Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A043A/5C8C4AB6C96E11F0A6689F5FC4F9AE02/ACEE000058B411F1BB1DEC4397833773.roa
File:                     ACEE000058B411F1BB1DEC4397833773.roa (raw, json)
Hash identifier:          s0FJJ92+90hN/3L8Tb29C2JXuMCDrMukD+1lNW2i6C8=
Subject key identifier:   29:6F:BE:1C:AF:D5:1D:02:2F:1A:D1:06:41:53:0B:80:A8:20:0B:C8
Certificate issuer:       /CN=A91A043A/serialNumber=E63428A21AB1EBEB9841AFCCE77BCD27A8845258
Certificate serial:       72
Authority key identifier: E6:34:28:A2:1A:B1:EB:EB:98:41:AF:CC:E7:7B:CD:27:A8:84:52:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jQoohqx6-uYQa_M53vNJ6iEUlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A043A/5C8C4AB6C96E11F0A6689F5FC4F9AE02/ACEE000058B411F1BB1DEC4397833773.roa
Signing time:             Tue 26 May 2026 03:40:44 +0000
ROA not before:           Tue 26 May 2026 03:40:44 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     151645
IP address blocks:        116.66.240.0/24 maxlen: 24
                          116.66.241.0/24 maxlen: 24
                          116.66.242.0/24 maxlen: 24
                          116.66.243.0/24 maxlen: 24
                          116.66.244.0/24 maxlen: 24
                          116.66.246.0/24 maxlen: 24
                          116.66.247.0/24 maxlen: 24
                          2407:7180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A043A/5C8C4AB6C96E11F0A6689F5FC4F9AE02/5jQoohqx6-uYQa_M53vNJ6iEUlg.crl
                          rsync://rpki.apnic.net/member_repository/A91A043A/5C8C4AB6C96E11F0A6689F5FC4F9AE02/5jQoohqx6-uYQa_M53vNJ6iEUlg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jQoohqx6-uYQa_M53vNJ6iEUlg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A043A, serialNumber=E63428A21AB1EBEB9841AFCCE77BCD27A8845258
        Validity
            Not Before: May 26 03:40:44 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a15163c-e2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:fd:28:14:72:6e:fe:32:74:65:9a:23:ac:
                    33:15:79:1d:35:c4:46:56:d7:2b:bf:ed:3e:f2:89:
                    5d:1f:e6:29:01:49:16:dd:4d:b9:2b:8c:d8:3f:55:
                    8e:82:a1:db:2c:88:19:da:f0:e7:c1:bf:a8:c2:67:
                    86:17:a9:ec:5e:5c:96:21:bf:07:bd:51:1a:75:9f:
                    c1:c0:50:25:09:39:ba:f2:00:c4:a8:f2:38:f1:ba:
                    84:59:30:89:66:ae:f1:e1:30:4a:95:db:ff:d3:61:
                    55:ab:07:99:c6:a6:66:0c:a3:31:e3:da:73:46:0a:
                    90:92:bf:a6:51:56:cf:48:dd:39:05:0f:44:3c:a8:
                    ac:2f:ef:e0:40:c0:86:ec:3b:92:64:25:16:40:40:
                    66:3f:05:cb:a3:c3:24:7e:8c:11:e3:36:17:b4:8f:
                    b8:c4:ac:1f:b4:d4:42:31:bc:7e:1f:f4:02:b8:a0:
                    6c:64:58:4d:e0:35:fd:c7:e2:91:6c:cd:9e:51:0b:
                    7b:77:32:16:bd:0f:f6:f8:c5:e0:15:b4:39:f0:6e:
                    91:dc:2e:e6:13:8b:07:b0:fa:12:6c:7d:23:3d:34:
                    38:97:8e:ec:38:20:9a:28:12:c8:3b:84:f6:24:92:
                    1a:73:cb:51:d5:52:2e:42:30:51:5c:45:0d:2b:4c:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6F:BE:1C:AF:D5:1D:02:2F:1A:D1:06:41:53:0B:80:A8:20:0B:C8
            X509v3 Authority Key Identifier:
                keyid:E6:34:28:A2:1A:B1:EB:EB:98:41:AF:CC:E7:7B:CD:27:A8:84:52:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A043A/5C8C4AB6C96E11F0A6689F5FC4F9AE02/5jQoohqx6-uYQa_M53vNJ6iEUlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jQoohqx6-uYQa_M53vNJ6iEUlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A043A/5C8C4AB6C96E11F0A6689F5FC4F9AE02/ACEE000058B411F1BB1DEC4397833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.66.240.0-116.66.244.255
                  116.66.246.0/23
                IPv6:
                  2407:7180::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:04:7e:dd:d1:cd:86:0f:4c:1c:a2:bd:01:3b:61:5b:a5:83:
         97:1c:a9:c7:9e:53:ad:fb:a7:66:e6:0c:c0:40:02:58:b9:a3:
         79:6f:33:82:7d:c0:05:50:a7:89:10:fd:5a:8d:91:9c:8d:de:
         78:10:ac:6e:d7:d4:4c:82:78:51:3c:c4:a9:35:a3:ec:50:2e:
         28:08:16:f4:84:be:a1:1e:f7:e0:ad:64:97:8f:df:85:3f:10:
         03:0b:a8:26:a9:02:dc:c5:fa:a6:db:5b:b7:ba:20:69:82:95:
         77:cc:d4:88:52:89:79:8d:ee:62:f3:bd:f9:f2:86:ea:cc:3a:
         b3:c2:53:f9:f7:2c:a7:f5:d0:d3:ab:75:0d:fe:d9:6f:fc:86:
         20:90:6f:bf:43:18:65:67:fc:bd:b2:4e:14:c8:f6:6f:a1:4a:
         d0:f1:65:3b:f3:b9:66:16:d2:35:e8:56:c9:a0:f4:0c:78:0a:
         d1:b0:33:fe:8b:4e:02:f4:05:6b:0e:d6:52:47:22:4a:e3:46:
         52:49:af:43:95:62:1c:2d:ea:23:c9:20:6d:07:fc:8b:bd:af:
         00:c6:1f:1e:c5:cd:cd:7e:84:d5:bd:a9:75:bf:45:b9:ce:cf:
         0b:8e:a8:46:c8:16:8c:4f:dc:6f:ed:98:5f:19:a1:7c:f9:c1:
         9b:48:cc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:56 2026 by rpki-client