Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/C6EF2736B23C11F196D963B56111F970.roa
File:                     C6EF2736B23C11F196D963B56111F970.roa (raw, json)
Hash identifier:          7Vzu1+cRluQVIi2fLurDSzXT17iGox+kdq/tblSQ6nk=
Subject key identifier:   C5:4A:AB:FF:2C:AD:3C:23:F1:E8:50:17:E4:F9:57:17:1B:8A:EE:D6
Certificate issuer:       /CN=A91DF9CA/serialNumber=96D954841E8577A8DF81CF5798242B20715EA399
Certificate serial:       02
Authority key identifier: 96:D9:54:84:1E:85:77:A8:DF:81:CF:57:98:24:2B:20:71:5E:A3:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/C6EF2736B23C11F196D963B56111F970.roa
Signing time:             Thu 17 Sep 2026 02:09:13 +0000
ROA not before:           Thu 17 Sep 2026 02:09:13 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154149
IP address blocks:        163.52.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.crl
                          rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 04:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF9CA, serialNumber=96D954841E8577A8DF81CF5798242B20715EA399
        Validity
            Not Before: Sep 17 02:09:13 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aab4bc9-4afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:91:4e:c0:c5:95:3f:6a:1b:96:71:d4:d9:
                    31:02:e8:56:4b:43:54:46:94:07:2c:4e:b1:2c:90:
                    c8:96:29:45:06:c4:d4:93:dd:d1:b5:e5:9e:55:65:
                    64:c4:d3:c7:10:e5:ad:79:b4:65:40:ef:55:23:ef:
                    33:09:a7:16:65:99:5d:4a:66:75:50:49:bd:cf:ed:
                    01:9c:40:b1:79:47:6a:fb:63:02:05:61:18:ad:52:
                    60:b2:33:e5:5c:9c:07:df:d4:5d:01:dc:04:ae:0a:
                    69:8e:5d:2e:d3:57:b1:3c:66:89:7c:9a:71:b2:da:
                    1c:59:a2:ec:6b:37:fe:e1:97:26:b1:35:c9:63:cd:
                    41:3f:b5:7e:6a:6d:60:23:2c:8a:51:eb:6c:5d:54:
                    ba:9a:5e:59:a1:35:f4:7f:d1:12:79:c7:36:91:1e:
                    1e:cf:43:38:34:4f:be:a3:3f:32:3f:ea:6a:c6:76:
                    66:6e:f0:97:6a:5a:b8:f1:67:25:ae:15:6f:12:96:
                    97:6a:03:f2:3a:fa:e0:6c:e7:fd:3e:d1:77:06:21:
                    c9:32:52:f0:4a:48:1a:90:bb:b9:02:4f:50:0b:5d:
                    82:8c:5d:40:cc:32:25:5a:b6:a2:09:25:6d:e6:48:
                    71:64:79:e0:72:d3:3a:f7:e5:b2:84:21:b2:7e:f6:
                    09:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4A:AB:FF:2C:AD:3C:23:F1:E8:50:17:E4:F9:57:17:1B:8A:EE:D6
            X509v3 Authority Key Identifier:
                keyid:96:D9:54:84:1E:85:77:A8:DF:81:CF:57:98:24:2B:20:71:5E:A3:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/C6EF2736B23C11F196D963B56111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:2b:83:65:b0:ad:26:3e:64:73:a8:9e:a6:53:94:5f:13:6a:
         64:bb:c6:d1:bd:6f:1a:7a:24:f2:17:86:a7:3c:e0:df:67:a5:
         3d:a3:49:c5:4c:97:4d:37:ce:24:11:ba:46:7b:ff:e6:f0:2d:
         0b:56:23:b1:27:66:c5:06:8c:c7:62:bc:c4:c4:e8:e3:a4:4b:
         89:9a:06:0a:ac:87:a6:45:34:fb:d9:57:8c:1a:28:e1:ca:b3:
         67:04:e8:9c:03:9c:0b:a8:62:46:a5:b4:34:c4:60:c6:e9:df:
         c7:d1:6c:c8:c8:99:fa:f9:ca:6b:19:83:7d:2d:cf:a3:fb:f6:
         d0:7c:a2:41:87:23:de:3c:c3:e1:7b:31:e0:f4:c3:b5:c8:ec:
         89:e1:2f:10:74:76:09:72:05:c1:74:ba:68:ce:8f:80:5e:29:
         88:d1:e1:d2:8f:58:67:ee:37:ff:82:7a:11:5e:c9:1e:46:43:
         4c:bd:36:ac:0a:e5:49:01:9a:a1:24:3e:1b:d7:59:48:6d:e0:
         03:50:d6:f7:2b:07:43:5f:59:63:35:9d:6d:9b:38:96:9b:74:
         ab:d2:51:26:72:1d:56:2f:e1:c4:94:84:66:d2:ee:e5:48:6f:
         b4:3c:15:8f:e1:2e:a6:ec:7d:2a:94:a0:cb:30:ff:5b:db:a9:
         e1:06:43:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:38:07 2026 by rpki-client