d1:14:c8:99:70:71:ec:
         17:e9:07:7d:34:d2:da:ee:dd:8d:6b:0e:b6:d1:a2:5a:b8:d0:
         2f:64:d6:6f:8c:27:a0:8e:11:c8:8e:c6:c0:6a:cb:ac:04:e7:
         30:6d:4c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:18:31 2026 by rpki-client