Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/F7D60C96704E11F1B5CFE2966BA30FBC.roa
File:                     F7D60C96704E11F1B5CFE2966BA30FBC.roa (raw, json)
Hash identifier:          oe1vgnkyb8CIvEZMzZ+MkkXvbRPonUbDGMWaOrr0Ioc=
Subject key identifier:   42:E6:F2:A4:61:CD:00:11:1A:65:EB:48:98:31:F6:84:02:EA:6F:C2
Certificate issuer:       /CN=A91CCCF4/serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED
Certificate serial:       6D
Authority key identifier: AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/F7D60C96704E11F1B5CFE2966BA30FBC.roa
Signing time:             Thu 25 Jun 2026 04:33:09 +0000
ROA not before:           Thu 25 Jun 2026 04:33:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38881
IP address blocks:        210.55.2.0/24 maxlen: 24
                          210.55.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl
                          rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCCF4, serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED
        Validity
            Not Before: Jun 25 04:33:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a3caf85-e513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:2a:e5:00:08:47:43:97:82:b1:52:c7:9f:
                    74:8d:e6:cc:73:33:66:86:c6:88:04:9f:72:27:36:
                    48:0c:80:57:f7:2f:db:e3:b9:4f:b7:10:8e:6b:bf:
                    2d:7d:5c:91:c4:39:e6:81:de:45:85:73:41:ed:56:
                    9d:f8:dc:7e:37:1a:f6:d4:6d:26:85:4f:76:57:8b:
                    b0:64:4d:0f:6f:c7:25:8b:be:79:e4:c3:d9:0b:e7:
                    58:45:57:7a:b7:8d:2b:04:74:77:ac:be:5f:0a:16:
                    7a:8c:ff:68:91:38:db:ab:1f:7b:aa:f5:ac:95:37:
                    ae:2a:a8:e8:27:ea:34:49:00:ca:9c:87:9a:d3:d3:
                    3a:d0:78:7d:11:46:27:c0:4d:35:4d:ad:80:21:6a:
                    60:ed:db:04:f9:cc:1e:ad:32:7d:ec:e0:87:f3:46:
                    50:d4:c8:4c:ee:ea:6d:2c:13:f4:91:dd:9d:7d:b3:
                    fc:8c:00:67:e4:20:d6:fe:df:c0:28:31:b1:92:62:
                    cb:92:e6:ea:da:28:f9:f8:d5:9b:24:03:5b:b1:e4:
                    a0:42:9c:b0:fd:74:63:af:09:0d:d7:0b:bf:91:7a:
                    51:36:f9:14:b2:d9:de:52:60:f0:b6:89:87:cf:36:
                    c9:c3:d1:0d:66:40:b3:a2:5f:e9:c3:ea:f9:d9:aa:
                    4b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E6:F2:A4:61:CD:00:11:1A:65:EB:48:98:31:F6:84:02:EA:6F:C2
            X509v3 Authority Key Identifier:
                keyid:AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/F7D60C96704E11F1B5CFE2966BA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.55.2.0/24
                  210.55.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:2f:cd:05:14:57:db:8f:77:bf:a4:38:19:c2:03:4b:67:c8:
         22:f3:7e:4b:06:ef:a0:ef:b0:91:e3:f8:f6:eb:cd:e5:f4:5e:
         81:61:23:ce:fc:69:fb:69:d6:7d:22:22:1c:86:2a:0a:08:96:
         19:44:e6:85:d4:52:43:88:2c:6c:9a:7d:f1:d6:39:f0:ca:14:
         a2:f9:cd:4f:ba:94:c8:97:b8:36:87:ac:6c:03:16:41:1d:4a:
         8f:46:5e:f2:d2:f4:4c:3e:16:08:f9:26:eb:eb:41:6c:51:19:
         9d:e8:f7:17:00:75:d8:09:e5:60:b0:83:8e:f1:0b:09:b3:25:
         e3:48:4c:38:1f:b8:4c:1a:f1:f6:b4:2e:fa:28:a4:71:3e:9d:
         03:9a:4b:91:b7:e0:83:c4:2c:c3:26:44:d9:dc:68:ba:e1:02:
         e5:13:f7:c6:78:e0:4b:f9:d8:5e:4d:05:6e:10:ef:fa:95:b8:
         97:ef:5a:cd:60:d7:bb:2f:8e:3a:78:a8:cc:fc:65:27:73:97:
         b7:0a:de:6e:c2:04:09:b7:63:89:e4:14:db:69:ee:8f:15:a6:
         cd:20:82:81:56:13:7e:2a:b2:3f:ae:59:d6:ad:83:c1:b8:cb:
         dc:1a:85:29:2a:b4:b5:8f:65:7c:ae:85:f9:b7:a9:bd:e8:5c:
         fd:c5:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:23:51 2026 by rpki-client