Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/3014B5BC86D011F08795B91FC4F9AE02.roa
File:                     3014B5BC86D011F08795B91FC4F9AE02.roa (raw, json)
Hash identifier:          icWxf2EeuNRrL9AzCEZgALKnzPw6palewZWFR0NzHmQ=
Subject key identifier:   F1:AF:73:4B:39:71:5E:46:6A:FB:02:B7:A8:0A:3D:34:E0:2B:53:FF
Certificate issuer:       /CN=A91AC567/serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
Certificate serial:       62
Authority key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/3014B5BC86D011F08795B91FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:13:42 +0000
ROA not before:           Mon 01 Sep 2025 06:36:25 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154189
IP address blocks:        202.66.182.0/24 maxlen: 24
                          2001:df6:1240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl
                          rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
        Validity
            Not Before: Sep  1 06:36:25 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3f536-8616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c8:52:e7:2a:48:a0:29:91:6e:5a:74:2a:04:
                    a3:e0:8d:ce:4e:6f:85:24:b0:12:74:27:c0:a7:0f:
                    f4:c4:75:de:c1:bf:2f:08:3e:1a:10:eb:4f:8d:a5:
                    5f:76:40:03:24:c9:c1:e1:77:8b:ab:e7:aa:42:3b:
                    55:f0:ca:e4:6d:59:bf:71:4f:94:a5:7a:f5:fe:3e:
                    27:1c:e3:e9:ed:2d:f2:df:24:d3:77:36:65:73:61:
                    0a:22:a9:c1:46:cd:67:df:11:73:d1:45:d3:f1:fa:
                    bb:fd:b5:c1:5f:40:4c:09:89:fb:61:3f:49:2f:fe:
                    50:85:48:77:1f:6c:ad:2f:2c:6f:5e:dc:c8:6b:d5:
                    78:2d:ec:ae:bf:80:c2:12:ac:c0:77:7c:ed:2b:1e:
                    64:91:a5:05:b5:d3:35:70:0f:e5:95:8e:7d:f6:98:
                    a2:63:df:d5:e8:d2:ce:06:8a:a9:25:c7:85:a8:b1:
                    20:9b:19:8e:b4:83:02:48:86:2b:88:fa:a9:73:b2:
                    81:97:dd:1d:a8:9e:64:73:27:65:05:e3:15:c4:a4:
                    e1:16:71:1a:2d:f4:63:7b:97:93:9d:48:e3:b9:89:
                    9d:c8:3e:ba:43:32:9b:94:ae:3d:8a:f1:c5:06:ac:
                    1b:73:91:97:91:34:7b:70:f0:da:cb:3b:42:34:98:
                    1f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AF:73:4B:39:71:5E:46:6A:FB:02:B7:A8:0A:3D:34:E0:2B:53:FF
            X509v3 Authority Key Identifier:
                keyid:85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/3014B5BC86D011F08795B91FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.66.182.0/24
                IPv6:
                  2001:df6:1240::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:ea:7e:d6:4e:cf:43:b0:85:ac:36:18:48:31:0d:20:9f:8d:
         8d:4f:d6:95:bf:de:a3:1f:84:2e:2a:39:ab:61:eb:6c:cc:a7:
         87:11:d8:69:20:54:de:dc:ad:06:c4:a7:4b:0d:2d:81:04:0f:
         9c:3c:ee:86:8a:05:98:e9:9a:81:99:83:29:45:f4:d9:b4:72:
         e1:2d:46:93:e1:fd:cd:bd:c0:4f:89:d5:8c:37:34:45:d4:7b:
         e9:6e:98:fb:4b:88:d7:90:11:1b:56:13:3b:78:85:15:81:9e:
         0c:e0:22:b5:9a:7e:f9:74:9c:8c:b0:42:ba:49:81:d5:1c:4e:
         e7:c1:47:cd:f3:a0:26:b1:e4:a5:a7:bc:01:de:39:7f:4d:57:
         42:bc:5a:62:eb:dc:df:15:91:57:32:b1:69:4b:3d:30:9a:09:
         7b:7d:60:d6:d6:27:82:24:1f:e5:39:d5:11:2d:37:dc:ee:ca:
         41:d7:e6:9f:a7:9d:cf:4a:d6:e2:b0:0d:2f:7c:fc:1f:6c:88:
         97:38:93:0c:6d:ad:b8:9b:11:1b:76:bf:d2:66:d5:29:9f:e6:
         03:71:2c:58:dd:03:07:2e:79:6e:da:a5:c6:0f:cf:f5:80:26:
         04:5e:e6:1b:e8:b7:55:8a:d1:b3:91:58:da:ce:5e:8c:61:9c:
         9d:1c:01:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:06 2026 by rpki-client