Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/C6EF2736B23C11F196D963B56111F970.roa
File:                     C6EF2736B23C11F196D963B56111F970.roa (raw, json)
Hash identifier:          X84v7/y7y8X7oTJ/jOM7dRf69fEODdxWiEUDz6B0oC8=
Subject key identifier:   47:25:55:AD:9A:18:9B:4B:92:89:1E:C8:D0:EE:B9:F8:83:2F:9E:ED
Certificate issuer:       /CN=A91DF9CA/serialNumber=96D954841E8577A8DF81CF5798242B20715EA399
Certificate serial:       20
Authority key identifier: 96:D9:54:84:1E:85:77:A8:DF:81:CF:57:98:24:2B:20:71:5E:A3:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/C6EF2736B23C11F196D963B56111F970.roa
Signing time:             Wed 04 Nov 2026 01:49:10 +0000
ROA not before:           Wed 04 Nov 2026 01:49:10 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154149
IP address blocks:        163.52.19.0/24 maxlen: 24
                          203.0.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.crl
                          rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 01:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF9CA, serialNumber=96D954841E8577A8DF81CF5798242B20715EA399
        Validity
            Not Before: Nov  4 01:49:10 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aea8f16-85d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:38:ad:b5:57:4a:a4:42:c8:ba:bd:f5:a8:
                    0c:59:4f:bd:97:74:af:7f:09:f6:ec:ba:37:80:3c:
                    57:8e:00:e6:64:66:d4:ac:23:34:fc:73:bb:f5:97:
                    68:30:db:7d:5e:5a:d0:e4:c1:73:20:7b:8d:03:e4:
                    8c:0d:cc:79:7f:89:d4:2b:9d:2b:fe:f5:50:35:49:
                    78:37:9f:ed:f9:83:c4:49:3d:60:7b:78:3a:9d:ce:
                    81:e1:90:4a:1a:dd:df:13:48:17:b7:d8:13:fa:9e:
                    3a:13:85:fd:7e:e8:16:5f:51:c0:6e:fc:29:33:5a:
                    57:ee:d2:95:85:9e:35:c3:01:7b:b7:f5:50:ad:f4:
                    1d:87:c4:8c:66:58:07:61:c4:e4:f3:5a:97:52:d0:
                    ad:3f:1f:6c:45:fb:9e:37:2c:47:5c:d2:5b:de:92:
                    f4:79:9e:d7:fe:cb:ab:88:9a:6b:f2:ac:ab:cd:d1:
                    2c:51:89:fc:4b:ff:20:d3:c5:7b:98:9d:f5:a0:7b:
                    03:7f:44:68:a1:f9:1a:8a:49:74:f7:96:c2:61:3d:
                    24:b6:53:88:8d:06:29:03:8d:36:da:de:82:5b:61:
                    e5:5a:d5:d5:b8:ca:b8:68:91:cf:1b:11:b8:8e:5f:
                    a5:c2:69:c2:81:8d:d7:85:62:46:dc:00:88:e5:a8:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:25:55:AD:9A:18:9B:4B:92:89:1E:C8:D0:EE:B9:F8:83:2F:9E:ED
            X509v3 Authority Key Identifier:
                keyid:96:D9:54:84:1E:85:77:A8:DF:81:CF:57:98:24:2B:20:71:5E:A3:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltlUhB6Fd6jfgc9XmCQrIHFeo5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9CA/7EA33706B23C11F1AB3B015E6111F970/C6EF2736B23C11F196D963B56111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.19.0/24
                  203.0.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:69:f6:29:b2:b2:c9:41:d9:77:54:cb:24:ab:32:f3:46:cb:
         59:04:11:2d:33:33:50:61:a2:4f:ad:36:1d:f3:54:1d:f1:71:
         db:6d:42:a3:61:5f:dd:2a:84:f6:fc:cc:22:2f:ed:56:09:c5:
         15:7e:b0:39:c8:4e:0b:24:f0:4b:95:4e:64:1e:4f:c8:35:c2:
         40:1e:29:bf:78:ba:d3:6a:43:8e:47:4d:92:a7:37:ef:2d:43:
         25:ec:ad:75:a9:9a:a7:c1:b5:70:6b:39:59:44:54:f0:b2:72:
         80:59:41:57:7b:3c:b8:dd:cf:f3:3a:93:ad:8a:63:02:08:8d:
         2c:1a:de:b5:c3:b2:5e:2f:97:a8:e6:ed:6d:0a:5d:ac:35:b1:
         ae:90:35:59:25:02:53:ee:83:77:13:f5:a4:a6:71:a2:a1:b9:
         f0:4b:73:77:09:a9:fa:8d:b9:41:cb:85:31:c5:dd:a2:17:23:
         4e:30:80:0c:6c:13:bd:e8:11:83:40:cb:d7:83:0e:23:3a:11:
         3f:91:4c:25:c6:2e:4a:4c:d8:88:b7:8c:89:11:dd:47:de:da:
         c7:9d:33:9b:0f:ef:4c:86:fd:53:e5:41:29:dc:a8:a2:7e:e2:
         0f:77:b5:75:03:bf:72:90:a7:71:70:e6:5d:f1:c0:65:2b:7f:
         45:8c:cf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:29:45 2026 by rpki-client