Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/A80352FA7F2711F0AC85D327C4F9AE02.roa
File:                     A80352FA7F2711F0AC85D327C4F9AE02.roa (raw, json)
Hash identifier:          lvMTiY/rJNBKMXIOq2j50bfuE4IjNSp5H2Ku0pIODV4=
Subject key identifier:   1B:06:57:D6:2E:89:A4:72:4F:BB:E0:5E:EC:2F:BC:3C:A8:9A:A6:CC
Certificate issuer:       /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Certificate serial:       CE
Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/A80352FA7F2711F0AC85D327C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 07:57:11 +0000
ROA not before:           Thu 03 Sep 2026 07:57:11 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154162
IP address blocks:        49.143.250.0/23 maxlen: 24
                          2402:2520::/48 maxlen: 48
                          2402:2520:1000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
                          rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
        Validity
            Not Before: Sep  3 07:57:11 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a992857-5e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:51:ee:fe:ad:bd:b2:74:20:95:f6:d2:51:78:
                    a4:bb:4b:54:5f:1a:a7:b0:f4:38:a8:00:f9:9e:43:
                    56:56:23:83:a2:40:de:2a:24:67:85:32:42:17:23:
                    56:2b:56:0c:d5:0b:69:bf:d9:dc:85:78:6e:98:21:
                    27:74:0c:01:d1:84:0d:96:66:c8:2e:6e:f2:68:68:
                    1f:e1:6d:42:55:e0:ae:b3:e5:08:aa:6b:b9:c7:f1:
                    30:c6:d1:7d:2e:69:70:d9:7a:e5:21:86:4f:29:5d:
                    e1:da:f2:14:90:a1:61:2e:0e:c2:29:5c:4c:df:5d:
                    13:df:ac:c6:0c:a5:95:36:65:4e:70:f0:04:e1:1e:
                    e8:3f:56:4b:7c:af:b9:29:4d:da:f4:40:83:49:a6:
                    3e:4c:70:c2:c4:a5:d7:ae:93:8b:af:e9:c1:25:e6:
                    2f:25:61:35:40:02:3a:2f:bc:99:73:6f:9b:1b:93:
                    88:ee:3a:37:08:40:c2:85:da:54:d4:1d:4e:cd:55:
                    7e:d5:f8:8c:5b:bd:14:ad:03:fb:49:e8:1c:ba:87:
                    b8:29:d6:39:79:3a:ad:7a:56:e8:09:db:5f:8f:67:
                    3f:09:f5:ae:61:c3:59:76:5c:60:00:27:f0:88:6e:
                    ac:d6:df:11:04:ba:5d:32:b6:c1:88:a5:5a:95:04:
                    33:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:06:57:D6:2E:89:A4:72:4F:BB:E0:5E:EC:2F:BC:3C:A8:9A:A6:CC
            X509v3 Authority Key Identifier:
                keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/A80352FA7F2711F0AC85D327C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.143.250.0/23
                IPv6:
                  2402:2520::/48
                  2402:2520:1000::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:ae:f5:b6:83:7d:ad:1a:de:c8:e4:ef:11:57:93:9e:83:74:
         d1:e2:53:3c:8a:f5:3b:f6:89:4e:31:e5:58:87:6a:a5:db:b8:
         ef:aa:e4:18:47:6b:1e:9e:16:3b:d6:7e:f8:96:d7:19:e9:66:
         c8:9f:dd:2b:f9:a5:c1:f6:da:cb:84:31:f6:a3:09:ae:87:d1:
         f3:0c:60:81:d8:b6:7a:a8:e5:3a:46:d4:f6:df:09:73:b6:0c:
         73:60:1b:ad:60:76:5a:c1:d8:2c:97:ed:fe:fb:64:71:d0:d2:
         20:0b:bd:6a:7b:4f:c5:92:3c:9c:80:5a:9d:61:bc:df:a6:98:
         d7:ad:2f:32:a6:a7:b5:df:80:1c:11:d1:80:34:e3:91:31:b6:
         da:f5:12:b4:16:a9:01:ba:4b:ad:13:8b:1c:e1:01:72:7b:5f:
         07:fa:57:48:01:80:59:f5:04:54:0a:51:18:33:47:a4:d9:b9:
         e0:0a:c9:a6:02:33:48:00:18:02:3f:9a:b0:d1:8c:5f:e1:d9:
         d0:92:4a:ef:f9:c8:51:da:d7:df:94:97:4c:ab:18:08:ae:60:
         8f:07:44:73:a1:79:82:d0:11:5d:5e:79:b4:da:77:36:fd:70:
         d7:89:f8:42:fd:e0:2b:c4:4f:da:12:dd:fe:ce:df:4a:e8:68:
         ef:2f:91:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:12:49 2026 by rpki-client