Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/1A0F60ACB5A811F1A1C47BD53711F970.roa
File:                     1A0F60ACB5A811F1A1C47BD53711F970.roa (raw, json)
Hash identifier:          zo7ARhMf7sXcb1Wzo/WGHBDItpWzhIj8mr4YHAO8djw=
Subject key identifier:   4C:0C:FF:2F:F9:19:BF:E9:64:2A:54:12:66:A7:75:68:DE:B0:5C:1A
Certificate issuer:       /CN=A91E5988/serialNumber=82F6155BB6A79A682BC1B6E4CED17EEC7B545E31
Certificate serial:       37
Authority key identifier: 82:F6:15:5B:B6:A7:9A:68:2B:C1:B6:E4:CE:D1:7E:EC:7B:54:5E:31
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gvYVW7anmmgrwbbkztF-7HtUXjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/1A0F60ACB5A811F1A1C47BD53711F970.roa
Signing time:             Mon 21 Sep 2026 10:35:03 +0000
ROA not before:           Mon 21 Sep 2026 10:35:02 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     147273
IP address blocks:        162.4.240.0/24 maxlen: 24
                          162.4.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.crl
                          rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gvYVW7anmmgrwbbkztF-7HtUXjE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5988, serialNumber=82F6155BB6A79A682BC1B6E4CED17EEC7B545E31
        Validity
            Not Before: Sep 21 10:35:02 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6ab10856-8c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:50:2c:33:1e:ac:70:19:f5:82:a9:25:71:
                    94:46:68:ca:b1:c9:13:6c:ea:a1:a2:bd:64:93:69:
                    68:f3:ca:ab:be:9b:30:73:c8:ee:19:87:f6:b0:d6:
                    68:23:bf:b0:b7:09:11:8b:1a:4f:9b:5f:04:23:15:
                    cd:5a:d2:37:d2:d8:e2:ee:d4:03:62:74:f0:fc:c7:
                    86:8b:4a:5f:5f:e6:f7:be:52:35:98:93:5b:9f:a9:
                    05:5a:de:6b:fb:38:e4:8d:99:e6:9d:91:22:cc:d5:
                    18:fe:bf:4c:65:1a:7b:de:dd:be:65:af:37:5b:87:
                    38:86:b8:90:d1:43:e6:88:42:91:e5:25:4c:df:1e:
                    57:e1:2f:d9:70:97:84:cf:cd:86:5f:18:b5:0c:ff:
                    81:b3:49:ab:42:f1:98:cb:4a:e1:3b:f0:49:00:c2:
                    d8:2c:90:c3:c9:c6:d2:84:d8:2f:75:26:79:48:7a:
                    7d:8a:4e:83:49:cc:10:17:91:52:8e:ef:e0:d4:8b:
                    63:fb:0e:7a:c9:a6:04:74:d5:39:4b:bb:ea:70:34:
                    e9:23:9b:e6:bb:35:99:3f:94:25:c0:06:43:4f:d2:
                    f0:e5:ac:4c:70:41:e4:3e:d0:1f:e4:40:70:4f:16:
                    44:29:71:72:a8:20:e1:42:0c:cc:d9:43:a0:26:5a:
                    bc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0C:FF:2F:F9:19:BF:E9:64:2A:54:12:66:A7:75:68:DE:B0:5C:1A
            X509v3 Authority Key Identifier:
                keyid:82:F6:15:5B:B6:A7:9A:68:2B:C1:B6:E4:CE:D1:7E:EC:7B:54:5E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gvYVW7anmmgrwbbkztF-7HtUXjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/1A0F60ACB5A811F1A1C47BD53711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:7c:9a:f9:5a:35:d2:b8:3e:3f:6b:60:0e:f6:72:e9:54:90:
         ec:7c:79:e9:b0:f8:ba:46:19:64:83:04:99:0a:0c:85:9d:9c:
         79:e4:6e:a8:0e:8a:ad:0a:94:5c:12:49:5b:2e:e6:90:68:e1:
         29:f3:56:58:fd:a4:44:06:75:c8:30:c4:85:dd:88:17:84:db:
         37:35:99:dd:5b:20:5e:96:a3:ff:9a:2f:56:a5:91:6c:a0:e1:
         eb:6a:e2:ca:67:36:b2:36:ea:f2:e5:ac:41:46:96:f9:56:26:
         bd:80:a7:6e:90:3e:53:19:a4:e1:78:ab:62:75:a3:0a:bf:ac:
         fe:ff:34:7b:7e:27:96:89:54:4c:1c:1b:e7:39:54:d1:d9:bc:
         d7:7e:a7:31:c8:ca:a1:ff:20:38:b1:71:1e:25:54:15:66:a6:
         e5:3a:17:f5:e6:42:e3:25:fc:62:4b:71:e8:ca:c0:f5:16:31:
         7d:20:85:bb:f5:3c:a1:c6:d6:b6:95:55:5c:03:34:5f:97:da:
         72:a9:a2:e3:db:fd:de:dc:cb:c6:96:19:97:c1:a1:6d:2f:1f:
         82:93:18:6d:08:72:77:0b:ea:52:c6:75:11:8c:b2:c9:f4:09:
         c7:21:9e:73:62:49:cf:10:d5:39:12:2b:c0:fa:39:40:e2:86:
         46:dd:76:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:42:19 2026 by rpki-client