Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/E1B6596E447211F188990C259B833773.roa
File:                     E1B6596E447211F188990C259B833773.roa (raw, json)
Hash identifier:          BoVkQomFICNHToymCepXWBK1nByXGDPh9ZzxCYs1+HY=
Subject key identifier:   21:83:C0:CB:F4:A6:1D:80:43:95:6D:A9:30:9B:B9:3B:8A:E1:B9:CA
Certificate issuer:       /CN=A91C9F00/serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E
Certificate serial:       16
Authority key identifier: A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/E1B6596E447211F188990C259B833773.roa
Signing time:             Thu 30 Apr 2026 08:59:38 +0000
ROA not before:           Thu 30 Apr 2026 08:59:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216211
IP address blocks:        163.128.98.0/23 maxlen: 24
                          2402:5260::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl
                          rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 09:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9F00, serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E
        Validity
            Not Before: Apr 30 08:59:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f319fa-6ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:58:9b:be:c0:42:cf:8a:06:10:ae:e8:5d:21:
                    96:14:09:9c:a7:1e:ee:11:0b:76:05:44:d8:79:09:
                    ea:8a:1f:59:9d:6f:3c:eb:c5:1a:d1:e0:12:3a:2a:
                    92:25:2c:78:3e:b0:1d:ae:2b:72:c3:b1:af:93:82:
                    31:e0:00:57:20:ff:f1:46:c4:93:86:cd:14:47:96:
                    88:e8:a5:9b:43:51:b7:9a:12:d2:f8:ab:55:4b:17:
                    c2:90:63:2d:ca:d9:8c:86:ff:e9:64:5e:9c:9a:78:
                    b6:b2:59:f6:8e:e4:fe:ca:bc:34:13:5c:1d:8f:8f:
                    77:28:5d:19:d4:a4:8a:04:45:ee:c4:df:31:71:c5:
                    59:49:44:ad:5d:04:5c:70:b1:12:0d:94:39:be:25:
                    06:b5:37:ab:85:9a:18:98:60:7d:6b:69:2c:e2:ef:
                    39:6f:48:3d:61:7e:7a:f1:35:fd:89:a8:23:f0:8f:
                    63:97:ec:4d:ed:c7:49:ed:5f:88:75:6e:d4:47:b8:
                    b0:1c:9f:4b:5e:99:51:36:58:e3:54:44:9c:94:a4:
                    f1:26:76:ef:64:9a:f0:ed:54:89:e4:75:74:b3:8e:
                    2e:ba:54:78:fe:25:51:83:22:d5:95:ac:f7:46:57:
                    9d:8d:41:eb:b2:0c:38:19:59:01:45:25:9f:8c:06:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:83:C0:CB:F4:A6:1D:80:43:95:6D:A9:30:9B:B9:3B:8A:E1:B9:CA
            X509v3 Authority Key Identifier:
                keyid:A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/E1B6596E447211F188990C259B833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.98.0/23
                IPv6:
                  2402:5260::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:2d:0b:6f:a7:5d:29:ec:4e:5e:af:75:44:95:23:04:af:ed:
         9d:12:de:1f:1d:84:38:97:64:4a:83:51:e5:79:c5:c7:f1:87:
         bf:cc:53:cf:ac:a3:72:1e:2a:f4:d8:9a:07:75:23:17:e7:7e:
         15:37:cc:7c:06:fc:f1:da:3e:b6:fa:20:3f:68:87:3e:ef:48:
         fe:33:59:e4:7a:44:1a:31:ad:98:8f:73:f3:18:94:7a:e7:52:
         b8:25:60:53:71:56:91:86:48:d3:6e:58:cf:f1:e7:d6:a9:e8:
         39:2c:4d:a3:f6:b1:b5:cc:02:4a:77:8b:8a:19:e2:40:55:33:
         dd:9a:99:83:d7:73:fe:1d:45:85:ce:29:3d:cd:3d:ee:f7:21:
         3a:0d:86:0e:5f:d0:cf:4c:c9:d7:dd:51:6d:f2:ef:54:d3:3d:
         0b:0c:90:29:59:57:98:d4:dc:45:77:5f:7c:1a:89:21:75:6b:
         67:c8:d5:9a:ef:2c:e7:3b:37:6b:b2:98:c0:08:b0:35:ca:7b:
         2d:ea:dd:16:51:56:d5:61:8a:4a:46:38:a1:2a:3b:2d:4d:83:
         45:ad:05:c8:29:69:9f:fa:ae:45:8b:e8:65:57:0c:73:fb:a4:
         28:75:9f:88:6d:78:bb:bc:1f:4a:c3:2c:fa:ed:0d:0c:5f:b4:
         8c:63:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:24:01 2026 by rpki-client