Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/63ABE3C0001811F1804E761C426F56BC.roa
File:                     63ABE3C0001811F1804E761C426F56BC.roa (raw, json)
Hash identifier:          yY65u/jqJQmHqnGhqt0gIcasuvIles8dQWtNSaAAQqc=
Subject key identifier:   A2:D8:EC:11:63:ED:AD:77:BF:38:BC:93:0E:0D:67:0C:8F:80:DF:20
Certificate issuer:       /CN=A91B00DC/serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
Certificate serial:       46
Authority key identifier: 55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/63ABE3C0001811F1804E761C426F56BC.roa
Signing time:             Fri 05 Jun 2026 09:40:06 +0000
ROA not before:           Fri 05 Jun 2026 09:40:06 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     4686
IP address blocks:        114.134.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl
                          rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B00DC, serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
        Validity
            Not Before: Jun  5 09:40:06 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a229976-be67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:dc:af:77:d7:5f:05:a4:0e:5d:a5:a2:37:
                    bb:0a:4f:6b:3a:d0:60:64:eb:6d:30:2f:c8:c0:0d:
                    c3:94:80:12:9e:41:c1:f9:69:1e:20:61:21:ee:1b:
                    2e:a5:b8:b0:fc:37:98:c5:75:04:d6:f8:cf:f2:5b:
                    48:55:25:f4:d3:98:8b:26:90:ec:76:3a:bb:fd:39:
                    0d:3e:e7:a5:97:53:71:30:45:d3:94:c4:88:d1:08:
                    39:17:e6:ae:64:f4:61:38:7a:3a:d0:a8:a4:54:2c:
                    e7:ba:1c:3f:db:1a:5a:77:4b:ea:85:9e:6f:ad:a6:
                    65:d8:4c:ab:96:85:70:34:89:31:e7:df:ae:3e:1f:
                    0f:b1:58:a9:71:25:41:4a:a0:d5:90:62:51:08:ef:
                    b6:8f:9d:0b:0c:c2:d6:20:85:59:87:ae:47:c7:0c:
                    d6:8a:57:db:da:e5:7c:1c:4a:d4:eb:ab:e6:81:71:
                    7b:2b:d1:65:c9:26:72:bd:43:be:97:e5:0d:9c:31:
                    a2:02:66:ab:d7:0c:ae:bb:82:18:43:64:8f:a9:1b:
                    c0:4e:4c:77:24:be:b0:88:70:74:ec:e6:ca:8d:3e:
                    85:d4:38:24:7c:af:04:87:5e:3f:30:c0:2b:54:27:
                    ca:89:86:a3:c1:b3:42:02:ba:af:c8:68:71:e1:03:
                    12:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D8:EC:11:63:ED:AD:77:BF:38:BC:93:0E:0D:67:0C:8F:80:DF:20
            X509v3 Authority Key Identifier:
                keyid:55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/63ABE3C0001811F1804E761C426F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.134.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:c0:55:38:5d:ad:c1:8b:ce:37:e9:7e:c5:00:95:f9:38:e3:
         f1:22:95:02:a3:c9:98:56:e3:8a:b8:7f:ab:6e:e0:c2:6c:33:
         2d:88:a0:e6:17:cf:1f:f0:26:2c:77:a0:e0:1d:c9:79:b3:81:
         1e:16:4c:b5:51:a4:83:24:f7:86:6f:19:62:90:9c:ce:41:ff:
         4c:45:a6:c1:da:3d:19:81:02:17:34:f0:a0:bd:79:96:dc:1a:
         52:ba:a9:e1:74:99:1c:a0:fa:49:d4:c2:cf:71:75:61:3b:2f:
         0b:1c:cb:1f:e0:66:21:65:73:7f:f6:82:5f:f8:a6:a6:f0:78:
         69:a6:0a:fe:54:98:82:2a:2e:dd:48:22:e6:6d:69:2e:d7:0b:
         a6:fb:77:dd:1a:af:82:69:c3:c5:91:08:d1:79:24:86:46:f1:
         74:bf:86:0a:9f:50:57:bd:4a:b0:ae:cc:72:3b:cd:86:36:06:
         23:50:f2:2d:37:df:9f:ed:81:d0:14:0c:71:e4:1e:89:c1:cf:
         0b:43:45:8c:fd:69:a6:99:09:bf:4b:7e:6c:55:ce:cf:ca:43:
         4b:62:3a:8c:5f:bb:42:33:7d:89:c2:a8:5e:12:55:c9:d4:da:
         93:dd:38:ab:59:63:4a:80:0b:1d:7f:ea:bb:4f:38:3c:d3:5a:
         5b:8e:9a:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:41:58 2026 by rpki-client