Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8EA288F62E9511E9896EFA1DC4F9AE02.roa
File:                     8EA288F62E9511E9896EFA1DC4F9AE02.roa (raw, json)
Hash identifier:          tCQBUtYFoGYz0mkeelr2MTFt0PRYSbZ9klpLIVmb1oc=
Subject key identifier:   34:D6:DB:26:25:AD:3D:DB:B3:E8:97:78:A2:8D:96:45:43:4F:86:E1
Certificate issuer:       /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
Certificate serial:       11D6
Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8EA288F62E9511E9896EFA1DC4F9AE02.roa
Signing time:             Tue 26 May 2026 17:26:33 +0000
ROA not before:           Tue 26 May 2026 17:26:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     45782
IP address blocks:        210.4.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl
                          rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4566 (0x11d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F
        Validity
            Not Before: May 26 17:26:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a15d7c9-c674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:45:6e:5b:fe:fb:e8:7b:c0:ee:c6:11:3b:6a:
                    96:54:11:95:d6:05:ce:8c:5a:2c:27:5d:4f:86:00:
                    cc:67:e4:95:ee:06:33:5d:e3:52:1a:c1:d6:f6:d7:
                    17:11:fe:3a:54:7f:e6:7a:69:7f:ba:47:c8:ac:8e:
                    71:80:1f:10:ef:18:cf:a1:21:70:7b:f7:dd:0c:82:
                    09:16:f0:56:fc:6c:0a:4e:c5:ec:ae:49:44:08:7b:
                    98:9d:66:95:2f:79:cc:b1:0f:ec:ff:8d:99:81:32:
                    a5:da:21:7b:6e:2d:bc:ca:a7:b6:8a:85:19:32:40:
                    02:3e:52:b2:b4:b4:2e:f3:bd:dc:62:77:e8:d8:38:
                    46:a8:29:f3:a4:3a:33:3d:85:54:bd:02:63:c6:22:
                    c5:43:51:01:75:88:aa:4b:a6:b6:40:83:1e:51:31:
                    47:29:83:fc:1c:ac:76:a8:1c:fd:65:c2:0d:85:c0:
                    88:9f:8b:b4:45:11:d5:aa:15:27:7c:79:48:3a:4a:
                    b4:d0:04:83:19:83:b5:cb:16:b3:ed:70:7c:4a:06:
                    74:5b:aa:e2:0e:40:90:00:55:dd:fc:8e:8a:83:ce:
                    80:fe:70:9c:fe:ff:19:70:26:52:8b:ba:62:24:27:
                    61:58:71:4c:ac:e0:67:38:f5:ae:95:bc:77:df:45:
                    53:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D6:DB:26:25:AD:3D:DB:B3:E8:97:78:A2:8D:96:45:43:4F:86:E1
            X509v3 Authority Key Identifier:
                keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8EA288F62E9511E9896EFA1DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.4.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:23:bd:d7:d3:5f:06:dd:4c:48:54:76:80:d4:ed:4b:80:02:
         69:6f:5d:7e:2a:81:9e:26:05:df:e1:55:9f:49:a2:da:15:07:
         c4:7b:b3:1e:5a:ed:84:b9:5d:8d:68:f4:48:70:d6:b8:71:f5:
         4f:7d:9e:61:62:84:2e:ad:ef:40:33:cc:eb:51:88:23:95:c0:
         58:8b:ef:03:40:44:41:71:65:bf:ed:79:9f:76:b6:c9:14:f6:
         df:58:36:95:2a:d3:9b:4e:00:51:4a:10:d7:8c:ba:22:f0:48:
         f2:6a:82:ba:54:66:85:36:93:da:b2:28:5c:81:46:b4:fb:61:
         30:f3:9d:f6:7f:9f:47:43:0e:9d:bc:7e:0c:96:6d:da:f9:fc:
         15:de:28:f7:77:b7:ca:36:b6:49:da:9c:6a:8d:8f:dc:b7:f6:
         4a:b9:cb:d7:ec:ce:18:45:c8:76:7e:38:22:06:0d:67:1c:60:
         23:93:51:0c:97:f8:c7:5b:80:f5:bb:84:cb:49:73:a9:8f:69:
         99:87:9c:74:70:66:23:e2:df:e3:ed:81:ed:0c:a7:3d:6f:cc:
         1a:85:02:55:eb:12:68:f1:f7:2b:9d:28:2e:eb:82:84:54:80:
         4f:7b:2e:4e:17:a3:36:09:84:be:6b:34:de:e7:f1:61:1c:ad:
         9f:b8:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:53:24 2026 by rpki-client