Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/9D9BBE06B11711F1804AF5374511F970.roa
File:                     9D9BBE06B11711F1804AF5374511F970.roa (raw, json)
Hash identifier:          /QR8B/WV3tnFJ5ZLzdG6QBvzbzr2LZpMKJKxqq3gaHs=
Subject key identifier:   81:AC:AF:46:E0:C1:8D:8D:30:4F:B7:78:0E:5C:86:C8:84:DA:D4:10
Certificate issuer:       /CN=A91C51D7/serialNumber=CDC34B9492907B1A59EE6A00B87B4FC21926AB2F
Certificate serial:       05
Authority key identifier: CD:C3:4B:94:92:90:7B:1A:59:EE:6A:00:B8:7B:4F:C2:19:26:AB:2F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/9D9BBE06B11711F1804AF5374511F970.roa
Signing time:             Wed 16 Sep 2026 06:38:57 +0000
ROA not before:           Wed 16 Sep 2026 06:38:57 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     3918
IP address blocks:        156.149.128.0/24 maxlen: 24
                          161.126.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.crl
                          rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:19:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C51D7, serialNumber=CDC34B9492907B1A59EE6A00B87B4FC21926AB2F
        Validity
            Not Before: Sep 16 06:38:57 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6aaa3981-b062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:d9:20:06:89:a8:af:b8:e6:49:4c:12:c1:
                    58:5e:94:7c:75:f3:77:b0:df:68:53:1c:12:39:ed:
                    29:e8:ce:dc:cc:fc:2e:4b:23:53:32:6b:8b:66:09:
                    e9:62:ce:e2:da:ca:3f:55:ae:f4:a5:1d:ae:5f:e7:
                    87:8b:98:4f:a6:91:ae:c2:be:3f:29:ff:53:0b:33:
                    21:b5:31:0e:50:7e:a9:0e:44:93:31:6c:17:46:58:
                    f6:0a:87:4f:7c:e4:fc:7c:fe:7c:4d:b7:73:c1:9c:
                    4b:ab:bc:a8:7c:9c:93:96:d0:9c:93:59:8f:9c:e7:
                    41:5b:38:55:ce:8a:e2:a1:60:2c:ad:06:9f:dc:db:
                    5d:1d:a5:92:88:40:ba:d8:64:5d:c3:38:6c:97:a3:
                    9c:c5:b7:a9:49:07:ac:9c:76:5f:25:a3:ae:3b:dc:
                    ad:b7:d6:74:56:95:4b:48:ab:c7:b1:13:63:ab:f5:
                    85:90:81:cf:d8:fe:cb:7e:99:4d:c7:37:86:48:31:
                    8d:6f:8c:5b:d2:54:39:f5:ea:3a:6d:06:92:77:e5:
                    4e:3b:18:d8:10:7a:cf:32:ec:82:7c:e8:f0:fd:97:
                    66:10:7d:8b:2f:43:2c:af:2d:ec:39:55:e0:7d:05:
                    a0:6a:26:b8:5e:85:c1:c6:1c:68:01:ed:52:f4:66:
                    d5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AC:AF:46:E0:C1:8D:8D:30:4F:B7:78:0E:5C:86:C8:84:DA:D4:10
            X509v3 Authority Key Identifier:
                keyid:CD:C3:4B:94:92:90:7B:1A:59:EE:6A:00:B8:7B:4F:C2:19:26:AB:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/9D9BBE06B11711F1804AF5374511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.149.128.0/24
