Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/6220E2A0A5E311F18F4907A63911F970.roa
File:                     6220E2A0A5E311F18F4907A63911F970.roa (raw, json)
Hash identifier:          b1FCkmkWWEB62nrId2YJTV0eztB29+IOsAwo0jgT3Y8=
Subject key identifier:   91:66:51:0D:F7:0C:B2:40:A2:17:0D:3F:4A:43:E5:20:61:2C:49:3A
Certificate issuer:       /CN=A91A1762/serialNumber=45DB9EEA2EF893AFFC33343A2320D9FCB1108E88
Certificate serial:       1D
Authority key identifier: 45:DB:9E:EA:2E:F8:93:AF:FC:33:34:3A:23:20:D9:FC:B1:10:8E:88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Rdue6i74k6_8MzQ6IyDZ_LEQjog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/6220E2A0A5E311F18F4907A63911F970.roa
Signing time:             Mon 19 Oct 2026 09:58:12 +0000
ROA not before:           Mon 19 Oct 2026 09:58:12 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     4605
IP address blocks:        158.182.0.0/16 maxlen: 16
                          158.182.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/Rdue6i74k6_8MzQ6IyDZ_LEQjog.crl
                          rsync://rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/Rdue6i74k6_8MzQ6IyDZ_LEQjog.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Rdue6i74k6_8MzQ6IyDZ_LEQjog.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Nov 2026 09:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1762, serialNumber=45DB9EEA2EF893AFFC33343A2320D9FCB1108E88
        Validity
            Not Before: Oct 19 09:58:12 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ad5e9b3-4802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:77:35:45:f9:74:99:8e:fd:80:86:4c:97:
                    46:c3:78:3e:32:6f:7d:b9:b9:7a:8d:b0:87:76:24:
                    d9:89:e6:49:01:7b:db:dd:5d:25:75:22:4a:8c:3a:
                    89:51:aa:62:64:de:a7:e4:50:3a:99:51:49:10:a8:
                    27:24:f8:fb:f2:71:e1:9e:e4:2e:27:4f:83:e5:e9:
                    eb:6a:44:e2:04:78:51:93:b5:f8:b0:80:be:0f:48:
                    10:15:4d:3d:b9:d1:23:29:a8:36:18:0c:17:7f:dc:
                    95:51:e8:e6:eb:71:46:ef:7c:ac:77:c8:f3:6b:cc:
                    c8:96:7e:af:3f:64:4c:70:94:61:1b:c0:e2:82:8e:
                    26:80:ce:b6:51:c1:93:e8:71:43:0b:0f:2c:5e:61:
                    2c:ad:e1:d3:82:c0:09:6d:ad:e9:5e:e3:ce:0e:07:
                    c1:0e:63:de:80:11:4a:55:d7:b5:a6:44:e4:8e:60:
                    eb:36:b3:b3:a7:3c:36:21:04:e8:8c:9d:6e:9f:ce:
                    31:f5:68:66:64:42:ca:99:a3:45:80:99:68:1b:8f:
                    2f:f8:a6:90:14:b2:50:ec:ad:42:c6:2f:e2:71:c4:
                    3d:65:72:5c:a1:74:f7:64:d4:4e:7a:f8:74:02:88:
                    02:f4:21:3d:2a:d8:bb:44:38:c8:b7:1e:75:cb:f1:
                    ff:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:66:51:0D:F7:0C:B2:40:A2:17:0D:3F:4A:43:E5:20:61:2C:49:3A
            X509v3 Authority Key Identifier:
                keyid:45:DB:9E:EA:2E:F8:93:AF:FC:33:34:3A:23:20:D9:FC:B1:10:8E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/Rdue6i74k6_8MzQ6IyDZ_LEQjog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Rdue6i74k6_8MzQ6IyDZ_LEQjog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1762/9750A1A6A5E111F1A1CF85683911F970/6220E2A0A5E311F18F4907A63911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5d:f5:0f:e1:2b:fa:63:65:f0:a3:3d:60:17:32:2a:b2:9a:a8:
         25:b0:c1:a8:9f:8f:2e:0f:16:5f:68:3d:8e:7b:4c:2c:68:8a:
         42:f1:31:ac:8c:33:9d:df:2c:ee:a7:65:f0:3c:d0:35:85:cd:
         1a:2b:41:5e:50:04:d1:01:69:3d:25:9e:f9:e4:b1:fe:74:e8:
         b6:04:9a:4b:4a:63:7c:2d:0c:f6:9b:fb:31:45:a1:96:5c:79:
         5e:d0:ef:e7:1d:f9:33:ef:e8:c6:55:86:82:3b:8e:59:ac:4a:
         bd:65:7c:7c:7c:93:6d:b4:bf:b9:97:15:98:63:42:9c:85:9e:
         ab:a6:2c:e5:c0:98:b5:2e:2f:9f:0c:41:c9:7e:11:6a:22:80:
         d0:82:71:70:b2:4c:fd:bd:b9:f2:0f:3f:79:2e:a0:73:ad:aa:
         fc:eb:16:10:cb:cb:34:8f:72:41:a0:f6:00:c4:9e:79:1d:1a:
         dd:4a:36:d2:e5:bc:57:6f:53:76:fa:70:e8:1f:bd:f1:23:d3:
         03:d5:13:cc:f4:25:d7:95:d8:89:70:6d:bd:91:ab:f2:9f:ff:
         b5:05:36:05:28:8a:11:95:6e:9e:50:a5:4a:e6:1c:ba:7d:99:
         71:10:99:14:6b:32:cc:7e:df:43:86:08:45:82:ea:0e:db:4d:
         63:cb:db:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 5 06:18:24 2026 by rpki-client