Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/64B67878AE7711EA98E12731C4F9AE02.roa
File:                     64B67878AE7711EA98E12731C4F9AE02.roa (raw, json)
Hash identifier:          zmT4huKs28Qo4c8cgWG60cK/QVsyyHKfdVgREmP58ec=
Subject key identifier:   DE:A3:D4:D9:DA:53:4D:AF:CE:9B:F2:5F:0F:74:FF:E0:1E:FE:39:59
Certificate issuer:       /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial:       0C07
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/64B67878AE7711EA98E12731C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:15:46 +0000
ROA not before:           Thu 28 Aug 2025 19:40:48 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     7262
IP address blocks:        116.66.218.0/24 maxlen: 24
                          116.66.219.0/24 maxlen: 24
                          2400:8800:1e82::/48 maxlen: 48
                          2400:8800:1e8f::/48 maxlen: 48
                          2400:8800:9e11::/48 maxlen: 48
                          2400:8800:9e12::/48 maxlen: 48
                          2400:8800:9e13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3079 (0xc07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
        Validity
            Not Before: Aug 28 19:40:48 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a48252-12d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:9a:98:39:09:1b:06:d8:65:ff:5f:7a:c2:
                    41:8c:bb:42:a0:03:63:20:54:7c:17:0c:de:fc:b5:
                    a6:db:ef:77:63:40:42:a6:e4:f1:1c:8e:52:85:63:
                    63:16:45:20:be:c7:0b:13:46:3f:c5:8d:14:1d:66:
                    c8:6a:ee:14:6b:90:3d:9b:98:a6:ef:b7:56:df:84:
                    ac:2d:9d:06:be:5f:46:3e:80:98:00:72:bb:41:5f:
                    61:e2:08:95:a4:42:0c:5e:e5:2d:b4:ac:d6:b8:0e:
                    19:af:ad:bf:f2:ba:c4:fd:41:f6:5e:56:42:dd:13:
                    17:7d:5e:be:87:04:5f:e8:da:37:ee:7a:42:1e:85:
                    c1:10:c2:01:f3:06:fa:9b:f7:19:f9:ac:40:a8:5e:
                    58:ca:3c:bb:f0:f1:1c:1b:6d:30:07:d5:d2:8f:dc:
                    8a:33:42:34:74:96:12:5e:99:bb:15:18:26:d6:ad:
                    0d:b3:30:bf:2c:60:95:de:0c:01:a2:9e:05:fb:72:
                    37:ce:3f:51:c3:39:28:16:0b:95:2e:bb:cc:dd:30:
                    25:f5:21:d5:98:53:20:e3:8e:90:9b:ac:7a:41:ac:
                    51:8c:1d:f0:69:8b:e5:cc:87:23:ea:49:f5:b0:8d:
                    5a:5d:d8:2e:94:9e:8a:dd:be:9d:aa:5a:b5:7a:d2:
                    47:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A3:D4:D9:DA:53:4D:AF:CE:9B:F2:5F:0F:74:FF:E0:1E:FE:39:59
            X509v3 Authority Key Identifier:
                keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/64B67878AE7711EA98E12731C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.66.218.0/23
                IPv6:
                  2400:8800:1e82::/48
                  2400:8800:1e8f::/48
                  2400:8800:9e11::-2400:8800:9e13:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0c:4a:97:fc:d2:03:3a:e3:6e:f8:ef:30:24:91:6a:f3:a5:cc:
         c2:5d:f0:5e:00:12:05:90:66:e7:87:49:d0:8b:db:15:76:e1:
         72:f2:e7:10:ad:45:cf:06:62:18:de:99:18:e3:34:61:69:46:
         b2:76:be:cf:a4:7d:b6:45:89:62:19:94:38:61:ba:9d:69:79:
         29:62:60:c4:74:35:8f:e8:55:e1:62:96:e2:33:ef:f3:91:ac:
         50:ad:14:99:df:c5:32:95:5c:c1:80:70:23:2f:5a:eb:95:ec:
         3e:8e:fb:68:b9:4f:bb:d6:2e:18:95:70:b2:57:80:c4:e6:0e:
         70:6f:b4:eb:53:fe:55:74:ed:b6:1e:f1:70:e9:18:e4:72:2e:
         a5:74:ee:1b:c7:5b:0c:b5:01:45:82:a5:b0:9b:ca:b2:25:0c:
         e3:f9:e9:d2:e5:19:3f:0f:9e:65:cd:47:ad:bd:88:9b:39:ec:
         f1:49:83:4d:9d:38:45:f8:d5:01:77:26:3e:b6:c5:7c:1f:7e:
         bb:75:e3:50:e6:23:bb:7e:8d:7a:05:c3:b0:38:b2:72:fb:09:
         cf:11:94:96:52:5b:ac:63:6b:24:37:13:73:91:a1:6f:1c:a0:
         23:7b:bd:b3:29:e6:72:10:ca:59:30:a9:11:15:d4:bc:52:2f:
         55:1d:d1:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:41:48 2026 by rpki-client