Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/2B17862A82EE11EAB170FD4BC4F9AE02.roa
File:                     2B17862A82EE11EAB170FD4BC4F9AE02.roa (raw, json)
Hash identifier:          z7n2Ro4Gkp0kvswymZ3NmSJNOHu0kHCX/BYv3spailI=
Subject key identifier:   3B:B2:C4:72:48:7C:80:5D:B5:2D:57:B7:87:35:06:62:5C:67:B4:DB
Certificate issuer:       /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
Certificate serial:       0DFE
Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/2B17862A82EE11EAB170FD4BC4F9AE02.roa
Signing time:             Wed 10 Jun 2026 18:21:09 +0000
ROA not before:           Wed 10 Jun 2026 18:21:09 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     18197
IP address blocks:        116.68.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl
                          rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3582 (0xdfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D66A0, serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99
        Validity
            Not Before: Jun 10 18:21:09 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a29ab15-6444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:49:2a:5d:1b:fc:ac:79:00:59:96:ea:0c:03:
                    37:38:9c:e0:aa:72:1b:61:1d:b8:dd:7a:56:cb:35:
                    d2:7a:de:bf:8e:3d:f5:83:c5:83:54:37:c1:78:e6:
                    b8:9b:1e:53:6a:1b:09:3d:48:0b:d6:3d:31:78:c5:
                    b9:c7:cf:91:58:a4:47:a1:93:44:e7:1a:76:66:88:
                    d0:16:8e:9e:39:3d:e2:45:6d:5c:31:ce:eb:7b:2f:
                    b2:8d:89:9c:70:6e:cd:9e:8c:5f:46:75:f1:2c:28:
                    22:68:68:11:90:a8:04:af:01:dc:9b:ce:4b:bd:92:
                    90:e5:53:06:a8:a7:b8:3e:1e:f9:fb:a4:c1:f1:be:
                    b4:b9:8d:4f:a5:df:86:f9:a1:ba:95:72:9a:e6:db:
                    b9:88:52:e1:35:28:92:e0:ec:3b:a1:0a:4c:d0:45:
                    75:cf:54:8c:b5:f3:22:df:6f:37:4f:00:3e:c1:25:
                    1f:ca:e0:2a:e4:37:f2:12:eb:da:05:ed:25:35:b7:
                    f0:e4:37:16:f4:37:b6:e6:fa:da:9d:1f:cb:b3:6d:
                    e8:0e:15:31:27:9c:e3:20:40:d1:8b:9d:b5:79:12:
                    ce:12:48:b3:15:23:12:18:94:df:5a:fd:37:c7:f9:
                    66:97:a8:79:b4:e6:1b:29:a3:d1:23:5d:ee:09:2e:
                    c3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B2:C4:72:48:7C:80:5D:B5:2D:57:B7:87:35:06:62:5C:67:B4:DB
            X509v3 Authority Key Identifier:
                keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/2B17862A82EE11EAB170FD4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:42:e8:6d:e2:58:25:1d:86:d8:19:73:a1:10:9e:64:a2:b7:
         6d:7e:94:0d:b4:ae:b2:39:44:83:0e:bd:16:3f:68:c3:a4:4e:
         90:08:46:ba:7a:70:f7:ac:e2:f2:6a:6e:b6:75:2e:52:76:e3:
         3d:59:c4:e4:13:ad:b7:b7:80:02:2c:b6:69:bb:c7:a4:51:3b:
         01:75:fc:3f:0f:a9:e5:f6:68:89:3d:2b:f5:59:56:dd:70:4d:
         68:e0:5f:a5:78:53:a6:50:f3:a9:dd:78:ed:0f:cc:58:ea:c5:
         e1:d4:ff:c2:c7:f4:71:48:58:ca:c5:e6:94:af:08:5d:cc:cf:
         bd:21:f5:1b:dc:a5:fc:cb:0e:16:e1:47:0a:d0:aa:6d:c5:91:
         45:25:31:b3:f6:57:b6:f7:41:61:14:19:e9:da:f6:89:22:ae:
         b0:ae:91:25:ac:08:56:88:89:1f:81:a3:d8:eb:69:27:57:55:
         a5:c1:30:7a:ec:6e:21:39:71:9f:d1:17:86:b2:15:7b:4d:b3:
         dc:7e:d3:25:47:c1:71:e4:23:1d:52:ed:b3:06:15:85:04:7b:
         11:f1:18:75:a8:fd:8e:fe:9d:1f:5b:0b:8c:d0:ad:c6:b3:66:
         db:a7:c2:ee:bb:02:41:53:05:57:21:be:26:4b:34:69:4f:66:
         c8:5c:b4:43
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDY2QTAxMTAvBgNVBAUTKDlDOTRBNURDQ0Y2QTY1QjY4OTg2QzcwNDM4NDZDNzIx
QkQzM0JFOTkwHhcNMjYwNjEwMTgyMTA5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI5YWIxNS02NDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjUkqXRv8rHkAWZbqDAM3OJzgqnIbYR243XpWyzXSet6/jj31g8WDVDfBeOa4
mx5TahsJPUgL1j0xeMW5x8+RWKRHoZNE5xp2ZojQFo6eOT3iRW1cMc7rey+yjYmc
cG7NnoxfRnXxLCgiaGgRkKgErwHcm85LvZKQ5VMGqKe4Ph75+6TB8b60uY1Ppd+G
+aG6lXKa5tu5iFLhNSiS4Ow7oQpM0EV1z1SMtfMi3283TwA+wSUfyuAq5DfyEuva
Be0lNbfw5DcW9De25vranR/Ls23oDhUxJ5zjIEDRi521eRLOEkizFSMSGJTfWv03
x/lml6h5tOYbKaPRI13uCS7D4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDuyxHJI
fIBdtS1Xt4c1BmJcZ7TbMB8GA1UdIwQYMBaAFJyUpdzPamW2iYbHBDhGxyG9M76Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjZBMC82MjVGRjcyNkQ5
RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpiYUpoc2NFT0ViSEliMHp2
cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25KU2wzTTlxWmJhSmhzY0VPRWJISWIwenZway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDY2QTAvNjI1RkY3MjZEOUU3MTFFOTg4MDU0MDE2QzRGOUFFMDIvMkIxNzg2MkE4
MkVFMTFFQUIxNzBGRDRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAdESfMA0GCSqGSIb3DQEBCwUAA4IBAQCfQuht4lglHYbYGXOhEJ5k
ordtfpQNtK6yOUSDDr0WP2jDpE6QCEa6enD3rOLyam62dS5SduM9WcTkE623t4AC
LLZpu8ekUTsBdfw/D6nl9miJPSv1WVbdcE1o4F+leFOmUPOp3XjtD8xY6sXh1P/C
x/RxSFjKxeaUrwhdzM+9IfUb3KX8yw4W4UcK0KptxZFFJTGz9le290FhFBnp2vaJ
Iq6wrpElrAhWiIkfgaPY62knV1WlwTB67G4hOXGf0ReGshV7TbPcftMlR8Fx5CMd
Uu2zBhWFBHsR8Rh1qP2O/p0fWwuM0K3Gs2bbp8LuuwJBUwVXIb4mSzRpT2bIXLRD
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:42 2026 by rpki-client