Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/A194680629DA11F1A7234B1B9B833773.roa
File:                     A194680629DA11F1A7234B1B9B833773.roa (raw, json)
Hash identifier:          KIqqySfqw8zszLlnQiMzev+Qz4Y53rJrYR9gJPmiP3I=
Subject key identifier:   23:7B:F1:99:88:F7:FF:61:6C:FD:0F:45:A2:E4:25:06:C7:16:2C:E6
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       0159
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/A194680629DA11F1A7234B1B9B833773.roa
Signing time:             Tue 28 Jul 2026 19:40:49 +0000
ROA not before:           Tue 28 Jul 2026 19:40:49 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     4515
IP address blocks:        206.161.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Jul 28 19:40:49 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6905c0-5849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:e5:74:3c:39:8e:89:c3:d1:1a:d6:b6:2e:
                    30:9e:91:04:38:1d:bc:5e:76:02:04:7a:7e:ef:a9:
                    51:26:f6:e8:b2:bc:ef:16:34:a8:a7:ae:6c:d4:64:
                    68:70:f5:91:08:2e:3d:7f:9e:e2:e6:ea:9c:08:16:
                    ca:e7:2d:83:98:cd:d1:4f:dc:1d:3e:f9:71:a5:a6:
                    9e:f2:a9:73:d1:e2:a0:20:b0:cd:7a:fa:98:70:36:
                    a7:78:fd:21:cc:73:ab:c6:4e:c2:99:d0:1e:df:72:
                    a5:55:bd:98:84:62:a3:00:83:21:27:a5:90:3f:ec:
                    2e:63:c3:28:ea:27:d3:cf:98:77:f1:ba:44:79:3f:
                    ad:bd:98:db:27:14:bf:03:b6:bc:7f:72:af:d8:f1:
                    d5:58:78:74:2e:ce:84:39:dc:e7:78:18:ef:cf:66:
                    86:73:db:58:bd:6f:4d:c7:49:96:d3:ea:17:66:b2:
                    29:4c:0b:7f:0b:54:df:97:00:c8:93:6f:10:8b:80:
                    86:49:f4:2a:eb:38:79:8c:13:44:a5:8d:ed:e0:cf:
                    b3:44:1e:0a:ff:c0:11:50:5d:2f:87:7e:52:51:49:
                    3f:74:ee:93:c5:9c:b6:34:a9:8e:d8:17:d0:15:fa:
                    6b:23:21:e2:47:4c:46:3d:41:7c:92:1f:45:af:1f:
                    0d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7B:F1:99:88:F7:FF:61:6C:FD:0F:45:A2:E4:25:06:C7:16:2C:E6
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/A194680629DA11F1A7234B1B9B833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.161.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:7a:70:1f:91:b0:2b:f5:c9:e6:3c:61:f5:d0:ba:b2:a5:a3:
         18:a2:aa:86:17:64:13:54:34:b5:e8:a0:29:39:0f:5d:b9:d7:
         07:a0:59:1c:20:02:ac:32:80:1c:80:23:ed:55:b7:ee:84:56:
         4a:4c:9a:6a:8c:fd:8b:7f:8b:89:51:14:80:68:d1:cc:7e:e0:
         2a:5c:9e:f7:c1:1e:4b:09:82:69:b4:23:ee:8f:4a:15:8a:ca:
         c7:99:f6:73:4e:45:92:e8:e4:10:73:e0:d2:0b:0d:77:d3:67:
         38:30:64:ac:57:86:6c:b7:6f:98:70:38:e0:73:62:f3:ae:60:
         ad:ed:69:60:83:79:20:3f:3b:1f:8a:75:4a:fc:a6:de:6e:c1:
         35:f6:d8:2e:4e:6b:f3:4f:48:c2:56:77:fe:03:8f:6d:3a:e8:
         d4:f8:48:34:bd:44:14:f6:a8:5c:ea:c5:f6:77:84:ac:e7:f3:
         2d:20:91:b9:5b:d5:58:97:c5:df:71:11:7e:ec:bc:1c:4c:3f:
         7c:97:e2:8a:80:fe:a2:44:96:ee:da:12:73:8f:66:68:45:cf:
         8b:1c:1d:fe:41:86:25:67:0f:97:3e:39:6d:46:ec:cc:d5:6d:
         56:41:b0:74:42:62:0f:1a:9e:7b:5a:9f:25:6e:99:b5:1f:df:
         4d:8d:1c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:14:01 2026 by rpki-client