Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/B66F0C58817111EFB121970CC4F9AE02.roa
File:                     B66F0C58817111EFB121970CC4F9AE02.roa (raw, json)
Hash identifier:          ouZu/jn5ZKmwfIcE3ghEaFkVLB6My1iKKzR3gtO189k=
Subject key identifier:   53:93:8E:73:18:22:C1:F8:D3:70:08:32:AF:35:65:6E:7B:AC:F6:F1
Certificate issuer:       /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Certificate serial:       0C4B
Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/B66F0C58817111EFB121970CC4F9AE02.roa
Signing time:             Fri 10 Jul 2026 20:20:22 +0000
ROA not before:           Fri 10 Jul 2026 20:20:22 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     137840
IP address blocks:        2404:4f02::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
                          rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3147 (0xc4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF
        Validity
            Not Before: Jul 10 20:20:22 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a515406-a58e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:b5:37:50:04:01:fa:9d:39:da:20:92:c1:
                    ff:75:0b:3c:2d:23:85:6c:4b:d5:27:48:95:d9:47:
                    e4:08:64:31:03:1a:31:f1:49:25:dd:b1:8e:64:42:
                    1d:23:9c:92:3f:41:9f:36:c3:09:d0:ee:2d:c7:06:
                    da:ca:61:5b:09:8a:02:6e:68:86:c7:01:a1:3f:78:
                    c4:0b:e1:53:11:fb:65:5d:d1:82:15:c5:fe:e2:d6:
                    dd:85:6f:3e:2d:08:2a:f0:d4:07:f2:63:5b:d9:6d:
                    fd:89:ee:52:a7:43:ed:9e:59:94:23:df:4c:c9:3b:
                    88:6c:0b:d8:c2:40:ec:39:97:85:39:11:11:bd:48:
                    f1:5e:ce:54:4f:1f:ef:ed:c3:88:70:f0:cb:3c:63:
                    87:de:8b:cf:34:cb:08:cc:41:a3:e6:46:21:a7:33:
                    2c:37:38:17:2f:88:bb:7e:2f:30:13:13:55:ec:33:
                    60:fe:4a:bc:13:04:b4:31:7d:09:42:e8:9d:5c:b6:
                    d4:d7:88:03:47:c0:91:69:1d:31:3f:0b:32:12:12:
                    5b:70:2e:e4:5e:25:2e:42:8d:cc:5a:cf:e7:d3:27:
                    f9:cf:e2:77:c9:38:3f:dd:26:7c:f9:78:59:64:80:
                    de:43:27:50:bd:23:be:2e:22:c9:db:18:3f:30:5b:
                    e3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:93:8E:73:18:22:C1:F8:D3:70:08:32:AF:35:65:6E:7B:AC:F6:F1
            X509v3 Authority Key Identifier:
                keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/B66F0C58817111EFB121970CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:4f02::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:1c:3d:a4:13:84:20:97:0a:91:88:47:cc:09:a8:ba:f0:2e:
         e4:40:37:7d:c0:e9:61:68:80:57:06:77:95:55:b6:23:b9:20:
         6d:3b:da:71:af:38:4b:b4:18:64:d4:f4:17:4a:b9:c3:1d:00:
         1c:fd:3b:19:17:65:92:27:42:dd:3f:ae:10:33:8b:d1:21:51:
         4a:9d:d5:9f:5d:54:77:63:97:2b:a7:a2:bd:4a:2f:17:97:12:
         df:5c:a1:04:f5:45:06:f4:26:48:05:19:2f:69:8e:19:e4:b4:
         97:0b:80:13:3c:e2:10:41:f5:d3:34:ef:e0:c9:26:43:64:dc:
         de:a5:8d:7e:47:f7:06:2e:04:2d:14:66:a9:95:0e:15:cc:ca:
         2f:68:58:7d:47:41:b0:ee:68:0b:e2:5b:5b:c5:2c:a1:9f:10:
         10:f0:fc:ce:e0:bd:06:97:58:52:06:a2:2e:68:43:5c:4e:84:
         2d:d6:e9:e9:85:d2:18:00:8b:c8:01:3e:21:3c:7d:d7:e0:c8:
         f4:8a:2a:70:af:20:00:6a:6d:9d:91:08:fc:27:92:c8:6e:5c:
         2f:a8:55:94:89:b7:0b:02:43:5c:3f:65:f3:03:cc:5e:dc:20:
         62:01:f8:21:d8:2a:6a:15:d5:cf:ec:d8:2b:87:c8:71:6a:77:
         d3:40:b3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:54:13 2026 by rpki-client