                  161.126.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:41:48:60:ca:4a:4e:e4:33:7a:c3:aa:f8:a1:76:a5:12:32:
         f8:28:09:b6:61:22:f1:cd:86:90:0b:ec:e6:f1:da:f8:91:ef:
         e9:fe:54:b5:c4:ed:df:fc:c3:27:62:ef:e6:97:fe:9a:61:f3:
         3b:e8:80:0e:45:e3:82:db:91:e7:16:8d:f7:ee:c4:22:ef:b8:
         98:d9:02:69:c1:a7:63:76:3f:02:1f:6d:7f:e4:4e:03:bf:a6:
         f2:b6:49:e3:ab:86:46:c0:e0:2d:44:08:78:0a:ea:14:1e:2d:
         7b:dd:76:72:69:c1:23:fa:a8:9d:d2:9e:e3:42:ff:0a:0d:4f:
         65:c2:30:9c:a7:02:cc:7b:a6:4d:e4:00:25:84:7c:6c:77:1d:
         3f:9b:72:65:24:91:0c:4c:f2:3b:d6:35:5b:53:74:fa:72:0b:
         c9:dd:ff:39:72:e0:d4:60:16:41:fb:a7:f3:b8:fe:7f:ae:e2:
         0a:6f:20:d1:1a:2c:e8:56:e9:f3:e8:20:51:2a:b0:13:26:06:
         c8:2a:37:82:af:81:9f:1a:50:6c:be:13:45:71:0b:93:2f:f0:
         9f:0d:5c:7d:8f:f8:70:8a:9b:f6:4a:87:8c:eb:99:41:ed:63:
         09:34:25:e4:0f:42:09:d7:31:56:b8:0d:de:46:09:c6:da:e6:
         cd:b2:6b:f8
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NTFENzExMC8GA1UEBRMoQ0RDMzRCOTQ5MjkwN0IxQTU5RUU2QTAwQjg3QjRGQzIx
OTI2QUIyRjAeFw0yNjA5MTYwNjM4NTdaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYWEzOTgxLWIwNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLx9kgBomor7jmSUwSwVhelHx183ew32hTHBI57SnoztzM/C5LI1Mya4tmCeli
zuLayj9VrvSlHa5f54eLmE+mka7Cvj8p/1MLMyG1MQ5QfqkORJMxbBdGWPYKh098
5Px8/nxNt3PBnEurvKh8nJOW0JyTWY+c50FbOFXOiuKhYCytBp/c210dpZKIQLrY
ZF3DOGyXo5zFt6lJB6ycdl8lo6473K231nRWlUtIq8exE2Or9YWQgc/Y/st+mU3H
N4ZIMY1vjFvSVDn16jptBpJ35U47GNgQes8y7IJ86PD9l2YQfYsvQyyvLew5VeB9
BaBqJrhehcHGHGgB7VL0ZtXDAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUgayvRuDB
jY0wT7d4DlyGyITa1BAwHwYDVR0jBBgwFoAUzcNLlJKQexpZ7moAuHtPwhkmqy8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1MUQ3L0JCRUU2MkY0QjEw
OTExRjFBQUI4MkIyRDQwMTFGOTcwL3pjTkxsSktRZXhwWjdtb0F1SHRQd2hrbXF5
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvemNOTGxKS1FleHBaN21vQXVIdFB3aGttcXk4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTFENy9CQkVFNjJGNEIxMDkxMUYxQUFCODJCMkQ0MDExRjk3MC85RDlCQkUwNkIx
MTcxMUYxODA0QUY1Mzc0NTExRjk3MC5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBACclYADBAChfrUwDQYJKoZIhvcNAQELBQADggEBAH1BSGDKSk7kM3rD
qvihdqUSMvgoCbZhIvHNhpAL7Obx2viR7+n+VLXE7d/8wydi7+aX/pph8zvogA5F
44LbkecWjffuxCLvuJjZAmnBp2N2PwIfbX/kTgO/pvK2SeOrhkbA4C1ECHgK6hQe
LXvddnJpwSP6qJ3SnuNC/woNT2XCMJynAsx7pk3kACWEfGx3HT+bcmUkkQxM8jvW
NVtTdPpyC8nd/zly4NRgFkH7p/O4/n+u4gpvINEaLOhW6fPoIFEqsBMmBsgqN4Kv
gZ8aUGy+E0VxC5Mv8J8NXH2P+HCKm/ZKh4zrmUHtYwk0JeQPQgnXMVa4Dd5GCcba
5s2ya/g=
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:36 2026 by rpki-client