Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/B7BA9860DB8A11F09F03163163D3641D.roa
File:                     B7BA9860DB8A11F09F03163163D3641D.roa (raw, json)
Hash identifier:          O53sGlqKt1W1OA/6Skh5fLhJK6tOZwiFqxR6V2JMvYc=
Subject key identifier:   7F:56:96:0B:49:73:23:E4:57:6A:0F:64:A1:2F:4F:0C:3A:29:8D:83
Certificate issuer:       /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial:       1E07
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/B7BA9860DB8A11F09F03163163D3641D.roa
Signing time:             Sun 01 Mar 2026 15:54:30 +0000
ROA not before:           Wed 17 Dec 2025 20:55:28 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        45.126.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7687 (0x1e07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
        Validity
            Not Before: Dec 17 20:55:28 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a46136-8637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:2b:74:48:55:7d:6d:fc:99:48:65:b9:12:
                    27:a3:cb:7c:97:c2:77:51:be:ef:3c:f6:bb:b2:9e:
                    ab:d4:53:88:75:de:1e:7c:3d:34:e3:ab:61:5b:c2:
                    21:fb:74:0f:20:05:84:4a:9e:7c:78:b4:df:fc:d7:
                    e8:92:92:46:50:77:2f:f5:5a:0e:31:5d:d2:d5:a4:
                    c8:9f:8b:9d:04:87:38:da:98:f6:24:75:b7:c0:aa:
                    32:9a:f1:b4:10:8b:d3:78:79:a5:02:27:f8:30:7b:
                    ed:71:ca:aa:86:4d:2b:4d:ab:e4:3e:47:84:0c:3e:
                    11:2f:7f:06:96:5c:56:fa:ac:57:6a:7f:25:1f:df:
                    d8:9c:4c:17:88:01:49:4f:0c:21:f7:af:dd:e5:7a:
                    82:c4:82:ca:3d:4d:73:bd:b9:84:fd:14:08:14:3c:
                    d8:ab:0e:6a:c0:d1:42:84:83:14:db:b6:2d:e1:1a:
                    d6:e9:fb:7c:dc:eb:1a:cc:93:29:a0:87:a5:7b:22:
                    c6:91:69:0d:c4:da:a4:c0:62:20:31:8e:06:9c:31:
                    08:be:69:28:a6:14:8c:d3:6a:cb:0e:63:ba:6a:7f:
                    12:42:0b:15:81:5c:07:50:af:0c:ed:5c:78:a4:8c:
                    a2:a9:55:b9:5a:82:61:11:23:ca:4d:a9:11:4c:3c:
                    a0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:56:96:0B:49:73:23:E4:57:6A:0F:64:A1:2F:4F:0C:3A:29:8D:83
            X509v3 Authority Key Identifier:
                keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/B7BA9860DB8A11F09F03163163D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:27:b3:5d:4c:a5:34:ca:1d:9c:67:d2:48:b6:cd:80:1a:19:
         e2:4f:96:7e:02:33:d3:7d:93:ea:29:47:3e:39:c2:5a:0a:75:
         c3:ef:c6:f4:1e:84:3a:40:69:9a:ce:b7:ff:91:90:23:8a:85:
         20:b6:0d:53:f9:b8:65:f6:7b:31:31:cd:43:77:96:d1:57:7b:
         73:e2:f6:24:c5:0c:68:0d:6d:dd:82:24:0b:89:29:22:f2:98:
         d1:62:7c:78:bb:cf:b1:7a:42:fb:dd:87:36:d9:40:82:d2:96:
         ff:8f:58:a1:78:50:20:5d:c6:cd:f0:f8:68:fc:b6:66:ca:24:
         26:c5:02:76:25:d7:62:13:e5:55:7e:a9:d8:2d:a3:33:8f:ef:
         f0:93:b2:17:ca:dd:a2:bb:d5:55:cd:c3:79:6b:62:30:84:d1:
         2a:3a:cc:76:9f:56:db:f8:39:b0:e4:e6:0a:79:fe:75:a5:df:
         28:40:11:4b:a9:16:8a:c9:19:88:a4:92:ae:d3:55:69:d3:1e:
         8e:5c:6f:fc:60:91:4e:ae:ee:3f:57:97:b8:f4:c4:41:32:fa:
         aa:f2:02:03:2b:3d:30:86:6d:3a:0c:87:c3:cc:6a:cc:83:f1:
         fe:12:1f:0c:32:37:1b:be:4d:e5:ea:fc:b7:b6:cf:44:e4:c3:
         9d:51:47:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:56:55 2026 by rpki-client