Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa
File:                     BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa (raw, json)
Hash identifier:          qYFfAzLJ4mEmxJK5ZBfYrrSeoianiaMz/Ln8zWmMrHU=
Subject key identifier:   73:E3:83:AF:BE:CD:36:3A:8D:B4:E5:6E:8C:28:FF:8A:E0:90:32:09
Certificate issuer:       /CN=A91B49F2/serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
Certificate serial:       0F16
Authority key identifier: 1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa
Signing time:             Sun 02 Aug 2026 18:35:05 +0000
ROA not before:           Sun 02 Aug 2026 18:35:05 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     55944
IP address blocks:        216.183.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl
                          rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3862 (0xf16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B49F2, serialNumber=1BBB297BC828166AA497D37C7265BFB601AE0360
        Validity
            Not Before: Aug  2 18:35:05 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6f8dd9-bcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5a:2c:2c:59:b2:88:df:fd:44:c5:f4:53:ec:
                    0b:f1:28:89:88:e0:d3:6b:e5:5e:e3:6e:73:12:46:
                    60:52:ac:95:59:a8:64:44:90:db:55:6e:42:91:77:
                    cc:63:b8:f4:7a:a7:5c:e5:be:0a:f7:05:b1:06:12:
                    ca:d4:36:76:8f:4a:86:9c:19:12:16:7e:79:ac:82:
                    ea:41:2b:5f:3d:0b:5c:6a:db:9b:ca:97:00:dd:12:
                    88:ee:b7:17:ca:ef:1f:02:83:cd:5e:b6:67:fc:a0:
                    d9:24:7b:9c:17:0c:b8:6f:97:96:11:f9:ca:67:a6:
                    c1:72:c5:8c:8d:61:8c:59:fb:42:35:3d:a1:fc:95:
                    16:a0:e1:bd:b3:42:24:88:9b:c4:e0:d1:2c:bf:32:
                    55:fc:ea:7f:4e:d1:9c:6e:ec:7e:19:1a:12:fc:bb:
                    18:ee:e2:cd:67:65:e3:44:4e:b3:bd:e9:8d:59:ea:
                    ff:97:d8:58:63:49:57:cb:f3:2a:99:f9:61:16:2e:
                    d9:d1:e3:89:16:d9:78:77:f9:af:8f:0d:d4:46:fe:
                    3b:3d:30:fc:6a:e2:51:19:0d:92:9d:29:01:57:fd:
                    c2:58:09:03:69:88:5d:6d:87:3d:ba:9f:4a:a1:e4:
                    1e:59:f8:bc:c4:61:ca:83:c3:2c:92:01:1b:8d:e1:
                    5f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E3:83:AF:BE:CD:36:3A:8D:B4:E5:6E:8C:28:FF:8A:E0:90:32:09
            X509v3 Authority Key Identifier:
                keyid:1B:BB:29:7B:C8:28:16:6A:A4:97:D3:7C:72:65:BF:B6:01:AE:03:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/G7spe8goFmqkl9N8cmW_tgGuA2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G7spe8goFmqkl9N8cmW_tgGuA2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/7C06E79CA6EE11E985F3B011C4F9AE02/BA0CC7060A3D11EB82ECEA4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:80:0b:29:f8:ef:df:4f:4e:72:b1:a8:d3:59:ab:b0:14:a3:
         84:8f:64:bd:12:ed:9d:5b:fc:0c:72:5d:ab:e1:5b:82:e4:be:
         e8:a6:1d:67:bf:27:2f:1c:e9:e6:93:9c:d2:0c:07:82:52:3e:
         ff:16:ab:ca:4b:cf:35:81:47:8d:88:f0:28:b5:7c:a6:c1:ee:
         27:02:67:c6:4f:35:8f:6c:b8:7b:98:d0:b1:a7:97:d2:a1:aa:
         49:c6:32:a5:63:79:fe:62:c3:7d:73:da:98:17:07:50:2d:71:
         d0:c8:a8:b9:df:6c:77:a2:9c:f9:fe:ec:f7:3a:7e:ab:54:f1:
         bd:10:75:1c:78:dc:81:90:bc:c7:81:c6:54:9a:ac:e6:81:2f:
         81:11:9c:f0:eb:6c:a0:81:bb:97:b0:d9:de:ca:0a:27:ae:2a:
         1f:ae:ce:d8:a8:e2:0d:e7:c4:fb:1e:c8:bd:dd:d2:7f:5b:06:
         47:01:c0:e7:e3:c1:ef:cf:07:07:c3:24:2c:73:30:90:6b:65:
         ea:31:2b:46:35:e0:66:c9:c9:e0:56:ae:17:2a:29:76:21:23:
         e0:55:4d:ab:20:12:3f:ef:f6:af:cc:3c:c4:65:e9:f3:20:91:
         4a:20:6a:12:1b:36:0d:7d:82:cb:ee:1c:9d:97:de:01:43:59:
         89:9c:22:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:04:15 2026 by rpki-client