Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4C18BCC4319B11F183BC3A0FAE833773.roa
File:                     4C18BCC4319B11F183BC3A0FAE833773.roa (raw, json)
Hash identifier:          3F+pNtieud7kUmsjwxIHKuwdI4yFXV6zs7qYU58Q59I=
Subject key identifier:   C6:6B:58:59:53:F3:A4:9D:86:9D:FB:43:9D:6A:83:78:30:71:05:96
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6C3C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4C18BCC4319B11F183BC3A0FAE833773.roa
Signing time:             Mon 06 Apr 2026 09:30:49 +0000
ROA not before:           Mon 06 Apr 2026 09:30:49 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154546
IP address blocks:        163.128.42.0/23 maxlen: 24
                          2001:df6:cfc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27708 (0x6c3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Apr  6 09:30:49 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69d37d49-25ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f8:50:39:88:b1:b1:97:d7:41:4c:4b:91:a7:
                    8d:c8:1d:34:29:81:d8:62:d5:c9:2d:cf:98:7b:2a:
                    c9:bc:96:de:fe:37:68:36:37:39:b1:16:97:22:07:
                    4b:93:c5:0a:e1:af:ad:de:0b:77:d9:52:0e:6e:95:
                    22:60:0a:da:d8:03:3c:17:ae:94:44:dc:61:38:5c:
                    2c:5b:8e:c9:b7:05:fc:47:98:88:d0:b8:a8:84:0a:
                    aa:1b:98:29:d6:92:34:73:78:33:a5:3f:4b:38:f1:
                    82:52:f2:4e:db:c5:81:96:b3:74:8b:79:49:52:5f:
                    18:45:6f:a1:cf:d1:ec:26:fb:b7:25:50:95:30:8d:
                    31:bb:86:cf:1a:99:fe:1b:10:34:b1:76:35:3a:e7:
                    00:b3:f0:79:fd:6e:1f:df:84:f5:af:ba:13:ee:88:
                    cf:a9:ee:c1:9d:ae:b6:f0:6c:18:28:14:6e:b4:02:
                    7b:52:80:d3:2e:89:0b:5b:18:61:cc:b8:b2:ef:30:
                    8e:19:cb:ea:79:e8:9a:5c:f7:71:b0:fe:80:c9:d1:
                    90:9c:dd:66:ae:2c:49:ba:5b:a1:7b:3d:e2:5d:ab:
                    eb:48:95:c3:2b:23:a5:3d:ff:e4:db:d1:a9:f0:d1:
                    3c:aa:0c:aa:a3:da:7a:71:df:05:b3:95:ef:21:26:
                    92:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6B:58:59:53:F3:A4:9D:86:9D:FB:43:9D:6A:83:78:30:71:05:96
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4C18BCC4319B11F183BC3A0FAE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.42.0/23
                IPv6:
                  2001:df6:cfc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:ed:ad:c6:61:8e:34:dc:49:00:0f:74:40:96:02:ea:e4:78:
         7f:6d:66:b7:81:30:4e:56:ae:07:32:9a:b3:36:2f:a4:9d:4f:
         67:ff:63:b1:d1:ae:fb:f3:19:cc:3e:76:5f:8e:d6:8e:fd:26:
         4b:ad:6b:c6:10:b7:cd:f3:f0:f3:4c:b1:67:ac:f9:88:3d:f3:
         36:66:3f:1e:a4:e6:85:3e:7d:f1:52:85:c8:b0:be:d5:00:be:
         39:e7:06:dc:8a:d1:3f:41:15:f3:07:a8:c7:58:c0:96:e1:75:
         7e:dc:fb:9d:9a:41:cf:a6:64:3e:cc:ad:5f:93:04:b5:21:d7:
         7a:c4:5e:e7:6d:3a:e2:0b:a7:02:90:64:8b:d0:9d:be:1a:30:
         0f:eb:82:9c:1c:09:04:52:aa:4e:2d:7c:0a:13:c5:db:b2:f7:
         b5:a3:d8:a3:7a:4c:cc:29:a6:c0:47:e8:bb:f6:27:7c:3a:b9:
         be:b9:24:13:21:5a:24:fe:d1:35:e9:05:f4:c3:7e:21:1a:dc:
         cc:0c:1c:47:a9:e2:97:8e:63:b6:d6:55:1f:bb:b7:45:1b:45:
         57:f2:d1:c5:93:32:cd:8c:9e:70:f2:d9:45:30:f9:4c:38:9d:
         ef:c9:a5:11:52:77:2c:35:08:e6:43:1d:f2:5f:76:3a:50:8a:
         07:b7:61:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:02:29 2026 by rpki-client