Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/ACBE9D886BCE11F190D386B58047A888.roa
File:                     ACBE9D886BCE11F190D386B58047A888.roa (raw, json)
Hash identifier:          6Dn1Zj8li9YnY4uNHlxc1KEOnqvRzcjtgoYrtqpugpU=
Subject key identifier:   26:DE:5D:9F:B3:90:54:5A:6E:14:1F:2C:18:B9:18:01:F6:34:C8:AD
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       3751
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/ACBE9D886BCE11F190D386B58047A888.roa
Signing time:             Sun 04 Oct 2026 15:18:01 +0000
ROA not before:           Sun 04 Oct 2026 15:18:01 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        117.121.247.0/24 maxlen: 24
                          182.54.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 14:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14161 (0x3751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Oct  4 15:18:01 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac26e28-4ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a6:00:7b:cc:1e:20:1b:af:f2:d0:9d:f1:35:
                    12:3e:b7:5c:d8:ba:e9:9c:9c:14:86:39:42:71:ea:
                    dc:6e:a9:85:91:e8:a2:e0:05:04:08:c7:86:8c:af:
                    d2:d2:79:09:48:de:b3:1c:35:2e:76:00:56:68:1d:
                    0d:70:41:c4:30:6f:62:32:2a:d8:05:58:8f:b0:f6:
                    de:80:f8:00:6a:6c:eb:21:a8:80:a2:34:bf:20:1e:
                    90:6e:78:a0:96:c0:69:6a:1b:8c:62:2e:f3:dd:b2:
                    b7:dd:f7:22:28:2b:af:6d:2e:90:01:57:8d:6a:77:
                    bd:e0:49:84:a4:04:c5:ae:b4:7e:dd:50:1f:c3:27:
                    83:99:66:1e:5c:70:b2:c8:27:01:05:3d:4a:04:37:
                    20:d3:fc:49:21:d4:09:9a:4c:3d:4f:93:2d:34:ab:
                    63:29:2a:89:9b:cf:7e:af:b6:78:fd:70:eb:54:cc:
                    61:e5:44:57:ba:a9:49:d4:f9:33:f9:ee:67:de:ee:
                    3d:b5:df:38:7c:e7:8a:6b:92:c6:51:a1:7a:fb:01:
                    7c:1f:ec:94:bd:a3:ee:e5:16:67:37:14:48:12:9e:
                    74:8d:50:2a:9b:ac:6b:c9:1d:d5:29:91:2a:98:7a:
                    00:80:b7:25:23:cd:7c:3d:d3:5e:f1:30:cd:fe:08:
                    4c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DE:5D:9F:B3:90:54:5A:6E:14:1F:2C:18:B9:18:01:F6:34:C8:AD
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/ACBE9D886BCE11F190D386B58047A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.121.247.0/24
                  182.54.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:f2:9d:dc:26:51:e4:ae:7a:89:35:24:b6:f5:83:25:24:0d:
         9e:a9:3b:63:2a:84:1b:8b:9f:05:60:16:a2:46:8b:a2:2b:59:
         35:a7:4f:77:d3:c2:21:da:30:90:f9:af:6b:1b:42:91:4d:a2:
         ee:1d:03:49:98:35:ae:27:c4:b6:69:4a:fc:a6:57:88:49:58:
         33:56:7d:92:6c:49:3d:0c:76:00:e2:77:7e:06:88:31:36:84:
         1d:0b:45:ce:73:0b:94:f6:99:e8:5d:21:f8:e9:3b:7c:fd:76:
         c0:09:33:3c:24:42:0b:63:b0:32:3a:02:3a:ce:c2:7d:5a:04:
         06:3f:ce:44:f7:cd:fd:ee:89:78:b7:31:43:97:47:e3:24:ca:
         e9:7d:69:06:f6:ec:d8:14:0a:bf:a9:2d:62:de:dd:0b:8b:57:
         8d:74:3f:8f:f5:78:46:8b:9d:ee:53:70:58:be:d8:a9:c5:77:
         7f:ae:ca:bf:4c:b8:0d:cb:1b:81:37:19:5d:06:49:3f:cd:29:
         3e:a9:b1:2b:0f:fe:ec:29:ef:29:57:07:d1:69:93:80:71:cf:
         10:46:67:b2:01:f8:d2:1a:58:48:dc:05:a2:cd:bb:a3:b2:ea:
         62:38:58:bd:93:47:b4:63:08:ab:d8:10:ae:3f:a9:1f:af:66:
         b7:8d:5a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 01:13:59 2026 by rpki-client