Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/267A24046E7D11EAADB09659C4F9AE02.roa
File:                     267A24046E7D11EAADB09659C4F9AE02.roa (raw, json)
Hash identifier:          Rc31mOjrd8TQ2Wg72zaALLhrVFIwej72vnE0huDI83E=
Subject key identifier:   CE:D1:5E:AD:76:F9:06:2A:EF:10:4A:94:86:C5:F4:AE:FA:80:A8:C3
Certificate issuer:       /CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338
Certificate serial:       0AC0
Authority key identifier: 84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/267A24046E7D11EAADB09659C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:28:55 +0000
ROA not before:           Tue 06 May 2025 19:59:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56266
IP address blocks:        203.119.90.0/23 maxlen: 24
                          2001:dd8:10::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl
                          rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2752 (0xac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114FFB, serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338
        Validity
            Not Before: May  6 19:59:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a406d6-50b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8a:3e:9d:f7:aa:f2:b0:f8:91:53:de:02:08:
                    d5:5d:d6:10:2e:29:7c:a8:3b:79:a6:82:eb:06:16:
                    f4:89:8e:b5:aa:b9:75:9b:c0:ca:72:bd:0c:0e:7a:
                    ac:3b:60:58:b6:99:13:e4:2c:22:4b:69:66:54:2a:
                    de:31:4e:cc:56:72:82:83:c4:48:c3:7e:f4:fa:5b:
                    36:52:8d:fc:f9:1b:e5:f2:f2:1c:0f:5b:41:bf:25:
                    31:51:ee:5e:80:9e:7e:4c:50:be:e5:50:d2:63:9a:
                    3d:94:a5:01:8a:26:1a:70:ad:1a:2c:32:c3:e0:a5:
                    07:85:7f:6f:4f:50:8c:1d:ce:19:0d:23:2a:de:ae:
                    71:cf:53:16:40:8c:47:dd:cf:22:ac:d3:14:b8:02:
                    84:0a:d2:22:df:6c:b4:ef:30:c2:93:c7:ce:af:4a:
                    7a:1f:74:c0:0a:73:97:a1:b0:64:e2:1f:da:e4:d0:
                    06:68:49:7a:cf:50:e9:77:39:59:0b:1a:e5:ed:8c:
                    c7:cd:ba:23:95:19:0b:8e:03:51:13:43:f7:fb:90:
                    9d:d1:78:0b:da:53:96:b2:49:ca:db:5b:c8:47:f2:
                    5c:5d:f9:3d:1b:96:97:e6:c5:7f:fe:a1:7e:04:17:
                    41:97:eb:ba:09:86:4e:d6:2f:ef:9b:40:f5:5f:83:
                    b0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D1:5E:AD:76:F9:06:2A:EF:10:4A:94:86:C5:F4:AE:FA:80:A8:C3
            X509v3 Authority Key Identifier:
                keyid:84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/267A24046E7D11EAADB09659C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.90.0/23
                IPv6:
                  2001:dd8:10::/47

    Signature Algorithm: sha256WithRSAEncryption
         89:dc:c2:ca:66:8d:71:f7:47:74:5e:fe:04:f3:1f:e4:ae:e8:
         01:b8:d8:21:29:51:bb:99:c5:d0:26:cc:2a:e7:78:85:46:e5:
         2c:70:ca:14:b3:bc:ff:77:22:c2:04:dd:5a:f9:4e:f9:1a:ca:
         94:fa:06:8e:4b:7d:60:29:92:1d:99:1a:d3:ba:1a:67:ef:b1:
         a3:d4:cc:15:e8:9c:98:b6:0e:ab:15:89:e0:66:fd:32:3e:0a:
         9b:73:49:64:22:f0:33:b7:39:2e:41:11:64:e9:1d:70:ee:ee:
         a4:e6:a7:16:8a:1c:d1:95:40:91:7d:1f:e5:fd:57:6e:4f:db:
         c5:03:59:0f:8e:96:9c:b7:d1:b0:bd:d9:66:de:9d:27:99:0e:
         d4:36:29:16:2d:e9:22:ba:cc:97:07:a2:41:59:dd:cf:77:c8:
         06:b3:1d:1d:7c:2e:0a:2d:49:fd:32:84:47:a3:c2:0d:7a:34:
         9c:b3:13:6b:98:35:67:71:eb:61:62:83:20:b5:39:29:05:11:
         00:30:ef:b4:3d:09:eb:50:d8:28:90:fb:96:ef:ad:94:a2:76:
         79:35:84:f2:2c:58:8f:03:6f:84:ee:66:e3:15:a6:6a:ac:b9:
         a9:5b:e5:96:d8:f9:7c:91:0a:4b:b3:63:f0:9c:88:02:a2:d7:
         b3:08:cc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:05 2026 by rpki-client