Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/4FF63D680FE911F1BED32952083D8C67.roa
File:                     4FF63D680FE911F1BED32952083D8C67.roa (raw, json)
Hash identifier:          6IzPnI4tAt0K3ECmTRW8kww4HZlafQx4SrWFoUJ/Q8s=
Subject key identifier:   64:76:57:7B:48:08:67:65:75:8A:0B:2B:AB:03:4D:A7:E4:E2:D1:66
Certificate issuer:       /CN=A9116372/serialNumber=535E743439F49CFBFD48E0EF57E6FA7D4B311AAF
Certificate serial:       05
Authority key identifier: 53:5E:74:34:39:F4:9C:FB:FD:48:E0:EF:57:E6:FA:7D:4B:31:1A:AF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/4FF63D680FE911F1BED32952083D8C67.roa
Signing time:             Sun 22 Feb 2026 12:23:37 +0000
ROA not before:           Sun 22 Feb 2026 12:23:37 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     153739
IP address blocks:        151.158.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.crl
                          rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116372, serialNumber=535E743439F49CFBFD48E0EF57E6FA7D4B311AAF
        Validity
            Not Before: Feb 22 12:23:37 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=699af549-9161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:81:a5:db:c5:07:ff:b8:66:08:00:17:50:50:
                    4a:a5:5e:84:8d:9f:bb:9c:d9:24:8b:64:cf:8f:18:
                    ab:7b:1a:05:53:a8:8a:fa:d0:a0:74:f7:fe:65:b0:
                    d5:25:65:be:71:66:d5:c7:4a:96:90:77:5e:43:d5:
                    2c:f3:e8:61:2d:d2:09:72:d2:b2:53:8f:99:fa:f9:
                    5d:6b:f0:b8:10:1a:3a:7b:53:f2:af:8b:bf:1d:5c:
                    98:f3:1e:6b:f2:91:30:33:07:c2:2c:a2:94:5a:b0:
                    36:db:b4:06:1e:77:61:ba:e4:4d:40:3b:f5:f7:b9:
                    17:69:1f:dc:73:6d:55:a0:69:e5:18:cc:43:6d:7a:
                    a6:12:ea:9e:61:df:ee:ec:bb:53:32:c2:50:7b:e6:
                    ad:a6:7e:b6:e2:7e:b3:33:0f:e3:8c:85:c9:0b:c2:
                    b8:fd:f4:ab:8a:9e:b2:bf:8c:e0:7c:84:0c:e8:00:
                    26:f7:e4:f6:c4:05:fc:e4:d3:b1:fd:9c:72:64:73:
                    94:61:a3:1f:70:91:d3:fc:36:89:88:68:c4:81:f0:
                    19:ed:68:b9:c5:31:c1:70:08:d3:a5:ef:8e:fc:99:
                    6f:e6:a3:51:c4:e0:51:c1:e1:27:b3:f5:94:c6:66:
                    0b:52:d6:2d:b7:93:9a:8a:e6:3d:ff:5a:22:90:25:
                    d6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:76:57:7B:48:08:67:65:75:8A:0B:2B:AB:03:4D:A7:E4:E2:D1:66
            X509v3 Authority Key Identifier:
                keyid:53:5E:74:34:39:F4:9C:FB:FD:48:E0:EF:57:E6:FA:7D:4B:31:1A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/4FF63D680FE911F1BED32952083D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:ba:92:56:f0:ac:28:fd:4c:22:91:ec:f4:36:c9:8e:c6:ae:
         88:91:7e:6e:9a:c6:93:a1:70:09:69:89:1d:53:94:36:b2:fd:
         18:55:41:fb:e9:d9:d7:fe:b6:1c:5f:7b:a9:08:b7:53:54:a6:
         bf:de:0a:de:44:83:98:c5:c5:5a:26:cf:98:4c:b0:d5:43:16:
         49:2d:25:cf:36:a6:ba:38:a6:53:46:15:7a:92:ae:23:90:8d:
         14:c1:b2:1d:d4:35:c2:b1:cd:8d:77:ec:80:d1:04:18:7d:6b:
         05:7b:db:03:3e:4d:54:d2:bf:78:99:7a:20:96:7a:4b:f0:58:
         05:57:77:a4:9e:9f:4a:3f:03:4c:05:b0:41:f4:07:32:7e:bc:
         d6:5d:7b:26:9b:9e:33:a8:11:91:55:14:f2:10:65:90:74:9e:
         14:d1:a3:f8:fe:4e:83:a6:02:76:1d:36:3d:ae:5c:d1:07:db:
         e9:40:7f:d8:f1:d6:7f:40:bd:ca:13:c3:ce:56:50:eb:94:ac:
         29:80:90:9a:53:9c:9f:01:d0:16:f3:7d:2d:9b:64:e8:40:b5:
         75:c5:4a:cd:6e:33:86:fd:66:a3:16:9e:50:41:e7:75:cc:0c:
         1e:b7:a2:02:43:6b:1d:ab:46:6f:bb:b6:66:67:88:dc:45:ed:
         43:01:1f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:35:34 2026 by rpki-client