Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/BB455B6A21B611F180955D50193D8C67.roa
File:                     BB455B6A21B611F180955D50193D8C67.roa (raw, json)
Hash identifier:          T5dGYO6xIA3iT8OTT5zsMy1BjQKaQzVyRcAZAGPI9p0=
Subject key identifier:   05:2A:A1:0B:D5:6E:5A:DC:01:E1:F2:8B:7F:E7:90:04:12:6A:88:C5
Certificate issuer:       /CN=A91E3125/serialNumber=A7A110C8A4029E25215463CEE21DA57FB64B8AE4
Certificate serial:       02
Authority key identifier: A7:A1:10:C8:A4:02:9E:25:21:54:63:CE:E2:1D:A5:7F:B6:4B:8A:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/BB455B6A21B611F180955D50193D8C67.roa
Signing time:             Tue 17 Mar 2026 04:06:53 +0000
ROA not before:           Tue 17 Mar 2026 04:06:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135391
IP address blocks:        163.128.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3125, serialNumber=A7A110C8A4029E25215463CEE21DA57FB64B8AE4
        Validity
            Not Before: Mar 17 04:06:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69b8d35d-aeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3e:ee:bc:03:54:85:63:9e:4d:cc:a5:b7:46:
                    8d:57:8e:14:6e:96:f7:cb:27:11:58:23:fa:0e:f9:
                    9d:5e:33:39:7a:cb:9b:d5:5e:0f:c1:75:ef:09:2f:
                    42:ab:a8:56:ff:97:59:03:f2:61:7f:ef:15:6a:14:
                    7c:d6:70:cb:ff:83:28:94:9a:39:89:3e:8e:72:69:
                    ba:52:8f:d1:7c:a8:1b:d0:73:6e:7c:da:b0:10:69:
                    49:0f:ea:24:94:5b:11:ff:4f:09:03:70:db:43:8b:
                    19:d2:90:2a:e4:24:c2:10:80:a4:a0:40:c4:19:05:
                    f0:29:88:78:a9:e3:9b:0b:5e:b6:ae:cf:af:15:e6:
                    46:6f:7d:fc:33:41:06:a4:12:21:7a:01:d4:24:1b:
                    4b:ee:7d:f0:7b:b4:bf:b6:0c:f7:64:99:c0:ad:25:
                    63:6b:ff:8a:2d:2c:a8:1d:39:5e:e5:86:32:01:77:
                    e1:aa:58:67:36:79:0e:42:56:e3:04:e0:3c:db:28:
                    4f:db:ed:8c:0c:39:fc:ec:ad:a5:3e:0b:1f:81:5f:
                    77:ae:d2:d7:ca:77:4e:f1:33:ee:ae:38:a6:06:9a:
                    f3:91:d9:8c:02:4d:85:18:87:c6:fd:9d:7f:f7:dc:
                    59:9f:8b:1d:99:92:72:be:f5:3b:b6:54:9e:91:0d:
                    5c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2A:A1:0B:D5:6E:5A:DC:01:E1:F2:8B:7F:E7:90:04:12:6A:88:C5
            X509v3 Authority Key Identifier:
                keyid:A7:A1:10:C8:A4:02:9E:25:21:54:63:CE:E2:1D:A5:7F:B6:4B:8A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6EQyKQCniUhVGPO4h2lf7ZLiuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3125/7172E09821B611F1893FBCFD183D8C67/BB455B6A21B611F180955D50193D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:40:2c:b8:82:9e:85:ed:c6:d8:c8:3a:2b:a8:b8:bc:13:9a:
         81:1d:10:bd:4c:ba:03:13:25:e4:5b:2d:6e:65:48:34:84:60:
         f0:8b:bb:87:56:0b:f1:9a:a8:b7:d8:a8:fb:dc:dd:04:cb:8e:
         9d:fb:f7:64:3c:c4:f2:cd:1b:e6:bc:dd:9d:da:15:78:f6:78:
         80:56:f5:a9:a1:a1:a8:45:07:9a:1d:e1:0a:5f:70:ad:0b:01:
         c8:98:11:ae:1b:ee:97:d2:a7:01:f9:64:fe:4b:75:da:f3:63:
         a9:28:3f:5e:d3:17:f9:8e:d0:5c:cd:3a:19:04:9e:a9:34:8f:
         14:f3:02:03:47:d2:60:56:e2:87:0c:d1:1c:93:a2:ce:f2:ca:
         fe:26:45:7a:02:bc:5c:c0:4c:ee:72:3a:f1:09:a1:96:56:eb:
         99:a5:14:c3:3b:fb:36:e3:6c:24:a1:07:b6:c7:15:1a:b3:69:
         08:99:56:d1:8f:f5:44:5e:05:91:83:ec:dc:23:fc:dc:bd:e1:
         29:73:c7:e0:30:a0:8f:23:f8:7a:be:cc:57:87:22:ae:22:5d:
         48:23:78:a8:19:81:c5:f3:a7:63:a5:13:92:3c:bd:bb:ba:1e:
         35:a5:38:e1:f1:f6:c6:93:21:cb:a3:87:0e:b6:ab:d9:73:fa:
         6b:04:06:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:25:15 2026 by rpki-client