Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A6C119B4221011F09599EB53C4F9AE02.roa
File:                     A6C119B4221011F09599EB53C4F9AE02.roa (raw, json)
Hash identifier:          wkIr1NgVm1LLqgGBNO86vMWo4UHDYNJ/33NzwUpgo2I=
Subject key identifier:   E2:3E:25:F1:EE:1C:35:24:A5:C7:BF:69:76:56:D2:66:EF:20:CF:00
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       6176
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A6C119B4221011F09599EB53C4F9AE02.roa
Signing time:             Thu 16 Apr 2026 20:25:28 +0000
ROA not before:           Thu 16 Apr 2026 20:25:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     17487
IP address blocks:        218.188.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24950 (0x6176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
        Validity
            Not Before: Apr 16 20:25:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69e145b7-51d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:51:e9:1e:d3:94:52:be:a0:c1:17:45:b4:
                    f8:30:f2:6a:e0:91:db:1a:23:35:9c:3d:00:ae:f5:
                    58:ff:6c:4d:3d:52:2d:45:21:61:4a:4c:ae:4c:54:
                    53:cd:02:c6:53:ea:67:90:7a:cb:22:3a:3d:39:d4:
                    31:7c:ad:9e:3f:4b:bf:37:19:d6:69:bf:de:e5:ca:
                    aa:1a:31:be:ce:1b:8f:b2:4f:f8:63:24:c3:f0:b3:
                    2a:2e:af:f2:6b:9e:92:f9:54:ed:4f:15:a2:b0:1e:
                    00:20:06:13:8b:c8:1e:7b:75:83:66:72:59:39:b6:
                    53:24:f9:ab:46:cd:78:57:56:40:f0:8e:4d:4d:91:
                    20:af:7d:f0:0b:dc:08:69:de:79:b1:94:7f:7a:75:
                    3b:c6:d5:9c:e2:86:67:41:dd:1a:91:c4:7d:83:48:
                    a6:9f:b3:98:e5:a2:32:31:03:0e:52:9c:fb:c5:21:
                    b8:5e:9a:b6:de:43:9a:80:52:fd:b7:c5:d1:12:a7:
                    44:5f:3e:22:95:66:d8:44:2d:9d:55:13:f8:e2:fe:
                    1c:c4:d5:ba:a1:f3:db:5f:f3:bd:88:59:12:72:c7:
                    e5:34:f0:1d:26:1b:a0:d5:10:89:a3:a2:e4:a9:d5:
                    b4:27:eb:44:9f:50:e5:9a:85:91:1e:81:ae:84:c3:
                    83:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3E:25:F1:EE:1C:35:24:A5:C7:BF:69:76:56:D2:66:EF:20:CF:00
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A6C119B4221011F09599EB53C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.188.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:3b:73:18:6d:a1:fc:e1:7a:51:2e:16:5c:21:7f:4a:a2:cb:
         a1:26:02:7a:e4:14:54:00:d6:5a:45:5a:17:6b:0f:7f:b3:81:
         67:e1:6f:c1:ba:9f:3f:bb:f7:aa:e3:fc:58:18:07:ed:aa:16:
         90:95:55:71:e4:97:88:75:88:91:1a:bf:20:e1:aa:ec:d0:b9:
         e5:39:1b:d6:ab:ba:ad:e2:eb:09:a6:61:78:f3:a8:a4:67:4a:
         e6:54:ee:24:9c:f2:34:54:e2:14:a5:25:a3:55:de:2a:ce:52:
         b4:c7:ba:e9:91:ad:f7:ee:60:f4:9e:bb:b1:aa:a7:e3:b9:c3:
         94:4d:e6:cf:89:e6:b0:f2:f8:15:10:bf:f1:8b:42:47:b4:cb:
         6e:88:8d:7e:6a:e3:20:0c:c1:20:36:06:e0:a0:a2:e0:d4:5c:
         4c:db:9b:5c:e7:d0:67:b7:d8:07:07:29:96:61:c1:f6:7b:99:
         91:c0:93:0d:55:72:0d:a9:89:f9:3c:15:19:74:14:35:4b:ab:
         3a:cf:78:0a:63:ae:7d:af:eb:9b:76:28:a7:70:a9:7c:e5:8f:
         dd:e9:02:ed:af:42:e3:3e:de:0f:90:65:2d:35:ef:6c:c0:24:
         d7:e5:0b:b3:a8:72:aa:b0:4b:df:2f:07:45:45:fc:15:1e:ff:
         a6:f9:d0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:18:53 2026 by rpki-client