Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/A6ACEFDA968011F1B17E4A773E11F970.roa
File:                     A6ACEFDA968011F1B17E4A773E11F970.roa (raw, json)
Hash identifier:          3gCHngJzVnskVVhK1jUp7VtMejxIWQ1lkVTaECuXDhg=
Subject key identifier:   D9:0D:BB:BD:1A:95:5A:AD:D1:77:DA:75:29:A1:E1:71:2E:F2:D9:4D
Certificate issuer:       /CN=A91DD92D/serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Certificate serial:       7A
Authority key identifier: E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/A6ACEFDA968011F1B17E4A773E11F970.roa
Signing time:             Tue 08 Sep 2026 05:35:19 +0000
ROA not before:           Tue 08 Sep 2026 05:35:19 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     17644
IP address blocks:        163.128.216.0/24 maxlen: 24
                          163.128.217.0/24 maxlen: 24
                          2402:5720::/32 maxlen: 32
                          2402:5720:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
                          rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD92D, serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
        Validity
            Not Before: Sep  8 05:35:19 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a9f9e97-38e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:22:0a:76:24:14:26:6b:91:b7:39:fa:ec:6a:
                    5c:90:90:45:23:e5:3f:69:c6:cc:98:7c:a0:35:20:
                    42:42:fd:76:4a:b7:98:1a:c6:06:97:71:49:c0:70:
                    4f:4e:a4:dd:b1:5c:95:6e:5b:58:02:fe:08:e8:00:
                    c3:1f:ff:38:17:0a:2a:c7:15:ab:c7:67:ad:32:e4:
                    b7:6e:5a:71:05:f4:23:bd:72:3d:a1:76:ff:73:25:
                    4d:cb:32:c8:2a:36:15:1c:0c:bb:d1:66:56:ae:91:
                    1b:9f:15:a9:25:d4:59:18:c2:5e:1b:93:1f:f9:e7:
                    24:ed:d6:c0:f0:30:a9:7f:ce:0e:d4:03:c0:e9:52:
                    5f:b6:2b:15:45:c4:f6:6a:e4:7c:1c:48:d8:21:1b:
                    3d:9b:45:a7:21:c5:bd:50:62:41:8e:d3:25:35:93:
                    52:27:4f:dd:a6:46:f6:ab:9b:7a:b0:cb:ff:ed:52:
                    5b:44:d1:6d:e3:45:42:4e:e0:ff:cb:97:db:cd:4a:
                    15:03:f1:86:a9:3c:24:10:5d:13:3e:86:92:f2:cb:
                    51:1e:7a:72:2f:c4:9a:81:5e:3e:57:bf:b5:a3:29:
                    51:f1:62:ec:90:44:c4:7c:c6:e3:a2:5c:e8:6e:46:
                    00:bb:b8:d4:30:4b:13:8c:c0:0c:7a:2f:79:e1:fb:
                    6b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0D:BB:BD:1A:95:5A:AD:D1:77:DA:75:29:A1:E1:71:2E:F2:D9:4D
            X509v3 Authority Key Identifier:
                keyid:E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/A6ACEFDA968011F1B17E4A773E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.216.0/23
                IPv6:
                  2402:5720::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:4b:56:76:42:c6:df:0d:73:5c:85:c5:b2:c3:7a:2d:2e:ce:
         43:70:af:97:11:de:33:b7:6e:21:a1:e7:55:4c:a0:cf:71:e3:
         10:49:dd:35:d4:84:47:74:27:de:5a:a8:52:87:4e:a6:1d:ef:
         62:41:d5:3c:1b:84:31:3a:55:78:36:29:e3:a4:ab:da:25:40:
         9d:d4:28:85:df:0b:93:68:9b:88:fa:78:a6:16:24:68:cb:0c:
         03:b1:03:6a:ac:c6:04:d1:ed:00:69:45:27:00:5d:cd:c2:7f:
         a9:9a:c9:ea:be:2f:73:10:3d:ac:54:f7:ab:68:5c:43:2c:df:
         d1:02:de:f9:c9:7a:3b:7a:06:19:de:98:61:5f:2f:5e:3e:37:
         9e:30:e9:63:5e:05:cd:1d:a2:96:0b:26:17:39:f8:ff:41:e1:
         1e:ce:50:a5:f2:07:57:07:20:9f:48:08:bf:59:b9:5e:44:3b:
         d6:bf:da:62:c3:f7:59:7a:56:da:18:1c:d3:50:fe:4a:e3:cb:
         81:f2:3d:b8:3d:3f:be:08:85:08:13:fd:98:5b:00:6e:4b:90:
         10:03:4a:12:0a:dd:fa:cc:00:34:33:35:52:9a:8d:dd:1a:00:
         a1:e7:df:6a:a5:10:9b:c1:32:36:98:78:83:19:b1:97:59:31:
         96:a3:52:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:17:03 2026 by rpki-client